This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
File:                     uD4K6Pgr-gYejEvHvnPpuANUDWM.mft (raw, json)
Hash identifier:          MH8rw8zGsaGMBkvTdoF7foiyu0+V6qi3qVL4YEcGZZU=
Subject key identifier:   AD:F8:72:59:53:15:16:EE:37:20:78:56:5D:A6:31:98:2F:96:38:17
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Certificate issuer:       /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial:       0399
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
Manifest number:          038F
Signing time:             Thu 01 Jan 2026 00:16:22 +0000
Manifest this update:     Thu 01 Jan 2026 00:16:22 +0000
Manifest next update:     Thu 08 Jan 2026 00:16:22 +0000
Files and hashes:         1: uD4K6Pgr-gYejEvHvnPpuANUDWM.crl (hash: /GfukebWUefRhrQNVgfMrVIRgZZdR07NQrnV9M1hrjs=)
                          2: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (hash: Nwjf8L58YdE8iA7As2NWQ7lGFW1+qSeB07BRTpmwkf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
                          rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 00:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180386, serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
        Validity
            Not Before: Jan  1 00:16:22 2026 GMT
            Not After : Jan  8 00:16:22 2026 GMT
        Subject: CN=6955bcd6-e44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:37:41:41:5a:85:12:3f:41:17:6f:e8:dc:
                    40:8b:c9:3d:2e:48:77:e5:f7:60:33:e4:ae:a0:05:
                    03:5a:14:e1:5d:9f:34:9b:7a:54:bb:47:93:40:19:
                    70:49:f6:dd:e7:64:a7:47:80:83:99:87:f7:01:af:
                    6d:09:a9:59:e4:55:8c:07:57:45:18:03:1b:24:96:
                    43:1d:bd:81:dd:45:9a:a0:46:d3:e8:24:c4:48:29:
                    a2:95:5b:13:ce:d5:0f:2d:22:d7:a2:98:c9:0d:ef:
                    34:5f:1a:2e:72:33:09:d9:4f:35:3f:b5:af:fb:78:
                    f0:28:b9:cb:da:2e:62:b9:31:cf:de:cf:cd:9a:9e:
                    6e:10:41:ba:ee:13:65:f4:96:ee:98:ca:46:4f:a5:
                    53:a7:8f:52:df:27:1e:62:96:42:ef:03:69:b1:27:
                    fe:91:24:32:5d:89:93:5f:41:cb:96:8e:1a:ee:5c:
                    dd:7b:ca:90:a1:50:7a:48:01:ac:c1:61:06:4b:26:
                    5e:e7:38:43:74:1e:9b:bd:4f:f6:65:2a:6c:fd:36:
                    e3:ce:b9:ed:f5:d3:3d:db:36:2e:66:e9:48:e6:55:
                    83:a4:f3:d6:a8:cc:87:d1:d7:96:01:1f:d7:e6:16:
                    af:2a:43:04:de:a1:f3:25:be:a9:ea:39:ee:81:71:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:72:59:53:15:16:EE:37:20:78:56:5D:A6:31:98:2F:96:38:17
            X509v3 Authority Key Identifier:
                keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:94:33:e8:ba:63:8d:ae:66:87:b8:0f:d8:c6:87:bf:22:
         b9:0b:b0:be:92:d9:51:56:ab:46:64:e1:9c:3c:12:2a:c8:3f:
         0f:f3:55:14:38:82:02:89:ac:68:63:47:cc:3a:15:a3:f4:9b:
         03:c6:3f:41:33:f6:80:a3:6e:2d:b6:88:8b:ef:35:4e:83:6d:
         ff:69:08:ff:a9:cd:49:47:ff:ef:9b:fd:70:9a:17:e2:c6:93:
         f8:10:80:c5:79:0b:47:07:6e:1d:c3:53:d4:2c:52:31:61:5e:
         98:b3:21:0b:a7:6e:a3:58:c0:1e:f9:fb:04:1f:69:24:0b:f0:
         98:fd:a1:37:e4:f1:ec:29:3b:76:61:6d:fa:18:39:a4:eb:d8:
         78:db:da:91:7b:95:c6:50:5b:9e:14:9e:0a:f2:91:4b:91:ea:
         07:00:58:e0:ca:24:d0:05:a2:4f:74:f0:8e:3b:e0:76:a2:65:
         98:34:b9:72:9b:ea:67:94:aa:33:ed:b3:09:0f:a6:14:3e:19:
         88:5d:93:86:47:7e:21:6b:95:43:52:21:f2:a6:75:81:8f:42:
         1b:f6:15:cf:aa:21:06:8a:ba:d2:68:67:a9:8b:78:30:0a:f3:
         bb:50:84:1f:22:c7:0e:05:a3:f1:30:f7:0d:83:2b:7a:fd:81:
         6c:61:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:03:18 2026 by rpki-client