This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          UktT4H5Z0YRsBx29vF+Z/AoVd+EX84pda5Yusx8HhUQ=
Subject key identifier:   E0:EA:0A:8D:42:1D:E0:75:F3:2B:39:9F:99:96:F1:2C:CB:D2:4C:AD
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          0152
Signing time:             Tue 20 Jan 2026 15:50:29 +0000
Manifest this update:     Tue 20 Jan 2026 15:50:29 +0000
Manifest next update:     Tue 27 Jan 2026 15:50:29 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: ZoMA35BoLdt4NDE+Fiyr+PgXi1JrumDhE9xIi4RfJU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Jan 20 15:50:29 2026 GMT
            Not After : Jan 27 15:50:29 2026 GMT
        Subject: CN=696fa445-ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:ef:d0:e1:ae:8d:36:45:7d:a6:4a:1e:20:
                    4c:b8:c4:d8:84:c4:89:bb:50:b5:81:73:56:65:e5:
                    d2:9d:43:bc:50:7a:32:d1:82:44:29:16:a8:27:f7:
                    cf:b1:2c:b0:e5:d8:89:52:7c:49:9c:16:46:e1:b4:
                    49:0e:5c:fd:27:22:96:9b:49:7a:53:f2:75:1b:6a:
                    29:1a:ea:09:1b:ae:72:ce:64:f5:9d:96:73:08:a8:
                    46:99:48:6f:a6:a2:27:cf:80:d0:6f:cd:99:a4:78:
                    54:6a:ee:dd:ed:80:9e:ce:0d:e4:6e:fd:bb:da:1c:
                    e2:e3:a0:be:4b:fe:c4:fc:4b:3e:35:7b:7d:ca:47:
                    0b:6e:6c:51:9f:13:47:35:b5:0f:0c:8b:f0:cc:f3:
                    7f:a0:a3:05:d6:8e:c5:44:e0:fe:e5:78:ed:66:97:
                    42:0b:9b:de:09:00:35:73:ab:47:5d:d3:f4:93:ca:
                    30:d0:2c:22:ac:1e:d5:9d:7e:92:50:74:96:98:fe:
                    01:c1:b1:9c:db:c6:b9:3a:e1:04:4c:56:bd:d2:ae:
                    f7:fc:45:00:a2:33:78:0a:95:a3:66:33:f4:15:40:
                    cf:17:33:55:fa:94:74:fe:f0:01:2d:e3:d3:5a:d2:
                    9f:26:f9:44:8c:e4:d9:4d:47:80:a5:78:10:08:5d:
                    d5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:0A:8D:42:1D:E0:75:F3:2B:39:9F:99:96:F1:2C:CB:D2:4C:AD
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:32:98:4f:d1:09:8d:e6:55:d8:0b:3b:cf:49:10:da:23:
         fb:bd:5c:dc:da:c8:2f:fe:c3:1e:b6:4e:47:93:fb:7b:30:fe:
         75:19:f7:9a:03:1c:ae:f6:b2:f4:d6:36:c3:81:8c:a4:15:a4:
         c9:dc:66:08:79:83:87:57:02:b5:ad:00:ab:fe:ac:00:89:b5:
         0e:39:7c:23:cd:79:13:a8:d5:1e:13:61:82:f1:10:d1:95:03:
         96:ba:d2:03:5f:de:0f:20:2b:0e:78:19:61:b7:a3:84:ad:8c:
         7f:c2:72:7d:a6:7d:77:07:9b:7b:9f:96:f6:95:a3:7f:53:ce:
         85:1c:65:8e:9e:db:e3:7c:53:e6:a3:49:0c:3e:30:a7:7e:03:
         e9:be:d4:f2:1f:af:a5:8a:be:af:d6:dd:ac:52:62:8c:c1:aa:
         f1:78:b9:dd:b1:32:e1:a4:99:6e:64:d1:bc:3f:3f:63:23:9f:
         d8:17:04:fc:e9:9e:ba:ab:65:72:db:a2:68:fc:0d:fa:ab:01:
         62:d9:94:dd:87:96:9f:17:05:ef:86:9e:af:24:94:63:35:51:
         c8:70:2c:6c:01:a5:1d:52:81:46:8b:b1:85:8e:c7:1a:e5:78:
         4f:a3:a1:06:e7:35:67:96:4b:20:e9:d5:84:da:67:a5:cd:cd:
         e7:99:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:23 2026 by rpki-client