This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          muMxBRpc7UnFhWmOpA3uZla1pZgVSRpQMhQLJmE3Pbo=
Subject key identifier:   28:CF:EE:07:2C:A9:2F:C9:A2:54:31:A2:D0:F3:53:BC:00:54:97:37
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          6F
Signing time:             Sat 17 Jan 2026 05:56:45 +0000
Manifest this update:     Sat 17 Jan 2026 05:56:45 +0000
Manifest next update:     Sat 24 Jan 2026 05:56:45 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: UFBgJI07GV33mb9mrsQpGvgJfVs6XF+tVNmbBXGRTTY=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 05:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Jan 17 05:56:45 2026 GMT
            Not After : Jan 24 05:56:45 2026 GMT
        Subject: CN=696b249d-b02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:f6:3b:70:fb:39:2d:ff:e0:0b:d4:57:12:
                    a6:da:38:71:1d:55:10:71:16:01:54:f6:23:d4:5b:
                    46:2d:e2:13:db:11:1c:7d:5d:81:e1:91:a5:29:67:
                    8f:33:67:6d:cf:37:ec:a2:bd:d0:3d:14:9e:50:44:
                    73:c8:66:17:78:f5:61:82:55:88:3e:46:3e:db:35:
                    e9:f3:ab:c2:52:73:0f:7c:ab:98:09:c3:7d:3a:ca:
                    ac:41:28:da:87:1c:76:66:71:4c:1b:10:51:04:67:
                    dc:1c:dd:9f:7b:5f:a8:75:e2:e7:cf:8d:ae:db:97:
                    b7:62:d1:40:c9:cd:ce:1c:93:e9:73:aa:8f:f8:40:
                    fc:fb:57:1b:1a:f2:04:61:3d:f1:96:dc:99:ff:ea:
                    32:fe:47:5c:dc:cb:4d:92:c4:bc:19:43:3a:56:dd:
                    98:cb:67:d0:20:59:8b:43:84:65:d7:b6:7c:03:b3:
                    3b:e2:fb:7b:9d:8a:a2:5f:8f:9f:ba:44:a5:a8:9e:
                    2c:e9:01:44:e3:c5:e1:9e:5b:5c:bd:3b:62:cb:8c:
                    0c:20:29:90:ab:9f:80:c2:b8:4d:f6:3c:f3:4b:47:
                    8c:8a:3a:50:7c:d2:40:48:c6:4e:d7:1d:5b:6e:8b:
                    fa:95:2f:f1:a8:7a:42:ae:b9:85:3c:f4:19:79:53:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:EE:07:2C:A9:2F:C9:A2:54:31:A2:D0:F3:53:BC:00:54:97:37
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:2a:96:5e:b9:15:6d:8d:59:7c:41:6a:51:01:68:bf:14:
         b6:51:f5:27:b7:9e:78:bf:3d:a8:b1:70:f1:d6:05:4c:26:d4:
         cb:e4:be:10:3a:c7:63:a6:0f:ce:79:48:98:35:d2:e6:d7:8c:
         16:d0:65:aa:0b:1f:a9:38:71:82:2c:f2:5a:f2:93:4f:4d:cb:
         2e:ff:1f:3b:fc:0c:71:70:bd:f5:ba:80:f7:2c:0f:37:a7:13:
         1b:34:3c:49:34:d1:66:61:26:fe:84:cc:76:29:d6:c3:14:e5:
         cb:2c:19:6f:ac:58:d0:ae:fc:4e:d0:8b:98:8c:06:9d:03:a9:
         a4:07:d6:09:3b:5c:e3:25:f5:44:9a:79:30:f4:2c:7a:84:a2:
         94:d0:cc:c5:ce:8f:ae:29:fa:eb:df:0b:6e:db:19:b0:4d:00:
         fb:26:7f:69:9d:7e:dd:12:be:5f:21:e1:85:0e:0b:5e:86:12:
         94:cb:dc:86:f7:7e:fe:84:ef:c4:4f:dc:5c:12:81:79:60:59:
         d7:6a:27:e0:49:d1:dd:c7:34:d5:79:b0:aa:89:77:1a:2d:6a:
         88:20:8a:f2:7e:ec:fb:9e:7e:fb:93:63:db:a7:a6:97:9c:3e:
         3c:6a:51:84:92:ad:15:17:04:5d:ca:67:61:b6:5a:69:8e:b7:
         e8:0f:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:25 2026 by rpki-client