This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
File:                     UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft (raw, json)
Hash identifier:          ZGejGzHIAfNP6o4J6NGnnAYZpVyXW1669UD1VrfK9C0=
Subject key identifier:   A0:5D:21:FE:B7:0E:9A:B0:E1:72:6B:DB:58:FF:97:47:7C:D9:EA:E4
Authority key identifier: 50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30
Certificate issuer:       /CN=A913318E/serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
Manifest number:          014F
Signing time:             Sat 03 Jan 2026 03:24:22 +0000
Manifest this update:     Sat 03 Jan 2026 03:24:22 +0000
Manifest next update:     Sat 10 Jan 2026 03:24:22 +0000
Files and hashes:         1: UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl (hash: aWSUnLJznZNeNk4fmMNbr+6s5xb4PLzYl1uUbV0lxJg=)
                          2: 6EAE50E8EBFA11EEA937307AC4F9AE02.roa (hash: J7aNLa3ERRvlZqfhEJCcY2ky3Snav79C7z3716SOcQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl
                          rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Jan 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913318E, serialNumber=500F9200EB86DC5FD06DB786C0CEA452D0CE7230
        Validity
            Not Before: Jan  3 03:24:22 2026 GMT
            Not After : Jan 10 03:24:22 2026 GMT
        Subject: CN=69588be6-cee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:6d:fb:2a:43:e9:c5:ad:0b:a2:2a:83:1e:
                    b1:cb:89:cc:25:5e:1c:12:e3:df:3a:aa:1d:e4:7d:
                    56:50:cd:42:50:b1:57:a3:d3:9f:e5:48:c2:7b:d5:
                    b3:26:53:ec:7d:23:d7:ed:94:10:ed:48:88:ab:94:
                    6c:95:4d:b9:fe:68:c0:73:1d:e7:42:66:9a:6c:cd:
                    f2:59:c0:17:6f:1e:d1:05:8d:30:55:df:12:41:fd:
                    74:0b:3b:c8:d1:85:64:d6:be:9d:da:2e:f5:76:a6:
                    c0:22:7b:6d:0e:3e:be:bc:09:09:b5:8a:a5:ff:36:
                    fd:10:15:e9:27:36:f4:7e:fa:e8:89:29:08:23:e6:
                    cb:e8:8d:a3:26:de:16:d3:c8:8a:07:11:6a:c4:af:
                    b2:95:c5:61:66:95:0c:d6:57:d7:1f:b1:d1:23:fd:
                    38:05:24:78:f9:d9:3a:51:84:28:69:33:fb:70:3a:
                    71:6c:9c:9c:a9:4d:3c:bf:0d:35:18:0b:6e:da:eb:
                    44:60:19:5a:3b:f8:b2:f9:24:e2:f7:86:31:f3:df:
                    21:fc:37:53:29:33:7b:44:d8:b0:f7:7e:59:89:31:
                    37:c0:fa:94:c2:11:56:8f:e8:83:85:97:f0:c5:4c:
                    e2:35:e4:7c:fb:c6:9c:c9:ba:5d:89:fe:03:a1:cf:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:21:FE:B7:0E:9A:B0:E1:72:6B:DB:58:FF:97:47:7C:D9:EA:E4
            X509v3 Authority Key Identifier:
                keyid:50:0F:92:00:EB:86:DC:5F:D0:6D:B7:86:C0:CE:A4:52:D0:CE:72:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UA-SAOuG3F_QbbeGwM6kUtDOcjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913318E/6A90AF84EBF911EE9DA79B77C4F9AE02/UA-SAOuG3F_QbbeGwM6kUtDOcjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:15:ea:cc:c9:17:a3:03:3f:92:b1:de:0a:87:40:02:74:24:
         83:73:38:ac:c0:6b:b7:83:e9:3e:06:37:59:da:b4:17:17:ee:
         e3:21:be:a1:be:f9:f1:74:47:14:73:ff:c8:81:20:84:ce:ae:
         a6:97:44:d0:1f:4d:26:91:6f:94:f2:a5:57:aa:6f:81:d3:3d:
         f0:71:eb:36:6f:6f:d8:c4:80:ba:78:0f:c9:7d:33:be:fd:b9:
         16:91:b5:12:06:7b:b6:39:c8:a0:66:0d:a3:54:32:80:fb:28:
         05:73:c7:0e:27:1e:4f:e0:76:e5:e6:81:f1:a7:76:b8:b7:58:
         f5:7b:b9:52:4f:1f:2b:bb:40:34:e4:bd:23:ce:60:be:68:1a:
         61:0d:ea:31:09:52:1d:24:ab:44:b6:b3:d1:64:06:ae:5f:f6:
         79:02:cd:7b:a1:6f:b3:e0:f5:96:c2:a7:40:b0:da:da:ea:e8:
         4c:89:c0:15:74:01:1b:79:79:1a:83:43:6d:22:f4:2b:f5:de:
         ad:a3:4e:1b:b8:46:66:47:20:03:84:9e:4d:b2:93:df:7e:92:
         b5:76:71:34:ac:ba:1a:96:dd:4d:02:ed:24:87:d4:c9:15:10:
         a4:89:43:b0:4f:1f:d7:2e:85:30:a0:03:f8:df:73:f6:fb:df:
         31:04:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:55:03 2026 by rpki-client