This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File:                     UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier:          mm5OY0i2x2RWsc5iHJrRGarTkBlVGJUUoW2y2wTT8so=
Subject key identifier:   D3:90:3B:68:CA:05:54:67:07:30:C7:B6:18:06:18:39:A0:8D:4F:83
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number:          04D4
Signing time:             Mon 26 Jan 2026 23:04:17 +0000
Manifest this update:     Mon 26 Jan 2026 23:04:17 +0000
Manifest next update:     Mon 02 Feb 2026 23:04:17 +0000
Files and hashes:         1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: rf02iPebGNoUIpVJGlItl4cP0A/qZquxk7WZ5bIh61M=)
                          2: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: LFGX/jVfbWAISfHlUtm9x1tFR24hTnDvuTIOnrEtJuY=)
                          3: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: 7TAaE/8fhVJTw/M9q10IxoBr1ZsLCV+PEces+u8jYss=)
                          4: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: OehIWzlmpLn+tHX2OGp9aRhBba8Lt99w8j7PUJDnUtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Feb 2026 23:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Jan 26 23:04:17 2026 GMT
            Not After : Feb  2 23:04:17 2026 GMT
        Subject: CN=6977f2f1-e79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:36:11:3a:e8:c8:3d:da:6f:5b:2a:c3:7b:
                    46:97:18:a7:15:0a:93:5b:9f:1b:ca:fa:69:2d:b4:
                    1c:20:1d:66:31:f3:b6:06:4c:91:db:f7:67:97:61:
                    8f:b5:65:8e:a9:20:ec:d9:dc:c5:d5:c4:eb:31:78:
                    41:6b:c9:77:6f:4b:7f:64:d1:ff:fe:87:92:14:70:
                    93:02:ad:e2:2c:3c:66:e4:d6:f6:96:38:81:be:53:
                    9b:7d:2c:74:be:2d:11:42:d7:b2:db:3d:72:71:e5:
                    ba:c7:44:c8:d6:d6:a5:4f:ea:70:d1:06:82:e1:2f:
                    da:bc:7b:41:58:b1:d7:bb:6f:eb:1d:4b:f3:aa:57:
                    28:5e:72:07:e8:32:2e:80:7c:98:2b:e3:e8:10:d6:
                    35:d9:19:c5:80:d6:44:07:74:b8:96:3a:39:d1:d0:
                    56:d6:f9:61:92:1a:a0:16:07:63:75:86:b7:b4:bb:
                    4f:21:b6:2f:4f:bc:94:b3:0b:bf:d7:35:95:ef:b5:
                    98:10:e1:9f:42:51:7d:af:6b:21:23:a0:2b:3b:9e:
                    ce:92:35:1d:ad:0e:da:07:e2:9e:d5:f8:c1:6f:37:
                    a5:35:7d:08:01:9a:c2:89:d3:c1:3d:79:95:a7:25:
                    2c:63:d8:d8:43:af:9a:b2:d7:42:6e:e5:d9:21:54:
                    03:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:3B:68:CA:05:54:67:07:30:C7:B6:18:06:18:39:A0:8D:4F:83
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:eb:8c:37:b9:cd:a1:c5:e8:d3:ba:e0:29:6e:4a:c5:f0:
         74:0d:d1:65:18:a4:f4:de:a1:84:59:b3:fb:8a:68:4d:2a:67:
         a4:b3:90:4c:f2:0f:50:fb:93:73:c8:b3:cc:40:61:f3:97:71:
         82:1f:83:ee:9b:35:81:57:da:84:e5:71:f9:4e:13:14:e9:28:
         8c:ad:20:4a:2d:cc:9b:92:25:2a:58:51:74:a2:a1:8c:09:cd:
         d3:e9:fa:10:bc:81:69:1a:69:dc:8e:e8:bd:2f:08:73:d7:2d:
         27:8b:7c:a8:72:e8:c3:8f:9e:7a:69:b0:b1:71:38:5b:c6:8b:
         1d:23:28:02:28:bc:bc:76:87:32:c0:4f:7f:0a:72:7a:5c:41:
         12:42:67:67:4e:b6:47:1f:d2:62:c2:40:ed:40:0d:17:7e:44:
         5c:17:5a:bc:f9:c0:97:97:9e:78:27:fa:e8:3a:9a:c5:35:b7:
         55:26:38:b5:11:d7:94:36:c5:9c:37:66:28:3f:2e:f0:36:e1:
         82:51:1d:0a:55:67:42:f4:a3:8e:1e:07:4d:c9:8a:a4:b5:94:
         21:49:e3:26:22:e1:29:5b:59:c3:b5:ea:7d:c9:e5:78:df:16:
         a5:a9:5a:6f:06:7e:8f:97:8c:89:a0:47:19:d2:56:7e:a8:7e:
         86:5c:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:38:27 2026 by rpki-client