This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
File:                     UTbgDQPR84UAq2cpty7T1yzWoQU.mft (raw, json)
Hash identifier:          iblYhg9fsiF/ayTja918EZ5WgIYiy3yvy0FCe2iKGTQ=
Subject key identifier:   F2:9A:B1:BD:20:6A:78:7C:70:C3:26:FE:47:22:2B:08:0D:B9:A2:7B
Authority key identifier: 51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05
Certificate issuer:       /CN=A919B3BC/serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
Certificate serial:       1E86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
Manifest number:          1E70
Signing time:             Thu 08 Jan 2026 15:54:23 +0000
Manifest this update:     Thu 08 Jan 2026 15:54:22 +0000
Manifest next update:     Thu 15 Jan 2026 15:54:22 +0000
Files and hashes:         1: UTbgDQPR84UAq2cpty7T1yzWoQU.crl (hash: T7xVH1f8Idng9nD1BQUeVdQnV9RIgwkmXClNcc5X+04=)
                          2: 03D29A521AD611F0BC67FC1CC4F9AE02.roa (hash: 1U6J+6Id+mf2w4NcxMra67o7UyeEGu3wuhpl6ihE5eM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 15:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7814 (0x1e86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=5136E00D03D1F38500AB6729B72ED3D72CD6A105
        Validity
            Not Before: Jan  8 15:54:22 2026 GMT
            Not After : Jan 15 15:54:22 2026 GMT
        Subject: CN=695fd32f-4317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:a0:8a:cb:1b:bb:a1:28:67:86:20:5c:82:
                    fa:fd:d3:dc:58:bc:74:34:07:be:33:e1:f0:ae:69:
                    05:86:6e:9c:46:85:47:d8:23:a2:a0:39:c3:d0:bf:
                    bd:3f:43:72:33:cb:b9:16:d4:6b:fb:c0:60:4e:3e:
                    0a:98:d6:c7:47:40:83:48:53:76:df:b8:0b:ff:af:
                    98:76:08:94:0f:1c:56:05:16:f3:bc:9f:17:88:72:
                    b6:5e:70:4e:d6:c2:aa:7a:55:02:8d:f2:92:e1:02:
                    6a:04:cc:12:fb:4c:6c:0a:c2:fd:d6:89:18:60:47:
                    d7:93:0d:a8:96:71:a2:99:ae:8a:ef:39:be:0c:79:
                    c5:fc:a9:de:5f:16:18:06:63:9f:d8:36:03:a1:a4:
                    66:cc:2b:bf:2d:ce:e5:47:b5:b6:e9:87:30:42:45:
                    03:c9:cc:fb:c4:a4:d3:36:a6:f1:83:ec:ce:25:85:
                    6d:70:5f:24:3e:6d:9d:9a:24:34:66:03:39:ac:cb:
                    e0:91:5c:de:ab:e1:96:04:9b:a4:17:3a:f0:63:40:
                    c0:87:3d:55:5c:65:b6:17:85:4b:00:50:72:04:3b:
                    de:a1:b1:8f:f3:3a:4b:56:0f:91:98:8a:6e:20:89:
                    5d:04:ae:b4:d1:c9:9c:24:86:fe:72:e9:6b:00:81:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9A:B1:BD:20:6A:78:7C:70:C3:26:FE:47:22:2B:08:0D:B9:A2:7B
            X509v3 Authority Key Identifier:
                keyid:51:36:E0:0D:03:D1:F3:85:00:AB:67:29:B7:2E:D3:D7:2C:D6:A1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UTbgDQPR84UAq2cpty7T1yzWoQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/304197E88F9B11E6BEC5CB25C4F9AE02/UTbgDQPR84UAq2cpty7T1yzWoQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:98:dc:09:66:4c:fa:75:c9:5e:a3:1b:07:b7:5f:c8:df:
         f8:4d:10:de:b7:70:57:b2:e7:8b:10:31:eb:60:8e:50:19:4b:
         9a:a8:da:7a:ce:6c:5d:6f:b2:6b:17:5c:9c:0a:79:d4:d5:3a:
         62:29:d5:31:a6:d1:ef:43:8f:ce:99:44:ad:95:40:92:f0:bd:
         9f:80:a3:dd:f8:41:69:51:90:8d:9c:81:f7:20:42:34:23:36:
         8b:4d:94:85:3f:04:3a:7a:9e:e4:e5:3a:d7:d4:6d:4c:07:1c:
         57:a5:98:26:75:97:e7:6a:56:57:78:10:37:6b:5b:14:27:57:
         19:24:e8:70:2c:c5:16:46:16:85:de:f6:db:81:a9:c5:f6:e3:
         97:9d:bd:ae:2f:6a:62:36:d6:4b:92:de:9c:d8:5a:fa:c9:b1:
         cd:d5:f8:50:56:45:37:d5:72:44:b4:5c:88:80:8c:51:df:e4:
         f2:21:f9:96:53:a0:3f:6e:9c:66:8f:0a:09:f9:58:76:ba:d1:
         d1:04:9a:a3:8b:03:6a:11:45:e5:49:66:9e:88:a5:9e:a5:7a:
         1c:6d:fc:47:e6:f3:ef:97:b6:7d:1d:00:09:6e:9e:98:9d:75:
         51:3a:27:f4:5f:5b:45:2c:77:b0:ed:42:61:91:9c:0d:f9:84:
         0c:15:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:50:26 2026 by rpki-client