This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          s8glyboTnumqKespF1gXKqGOxSu7lvxlj0ULM+bs2kg=
Subject key identifier:   13:07:13:9E:B3:7F:59:DD:83:EC:B5:E3:77:23:75:CD:AE:0B:6E:43
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       03CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          03A9
Signing time:             Fri 16 Jan 2026 23:57:00 +0000
Manifest this update:     Fri 16 Jan 2026 23:57:00 +0000
Manifest next update:     Fri 23 Jan 2026 23:57:00 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: dzVis6aU6jqvF0Xr+caJl6Ck0U4AtCtcBE0OqhhdMv8=)
                          2: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: OIuIkx6LNP541+ogHj0tTuwVsOI11PX4TfWyw7GN2I0=)
                          3: D9750E78F01111EFB1720645C4F9AE02.roa (hash: +Yz6orAM99P+kFeVfZoKus8hCh0ONcQuiBI4/E0rf1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 23:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: Jan 16 23:57:00 2026 GMT
            Not After : Jan 23 23:57:00 2026 GMT
        Subject: CN=696ad04c-5fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:c3:e2:22:e7:77:9e:13:d7:af:91:d1:8d:
                    44:10:47:a3:dd:9f:09:6f:43:5c:c2:32:a6:96:be:
                    1c:f0:2d:57:9d:63:06:8b:42:c2:4d:79:e2:92:11:
                    5f:a0:ec:aa:e6:d6:41:02:0f:61:af:b1:91:90:45:
                    60:ae:7b:87:84:27:a3:15:d0:9a:8f:ba:35:be:08:
                    3c:3c:8b:33:a9:af:9c:0e:ba:8b:21:d2:be:60:17:
                    38:53:61:8d:d6:4c:b7:d0:10:b5:c2:37:f0:be:c4:
                    f0:52:5c:be:54:7a:8d:8a:37:60:96:4a:df:e9:90:
                    2e:58:9f:04:9e:4e:a6:18:2b:05:51:8a:3c:ad:8d:
                    53:15:2f:70:39:a1:35:29:b6:75:db:cd:8a:ae:3c:
                    83:c5:93:cf:ce:95:74:5f:7e:7f:81:07:1d:30:3c:
                    ac:fc:7d:fe:40:f7:26:e6:69:75:f0:30:00:35:fa:
                    19:59:47:de:1b:7d:7e:5a:43:1d:97:84:29:aa:19:
                    a1:cf:a7:a9:1b:48:b0:ba:17:ee:96:35:28:67:d6:
                    5e:15:eb:95:5f:90:13:63:77:a4:8f:01:d9:51:a4:
                    53:51:fe:a5:10:81:80:1c:5b:cb:dc:f0:e7:8f:a3:
                    e6:4e:32:f5:a3:6d:a8:69:4e:7d:b2:a0:06:86:d9:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:07:13:9E:B3:7F:59:DD:83:EC:B5:E3:77:23:75:CD:AE:0B:6E:43
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:92:4f:94:aa:3e:b6:78:0f:ec:e5:f8:fb:c8:48:b1:1a:
         00:d0:02:c7:f9:8f:6b:aa:e4:b4:2c:8e:65:ff:b1:d0:d7:c5:
         cf:c3:d0:5e:e6:d6:e5:64:0e:82:b1:c0:50:6f:fb:c8:07:73:
         73:89:e2:2c:04:2c:43:6c:8a:af:28:f1:d2:37:12:8b:ac:41:
         ec:12:22:19:f2:4d:ab:c1:f5:db:c0:bf:e7:77:d7:2e:13:9d:
         d4:cb:27:4c:ef:c0:44:d8:f8:c4:a3:6f:c2:ad:34:53:ce:c6:
         d2:8b:4e:73:83:f4:ed:55:27:a1:bd:d2:c2:4f:32:2f:d3:c7:
         fb:c9:03:56:1e:16:ca:57:d7:70:56:d6:07:4a:35:0e:92:61:
         69:a6:76:58:09:19:f7:49:45:12:8f:f5:a0:cc:85:da:a9:e3:
         92:69:44:a6:0c:2e:54:f7:84:3b:c5:0f:a3:7e:31:a4:63:f5:
         a2:ba:18:fd:5b:0f:64:4f:cf:3c:95:82:10:d8:1a:d1:27:53:
         54:5f:cf:39:1c:b4:c5:01:47:80:95:ce:d2:e9:67:04:a3:eb:
         6d:ef:e0:fa:c5:1c:ca:8a:36:a4:0d:9b:ce:6e:8f:9d:f6:1a:
         13:2f:4e:bf:0c:82:06:6b:68:43:c9:04:2c:14:eb:63:de:ef:
         56:e4:50:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3
NEQ2MUNFOEIwHhcNMjYwMTE2MjM1NzAwWhcNMjYwMTIzMjM1NzAwWjAYMRYwFAYD
VQQDDA02OTZhZDA0Yy01ZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCTD4iLnd54T16+R0Y1EEEej3Z8Jb0NcwjKmlr4c8C1XnWMGi0LCTXnikhFf
oOyq5tZBAg9hr7GRkEVgrnuHhCejFdCaj7o1vgg8PIszqa+cDrqLIdK+YBc4U2GN
1ky30BC1wjfwvsTwUly+VHqNijdglkrf6ZAuWJ8Enk6mGCsFUYo8rY1TFS9wOaE1
KbZ1282KrjyDxZPPzpV0X35/gQcdMDys/H3+QPcm5ml18DAANfoZWUfeG31+WkMd
l4Qpqhmhz6epG0iwuhfuljUoZ9ZeFeuVX5ATY3ekjwHZUaRTUf6lEIGAHFvL3PDn
j6PmTjL1o22oaU59sqAGhtllqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMHE56z
f1ndg+y143cjdc2uC25DMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np
THA4UlNlYkxfdDkwMWh6b3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCk8pJPlKo+tngP7OX4+8hIsRoA0ALH+Y9rquS0LI5l/7HQ18XPw9Be
5tblZA6CscBQb/vIB3NzieIsBCxDbIqvKPHSNxKLrEHsEiIZ8k2rwfXbwL/nd9cu
E53UyydM78BE2PjEo2/CrTRTzsbSi05zg/TtVSehvdLCTzIv08f7yQNWHhbKV9dw
VtYHSjUOkmFppnZYCRn3SUUSj/WgzIXaqeOSaUSmDC5U94Q7xQ+jfjGkY/Wiuhj9
Ww9kT888lYIQ2BrRJ1NUX885HLTFAUeAlc7S6WcEo+tt7+D6xRzKijakDZvObo+d
9hoTL06/DIIGa2hDyQQsFOtj3u9W5FCT
-----END CERTIFICATE-----
Generated at Sun Jan 18 22:11:13 2026 by rpki-client