This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          UOqVpAGwopow6Gs5gFUxmBQXB7QNHv7lf1/0aEvkdnc=
Subject key identifier:   3D:7B:7F:A8:4C:30:61:D0:C0:69:FE:F9:0B:1D:C3:87:E4:93:48:87
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          0256
Signing time:             Thu 29 Jan 2026 00:58:59 +0000
Manifest this update:     Thu 29 Jan 2026 00:58:58 +0000
Manifest next update:     Thu 05 Feb 2026 00:58:58 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: IWlcbZn5qLiKFqv1wzmn2Vw/V/4M/hIiOffm3vFCT9E=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: RTJgvsbwzmrs85A6QasoAHRw5V84DsstoScVFoVQEIM=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: rtm7vvm7OiRTQ81QyLkzE6dolT8d+wgU5NT1/xcizMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 00:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Jan 29 00:58:58 2026 GMT
            Not After : Feb  5 00:58:58 2026 GMT
        Subject: CN=697ab0d3-f96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:aa:a4:ea:88:8c:b0:8a:99:6a:35:d9:f9:
                    f5:87:a2:91:74:0a:57:68:19:34:d5:e0:9f:db:1c:
                    e2:67:8c:3e:8f:5a:0c:d6:f5:ff:a0:f4:a8:7c:0b:
                    29:45:59:ba:46:e6:57:25:f5:44:64:e3:d4:ab:5a:
                    4f:f1:e4:ef:25:8b:b9:9e:8e:8e:1c:69:7e:4a:c6:
                    d4:89:8b:8a:c4:aa:ca:77:5f:5a:b9:12:da:cc:4f:
                    de:69:7a:79:fd:a5:ba:08:4a:0a:c9:c1:7a:d3:a7:
                    5f:f3:61:f1:39:5b:1b:53:95:4a:09:09:4b:f9:19:
                    0e:17:48:26:70:21:6b:35:16:b6:e1:cc:f1:07:ef:
                    a5:0d:22:11:03:ed:fa:de:df:2b:ee:b2:52:0e:b0:
                    3d:af:2c:8f:17:05:c2:d4:5f:de:6f:05:86:ec:7f:
                    e0:45:4d:c6:ab:32:91:7c:6d:13:60:90:a4:44:47:
                    f0:d4:41:05:4c:04:46:30:af:3f:90:da:1e:a5:24:
                    2e:46:0c:bb:72:d8:06:97:ff:2e:de:21:28:b4:45:
                    dd:d4:b5:c7:7e:8a:0d:95:1b:45:a1:c8:55:9c:de:
                    b7:3c:e9:9c:32:6d:cc:42:48:f0:89:41:d3:c6:ad:
                    54:ec:18:d8:f6:d6:31:e2:ec:1e:69:f5:15:fc:d8:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7B:7F:A8:4C:30:61:D0:C0:69:FE:F9:0B:1D:C3:87:E4:93:48:87
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:58:3f:cc:a8:e3:81:17:28:6b:16:8b:13:05:d7:ac:8a:3e:
         33:d7:4c:e7:2f:ff:19:bc:19:f9:fa:d8:e9:4d:91:1d:83:73:
         7b:75:10:32:ef:b9:9b:ae:a3:b0:81:70:de:d6:20:d9:db:b5:
         dd:ee:80:37:f0:01:2c:72:ac:6a:9c:fd:ad:7f:2f:1c:6c:b3:
         c5:0e:85:e6:9b:3b:14:92:2d:20:c1:ef:3f:6a:39:f0:02:3c:
         cb:de:8f:ad:2f:16:93:96:9d:67:3d:cc:94:39:fe:13:20:37:
         97:ab:9f:99:e6:48:ce:71:28:1f:60:35:ea:59:bf:97:bb:2b:
         c4:83:49:94:78:97:00:9d:d5:9a:e8:f3:01:42:1e:7a:f3:85:
         b2:b6:60:af:62:ee:e3:50:79:28:f4:17:d3:0b:be:71:5c:d2:
         72:8b:61:e2:59:a2:f0:77:46:de:8d:7c:2c:b4:08:4f:ed:b8:
         d3:3d:5f:78:fe:54:90:fc:b8:70:87:4f:5a:70:0b:d4:f2:e0:
         cf:b7:00:29:73:cd:47:9f:f5:e1:22:d9:68:29:d1:79:c9:6c:
         d7:e1:eb:4b:7d:4e:17:7d:60:d5:14:6d:36:d2:98:96:00:77:
         ca:53:9d:5f:b6:a3:fa:07:e8:a9:83:d1:cf:ef:fa:58:c2:26:
         04:09:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:24 2026 by rpki-client