This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File:                     UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier:          vxAUZU1EBgTQFYT6zOmeCNYvZ+1V6NW1ze6PyWSJGdg=
Subject key identifier:   5C:31:CE:1E:B6:C9:05:CF:30:F4:4A:F1:DC:34:06:9E:2C:E3:83:C1
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer:       /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial:       103E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number:          1035
Signing time:             Sat 10 Jan 2026 17:07:41 +0000
Manifest this update:     Sat 10 Jan 2026 17:07:41 +0000
Manifest next update:     Sat 17 Jan 2026 17:07:41 +0000
Files and hashes:         1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: tPm9D4F+rSzFOnkkf01uPGMEfzzoJdGk7kUKNHPqI5U=)
                          2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4158 (0x103e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
        Validity
            Not Before: Jan 10 17:07:41 2026 GMT
            Not After : Jan 17 17:07:41 2026 GMT
        Subject: CN=6962875d-b562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:7d:86:7a:c3:8e:f8:06:6f:f4:dc:52:3c:
                    48:1c:14:8b:a5:9b:57:10:53:7e:18:7c:60:14:de:
                    b4:da:5a:73:32:fb:97:1f:a2:b7:d7:b0:ea:98:3a:
                    d0:cc:80:bd:47:91:9f:ff:8b:97:3e:7e:56:cb:d6:
                    a6:82:d2:23:26:34:db:f2:75:15:fa:31:39:df:77:
                    d0:b1:ac:fc:85:d9:71:c4:8b:ca:75:e3:b5:ed:52:
                    d5:05:4e:dc:42:84:2b:55:ea:39:92:cd:a4:12:a0:
                    b1:d2:42:ca:77:4a:16:c4:c8:91:f8:72:0f:0a:f6:
                    05:95:85:69:ff:e3:c8:7b:0b:95:ba:4a:ef:9c:0f:
                    f3:92:e2:41:ea:4e:02:c5:89:78:cf:9f:0f:13:79:
                    cc:d6:22:42:cf:0c:04:a7:01:ee:41:54:5b:75:86:
                    b5:85:64:a9:c6:79:a0:78:8c:be:80:ef:51:01:ab:
                    c6:dc:94:34:4e:c6:dd:66:86:b1:6c:aa:85:19:0d:
                    65:23:0a:16:4f:28:16:56:ed:5f:17:2d:e5:bd:44:
                    5d:93:20:b6:8a:0c:72:82:ca:07:91:a1:5a:af:1f:
                    cb:64:80:fd:75:a0:ba:0d:10:2e:8f:6d:18:51:8b:
                    f7:13:2b:ed:b5:53:0e:7e:4f:17:b8:48:23:d1:4f:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:CE:1E:B6:C9:05:CF:30:F4:4A:F1:DC:34:06:9E:2C:E3:83:C1
            X509v3 Authority Key Identifier:
                keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:88:54:47:69:60:4f:67:bc:54:e7:f0:8c:a9:95:9d:db:50:
         fe:39:4b:c1:c1:66:6d:18:f9:70:41:80:3b:62:87:38:62:5b:
         1b:f2:33:cb:e1:41:0e:39:f2:c8:4b:3d:7e:dd:03:ac:18:6f:
         c7:e7:37:4c:8d:d3:89:29:cc:2d:43:a8:58:4b:1a:30:83:d9:
         0d:e1:77:f1:b1:b9:0d:d2:3c:e4:6e:58:90:09:32:67:b6:7a:
         7a:3d:20:6b:7a:e1:6b:e7:c2:06:2a:cc:09:12:be:ef:d4:ee:
         9a:c3:d3:73:b5:da:57:46:30:1d:21:3e:cc:58:8e:c0:8a:7d:
         2b:b6:8e:e9:8b:60:af:75:c1:31:4c:b8:e7:5a:f5:b7:65:a5:
         2a:ca:94:cd:1c:72:a9:0f:c8:be:1b:c3:e8:84:4b:23:e6:b4:
         aa:a8:e6:68:95:64:3f:d3:c6:78:d2:4c:a2:45:4a:86:b4:a9:
         1a:e1:44:9f:97:e5:1d:e1:1b:4b:71:2c:cf:11:58:f0:f7:99:
         44:3e:51:06:9c:5f:69:99:35:fa:ff:0f:c1:fd:d3:4f:ad:fb:
         f5:23:da:b1:05:07:99:72:fd:8f:b4:19:d9:b4:bc:75:cc:53:
         8b:84:31:08:c5:cc:73:73:d0:fd:80:b0:40:20:9c:6d:59:6f:
         0e:5a:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:30:12 2026 by rpki-client