This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          AvLH6+wrKiZim6SGF3o2wPzZIzyKSpMd81RqVhNjp5Y=
Subject key identifier:   D2:3D:4A:59:E6:C1:E7:74:9F:E9:9E:49:AA:0A:A9:CF:B1:A2:00:0F
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2A94
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2A94
Signing time:             Tue 20 Jan 2026 15:26:29 +0000
Manifest this update:     Tue 20 Jan 2026 15:26:28 +0000
Manifest next update:     Tue 27 Jan 2026 15:26:28 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: LxAlNqFPkfceY01kT/bktTox4s1UYoxotGwVH2X8T+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10900 (0x2a94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Jan 20 15:26:28 2026 GMT
            Not After : Jan 27 15:26:28 2026 GMT
        Subject: CN=696f9ea4-a8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:76:d0:d6:d5:9b:d0:30:bb:b7:d2:bb:cc:
                    5c:a7:36:57:1f:7e:c0:7c:65:85:0d:56:5b:ba:ac:
                    25:8c:b1:75:e7:40:63:54:fd:fa:16:49:8a:a0:f3:
                    26:17:d5:5d:6e:49:f1:08:99:3f:60:ce:b9:6c:fe:
                    50:74:b5:fe:86:9a:44:a2:93:44:be:8f:f8:c6:30:
                    56:d9:f1:e4:a8:e7:18:48:f9:58:90:e8:19:28:97:
                    58:32:d7:d5:aa:25:74:2e:15:26:b6:df:8f:67:50:
                    83:4e:10:23:fa:c0:79:cd:a8:d9:0f:db:43:7f:51:
                    2f:3e:3f:7b:d6:30:71:16:8d:ef:f2:c0:f4:7d:db:
                    47:35:d6:04:8c:51:1b:1c:c8:73:c1:ec:dc:f1:7f:
                    fa:f1:f7:b5:f5:77:82:0e:68:44:35:ab:03:e1:f7:
                    c0:18:78:71:9e:52:d1:98:56:03:56:cf:1a:88:53:
                    9d:8a:3a:6b:18:20:ff:c7:a2:cf:55:62:d6:71:30:
                    ed:06:f4:81:f0:79:9d:7e:76:91:41:7b:c4:8f:41:
                    a3:88:ed:ae:90:a9:84:77:35:0e:7a:e4:b1:be:45:
                    f7:77:21:25:aa:cf:72:db:a0:75:fb:d8:d8:a5:39:
                    31:e8:05:fb:bc:8a:1b:2f:16:3e:2b:0a:ca:a1:da:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:4A:59:E6:C1:E7:74:9F:E9:9E:49:AA:0A:A9:CF:B1:A2:00:0F
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:97:cf:06:09:0b:d3:a2:05:89:35:13:77:5b:c0:e5:ac:b5:
         3b:39:1b:fe:09:66:c6:60:ac:7d:68:63:44:90:9c:7a:26:bd:
         d5:2e:5c:8b:6a:be:f7:29:77:50:45:b9:ee:2d:34:aa:4a:d3:
         1d:6f:f8:e6:a7:57:a6:f5:18:ce:6e:97:58:4d:d0:69:6b:ef:
         c0:c4:60:53:34:29:68:35:29:5e:56:3a:a9:42:a2:9a:16:88:
         6d:1a:cf:79:30:67:fa:30:d3:73:2f:23:8e:38:8e:81:32:c3:
         94:d3:59:8b:ef:60:fd:51:92:1f:ce:26:2f:89:6e:d6:24:86:
         4a:ed:e4:fb:7b:b8:6d:5b:1d:76:63:19:8d:57:40:96:9b:01:
         98:bb:05:5e:54:93:cd:80:6a:99:ec:6e:25:e2:d8:9d:ec:71:
         82:e8:6a:62:19:ad:23:32:91:03:72:99:dd:9c:6d:1e:d5:9c:
         c2:90:cd:be:9c:73:69:68:b1:81:31:9e:2c:0b:44:ca:0b:0c:
         b0:fa:98:2a:b6:ec:2c:91:58:64:51:d1:1b:21:98:27:02:f4:
         48:25:d5:cf:d9:59:6f:91:1d:52:ac:fb:fe:90:84:d1:51:ed:
         7f:73:5e:20:d0:c9:8a:19:e2:42:89:5a:91:9f:62:aa:45:37:
         0f:11:62:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:22 2026 by rpki-client