This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          siHTRt2n3xOJc9/DXSFGOVRFnY15EnWwCzOJPTPL8OM=
Subject key identifier:   67:8B:F3:1F:2E:87:09:C9:3F:A4:13:73:B6:9C:D5:75:40:C4:1C:15
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       0881
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          0860
Signing time:             Wed 28 Jan 2026 20:12:48 +0000
Manifest this update:     Wed 28 Jan 2026 20:12:47 +0000
Manifest next update:     Wed 04 Feb 2026 20:12:47 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: j/LKBdHFvF+2iU9il1hy83MeZL9MqpCQVcfS2p0fcoI=)
                          2: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
                          4: 13EFC134D76A11F0B167783877D3641D.roa (hash: 0IxIHAg7V0ECmWbcPSWt26zbtuoCWzLzrVMQCmg7qKw=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
                          6: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
                          7: 115A3CD2E3D711F08C30CEA1566F56BC.roa (hash: EcRkwHB8WUli+qj1Kw4DFuoY0lbe6laWFR9Z5FFOq48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2177 (0x881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Jan 28 20:12:47 2026 GMT
            Not After : Feb  4 20:12:47 2026 GMT
        Subject: CN=697a6dc0-9a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:e9:38:19:9f:3b:2f:ce:ac:23:91:cf:51:
                    df:8e:20:47:f1:57:3e:f7:b3:8d:89:3f:7a:a2:f3:
                    76:fb:71:00:23:13:fa:fa:97:b7:e1:11:a8:77:e6:
                    eb:b2:ad:a4:97:1b:53:2a:5f:65:7f:9d:b1:30:3f:
                    35:eb:1f:48:14:6d:63:5b:00:18:07:a3:9f:4e:88:
                    a8:d5:78:09:2e:15:9e:93:41:a5:58:8c:24:ff:2e:
                    3e:a0:c3:22:7a:0c:c1:60:92:1a:c3:7c:5a:a5:e8:
                    8a:2d:95:e6:0f:23:bf:74:da:e2:82:9a:03:64:0e:
                    bc:f2:5c:61:67:f1:ec:dc:dc:bb:29:a1:63:05:bc:
                    67:56:06:7b:ef:55:55:72:08:f1:6d:95:ed:9f:9d:
                    38:6f:92:34:90:2e:3a:4a:eb:2b:f8:cf:c8:8f:78:
                    a4:80:39:ab:fa:09:f8:f5:5b:9d:60:25:f0:b7:d5:
                    83:5f:bc:2c:f1:3d:97:94:16:04:f4:68:24:f2:13:
                    01:48:21:ef:7d:78:d7:b8:ee:0d:18:ef:ef:c3:c6:
                    85:97:ae:bf:50:55:f9:63:1b:3a:9a:5f:df:bb:b5:
                    5e:bc:e0:85:54:ae:03:4a:e3:ac:8b:dc:08:a4:0e:
                    9c:04:ab:a6:b8:73:f6:50:c0:9f:98:2f:1e:d8:2a:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:F3:1F:2E:87:09:C9:3F:A4:13:73:B6:9C:D5:75:40:C4:1C:15
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:f9:0a:ec:da:f2:cc:36:48:e7:02:8c:9a:88:46:0e:21:
         ae:45:c8:f3:34:ab:a3:6b:bc:ee:43:b8:51:a6:26:12:a5:60:
         38:0f:7c:1e:0e:5a:d0:12:e2:9d:d6:ca:cd:32:b4:fd:02:b3:
         94:f2:5b:ed:58:b0:33:f6:76:2d:a1:2f:e7:b5:3b:b1:9d:53:
         fc:a8:fb:74:69:cb:6b:18:b1:cd:bf:f4:0a:d8:74:81:27:07:
         8e:39:5a:05:f9:3e:d4:26:73:56:34:3f:fe:81:0f:45:07:90:
         96:42:7e:ee:4b:c8:22:8d:7b:16:68:be:91:b0:c9:a1:b9:1a:
         b4:af:04:13:19:2f:f5:24:74:5f:26:15:ce:db:cc:49:7e:65:
         25:1a:14:93:f3:f6:58:f3:09:62:6a:4c:1d:c9:24:fe:22:de:
         7a:26:eb:62:e9:33:0b:13:45:4d:93:3d:02:4e:77:83:19:e0:
         74:14:b2:05:85:f7:3d:ef:18:94:90:9c:c2:e8:61:f7:4f:c5:
         21:ca:62:3c:6e:43:50:9a:9e:c2:c7:c8:0e:1b:d5:65:76:8f:
         35:94:b3:08:1d:83:9e:6a:45:0a:22:a2:b6:6c:7c:00:48:fd:
         83:5e:14:7d:3d:96:88:15:18:bf:ed:67:c0:c9:9f:59:9e:34:
         eb:a0:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 01:40:26 2026 by rpki-client