This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File:                     ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier:          YjJHqiGlD9A9zY/k7Yr1GpTRNIXt2oTLYjd8H+mSUps=
Subject key identifier:   60:ED:4F:38:68:2F:6D:B7:81:68:73:91:FB:BF:FC:44:77:10:3A:FB
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer:       /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number:          20
Signing time:             Mon 09 Feb 2026 07:56:22 +0000
Manifest this update:     Mon 09 Feb 2026 07:56:21 +0000
Manifest next update:     Mon 16 Feb 2026 07:56:21 +0000
Files and hashes:         1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: NFjFil+n4wL5tIvPFh68zuxLojk0ABzVBGznL0+zpJc=)
                          2: 5BCC0548D99B11F09EC1D6B265D3641D.roa (hash: ns7eTHStxfQNLhyWTvt0z1m0cdRciLzTPm7YQhUzhwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
                          rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 07:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
        Validity
            Not Before: Feb  9 07:56:21 2026 GMT
            Not After : Feb 16 07:56:21 2026 GMT
        Subject: CN=69899325-d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:cc:90:32:39:4d:1e:0f:ae:c6:39:85:86:
                    69:36:38:d2:70:17:da:87:84:11:34:3b:f0:17:ae:
                    48:df:9e:63:d3:3b:91:00:3a:55:76:42:cf:6e:4a:
                    75:3a:ca:d1:2a:5b:9f:f5:38:7b:8c:ab:fc:f1:92:
                    08:ed:8b:09:68:e4:46:33:b8:b8:98:55:f4:a3:5a:
                    21:7c:cc:2a:2a:13:f3:61:48:71:4c:ca:c5:d3:18:
                    09:9c:3b:c1:de:ef:d2:6b:56:b1:7a:d6:03:50:8d:
                    c6:0b:1f:35:3b:46:e3:fe:71:09:c7:9b:b9:e2:ac:
                    32:b7:65:8b:1d:8f:ae:20:2e:b9:40:94:d2:6b:75:
                    61:a4:70:43:3f:94:06:02:9d:ff:28:7c:1b:e6:81:
                    bb:d0:09:db:ea:34:11:6c:37:b9:f2:25:83:68:7b:
                    e6:9b:aa:e1:71:59:1f:24:09:5c:e1:ee:31:8f:2b:
                    c8:24:3c:eb:46:b3:e6:56:ad:61:98:7b:a9:25:a1:
                    84:8b:22:98:bf:b6:a1:88:f7:78:12:74:88:35:26:
                    de:66:30:01:66:62:df:d6:fd:a0:04:6d:2e:c1:23:
                    95:4e:8e:ec:b0:3a:62:ca:a3:90:88:a4:b9:77:16:
                    78:90:e5:0a:7f:6a:26:48:28:5a:5d:19:e1:cc:70:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:ED:4F:38:68:2F:6D:B7:81:68:73:91:FB:BF:FC:44:77:10:3A:FB
            X509v3 Authority Key Identifier:
                keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:3c:1e:52:0d:1b:e7:52:a0:54:b8:d1:af:48:ee:c9:80:
         da:9a:8f:54:95:6b:76:07:6c:41:40:5d:c5:35:0d:50:b2:04:
         13:63:71:ce:e3:b3:39:3a:cf:a6:23:1b:e8:09:68:5b:39:bf:
         05:af:d3:2e:10:51:a4:85:83:7f:6f:c5:1d:25:e4:ea:a3:ad:
         e4:99:6d:3c:ad:47:d8:a2:10:47:06:88:7a:23:a1:ba:06:a6:
         71:c9:46:b0:9d:f9:f6:4e:f3:32:13:bf:c5:fc:8c:96:62:d3:
         da:28:66:e1:01:45:0f:3a:a2:91:a8:7c:2e:d4:71:f8:c1:de:
         59:8e:a7:96:58:0a:0a:ea:2a:82:d2:27:8c:1c:0d:6b:a8:20:
         65:21:76:11:72:e6:74:55:0b:36:7d:ad:e7:17:38:7d:07:82:
         77:a6:8a:cb:04:1d:84:0d:29:4d:4d:20:26:3e:a1:a4:70:ca:
         44:5b:a3:fa:d7:15:52:b8:76:48:fd:82:2f:8e:b3:57:dc:e8:
         e7:fb:49:fa:cb:0f:25:3b:9e:0a:9a:9d:5e:06:b2:a0:00:04:
         95:0a:78:ca:ec:a9:ca:74:19:ea:22:c0:e9:f7:53:9f:be:31:
         16:0f:5f:29:f0:71:37:15:f1:66:ff:70:2a:e6:e6:79:d0:2e:
         07:d5:98:0d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OEU3QjExMC8GA1UEBRMoQkEzOTQyNzVDNEZGOEY4RUYyMzQ3NDlBMzZGMkExOTEz
OTI3OTU1QjAeFw0yNjAyMDkwNzU2MjFaFw0yNjAyMTYwNzU2MjFaMBgxFjAUBgNV
BAMMDTY5ODk5MzI1LWQ1N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbHcyQMjlNHg+uxjmFhmk2ONJwF9qHhBE0O/AXrkjfnmPTO5EAOlV2Qs9uSnU6
ytEqW5/1OHuMq/zxkgjtiwlo5EYzuLiYVfSjWiF8zCoqE/NhSHFMysXTGAmcO8He
79JrVrF61gNQjcYLHzU7RuP+cQnHm7nirDK3ZYsdj64gLrlAlNJrdWGkcEM/lAYC
nf8ofBvmgbvQCdvqNBFsN7nyJYNoe+abquFxWR8kCVzh7jGPK8gkPOtGs+ZWrWGY
e6kloYSLIpi/tqGI93gSdIg1Jt5mMAFmYt/W/aAEbS7BI5VOjuywOmLKo5CIpLl3
FniQ5Qp/aiZIKFpdGeHMcMUrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYO1POGgv
bbeBaHOR+7/8RHcQOvswHwYDVR0jBBgwFoAUujlCdcT/j47yNHSaNvKhkTknlVsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RTdCLzUxMUIzQjFBRDk5
QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3eU5IU2FOdktoa1RrbmxW
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdWpsQ2RjVF9qNDd5TkhTYU52S2hrVGtubFZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4
RTdCLzUxMUIzQjFBRDk5QTExRjA4RDQ5MzhCMDY1RDM2NDFEL3VqbENkY1RfajQ3
eU5IU2FOdktoa1RrbmxWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADaDPB5SDRvnUqBUuNGvSO7JgNqaj1SVa3YHbEFAXcU1DVCyBBNjcc7j
szk6z6YjG+gJaFs5vwWv0y4QUaSFg39vxR0l5OqjreSZbTytR9iiEEcGiHojoboG
pnHJRrCd+fZO8zITv8X8jJZi09ooZuEBRQ86opGofC7UcfjB3lmOp5ZYCgrqKoLS
J4wcDWuoIGUhdhFy5nRVCzZ9recXOH0HgnemissEHYQNKU1NICY+oaRwykRbo/rX
FVK4dkj9gi+Os1fc6Of7SfrLDyU7ngqanV4GsqAABJUKeMrsqcp0GeoiwOn3U5++
MRYPXynwcTcV8Wb/cCrm5nnQLgfVmA0=
-----END CERTIFICATE-----
Generated at Tue Feb 10 10:37:22 2026 by rpki-client