This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
File:                     uNk1BsinkdH5_6W2fDiBbdwD7ms.mft (raw, json)
Hash identifier:          G/Rfu0kxNo4alHGdlDPFVIaUAZpvAaBmqgE4qLX300w=
Subject key identifier:   E5:55:FC:82:73:44:7E:A2:31:E4:EC:B5:73:D8:4E:5E:17:17:0E:90
Authority key identifier: B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B
Certificate issuer:       /CN=A9110DEC/serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
Certificate serial:       0A9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
Manifest number:          0A94
Signing time:             Sat 06 Dec 2025 18:48:17 +0000
Manifest this update:     Sat 06 Dec 2025 18:48:17 +0000
Manifest next update:     Sat 13 Dec 2025 18:48:17 +0000
Files and hashes:         1: uNk1BsinkdH5_6W2fDiBbdwD7ms.crl (hash: bj/hkbWPk6A/nLpCP0YeJY5QE+OP1pQP1x9ZKUnA2pQ=)
                          2: C01674A86BF011EA87B33D25C4F9AE02.roa (hash: c9rYpxrekHk5Vx/e81a0t1Y6tqcx2DAB/IWGqPFZTW4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl
                          rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DEC, serialNumber=B8D93506C8A791D1F9FFA5B67C38816DDC03EE6B
        Validity
            Not Before: Dec  6 18:48:17 2025 GMT
            Not After : Dec 13 18:48:17 2025 GMT
        Subject: CN=69347a71-22ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:e8:30:ed:c9:2d:ff:fb:50:c6:49:46:5a:
                    30:4e:45:1f:72:58:dc:39:8d:5c:b3:e2:53:46:11:
                    73:84:b9:c4:b1:fe:39:41:80:9d:3b:62:96:c9:f8:
                    04:2c:da:5a:27:48:8b:50:9c:e9:b2:7e:0b:93:e6:
                    58:7e:1b:64:fe:4a:1e:5d:69:cc:5f:2e:13:fc:9c:
                    25:79:e8:c0:c9:7e:5b:bd:b4:17:a2:cc:aa:04:03:
                    93:9c:6a:95:03:63:2b:83:9f:33:f1:d3:18:12:f8:
                    f0:0f:ff:0b:f0:96:3d:c9:31:f8:24:ca:e9:f2:6b:
                    c3:6a:7b:00:13:94:93:57:25:7f:e0:50:5b:4f:d8:
                    c6:b2:7a:59:a5:df:f1:d4:53:5f:74:db:a7:ba:fe:
                    4c:bd:b4:f0:1d:d7:bd:8c:0e:8e:8f:04:78:f9:db:
                    80:5f:35:d5:d8:ee:92:ca:7c:05:5d:cd:9f:fa:3e:
                    d6:15:73:1f:39:c1:43:a5:16:e5:cd:e4:b0:22:3a:
                    99:c7:6b:68:27:22:a8:62:7e:e1:ed:b7:66:dc:36:
                    9c:21:ab:55:8f:ef:cb:09:0e:58:d3:05:e3:65:fa:
                    00:65:e6:e7:57:8e:5e:39:05:11:4f:32:00:73:42:
                    95:71:74:47:57:18:b3:a5:2a:6e:3f:5a:bd:86:a8:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:55:FC:82:73:44:7E:A2:31:E4:EC:B5:73:D8:4E:5E:17:17:0E:90
            X509v3 Authority Key Identifier:
                keyid:B8:D9:35:06:C8:A7:91:D1:F9:FF:A5:B6:7C:38:81:6D:DC:03:EE:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uNk1BsinkdH5_6W2fDiBbdwD7ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DEC/172D0A246BEF11EAA26A5E22C4F9AE02/uNk1BsinkdH5_6W2fDiBbdwD7ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:98:10:12:0f:47:52:56:03:12:26:44:a9:78:19:f8:33:
         b4:33:ca:56:f6:f8:ed:6b:83:2f:36:6d:bc:bd:37:68:0b:c8:
         c8:75:63:bc:4b:5c:a5:05:20:05:63:35:0c:b8:93:1a:4d:19:
         26:d6:de:68:fe:e8:f8:6c:1b:e7:5b:bd:27:d1:2b:db:31:2b:
         eb:b1:68:64:f5:0d:ac:12:18:6f:36:c4:5b:95:a4:36:f0:7e:
         6e:34:04:78:5a:99:49:7c:cd:d1:50:86:e1:79:88:80:2e:0c:
         fa:b8:df:a5:d0:99:00:05:60:22:df:81:53:92:34:9d:a0:c6:
         fe:77:fd:4e:60:a3:39:a7:29:3b:07:5b:1d:0d:8e:26:48:2d:
         d2:cc:06:4e:c5:51:f7:c2:9d:fc:3e:30:82:e5:0e:f0:4c:de:
         89:a5:9a:01:85:96:c0:5a:36:d0:29:28:36:01:d2:d7:04:b1:
         3e:ee:2e:00:d7:e8:a3:e3:4e:09:37:58:14:e2:25:3a:5f:1b:
         8d:f6:02:f0:1b:a3:96:65:a0:3b:bb:fa:b2:5c:59:e4:45:81:
         4a:e0:35:eb:59:48:10:45:1c:af:09:67:c0:38:78:7f:6e:e7:
         ff:b3:18:65:40:1d:8e:8f:a7:aa:fe:1d:71:4a:50:2a:7e:5f:
         56:0b:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:34:52 2025 by rpki-client