This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
File:                     UKsTEAVD9kbAxVN13vhQXRTzZrg.mft (raw, json)
Hash identifier:          kgE5i/DHmkeQJ+pbouhyi+SoRKDAZ/y1Ce7+ThTJGFY=
Subject key identifier:   79:34:62:A8:16:2D:C5:97:A5:F0:CC:F6:28:27:8F:70:DD:9C:A3:EA
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Certificate issuer:       /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial:       0B97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
Manifest number:          0B91
Signing time:             Thu 04 Dec 2025 18:22:34 +0000
Manifest this update:     Thu 04 Dec 2025 18:22:33 +0000
Manifest next update:     Thu 11 Dec 2025 18:22:33 +0000
Files and hashes:         1: UKsTEAVD9kbAxVN13vhQXRTzZrg.crl (hash: kP+uPoy+AuSpTM9xZLGTsHSkN64OP5+Jcw7/eVOqc7o=)
                          2: 74D2ABEE39F811EAA4343534C4F9AE02.roa (hash: WNF8DvI+W4AUYThET4ebOd4+s48ZJAgIRPErXZ/X2b4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
                          rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 18:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2967 (0xb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
        Validity
            Not Before: Dec  4 18:22:33 2025 GMT
            Not After : Dec 11 18:22:33 2025 GMT
        Subject: CN=6931d16a-dbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:14:ae:08:13:3d:aa:bd:37:77:57:7d:c6:98:
                    02:ef:6a:c4:91:bf:49:7c:04:d3:a4:e6:bd:0c:d3:
                    d0:88:3a:5f:ed:95:0a:db:45:7b:ce:86:4e:63:10:
                    a2:04:0f:b3:c5:72:49:64:c2:84:1e:c3:ac:30:09:
                    24:7f:30:94:21:91:56:c8:48:39:5b:24:dd:ea:40:
                    1e:36:82:bc:a9:6a:c5:d1:47:d7:92:17:d0:7a:80:
                    06:ac:47:96:01:8f:de:35:3a:5f:ca:cb:42:d8:73:
                    3f:67:ac:6d:e0:05:ef:eb:12:87:8c:6e:e7:a8:10:
                    4e:09:ff:a6:fe:98:be:37:6c:80:ca:40:96:48:eb:
                    43:72:a1:d9:3b:0a:21:5f:89:98:e1:97:d8:94:54:
                    14:55:7f:c7:3a:80:b0:1c:fe:d4:45:9e:c8:36:54:
                    df:c9:50:66:96:a0:63:53:c5:b5:59:62:e7:6c:c3:
                    be:78:c9:79:51:11:99:c5:2a:a1:8c:9f:c7:d7:66:
                    76:ec:c0:cd:7d:a6:7f:b5:9a:37:c9:ef:4e:03:3e:
                    c3:fc:80:c9:14:ba:38:fd:a3:87:e1:a2:82:3e:40:
                    53:98:3c:67:c6:06:ef:b7:48:83:d3:d7:32:36:c9:
                    d0:db:c9:dd:cd:57:97:12:5b:34:21:ac:b2:b6:9e:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:34:62:A8:16:2D:C5:97:A5:F0:CC:F6:28:27:8F:70:DD:9C:A3:EA
            X509v3 Authority Key Identifier:
                keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:79:6b:ee:35:d7:42:99:17:49:d4:82:d4:81:12:32:e7:ec:
         1b:6f:9f:ee:19:9d:db:eb:c9:c5:65:55:2b:e9:40:17:bc:b4:
         4d:eb:e6:97:55:e5:06:9b:b2:b7:34:da:57:d0:b4:aa:ff:73:
         50:01:86:f3:34:8f:87:df:bc:3b:d7:3f:e7:67:2e:bb:8e:cb:
         ca:7f:82:e2:06:66:d5:d2:35:53:95:48:d3:8a:fe:de:6d:e6:
         be:41:da:b0:aa:34:31:63:73:be:3c:6b:fd:fc:50:77:27:74:
         88:8a:95:5c:a0:45:4d:80:cb:86:df:1c:59:d0:eb:24:b8:19:
         e7:e4:b2:4b:01:05:45:8a:4d:af:e2:1b:83:9f:07:e4:66:68:
         20:8b:f1:5b:78:3a:f5:65:9b:2c:74:af:87:ef:a8:64:ca:9c:
         da:9d:70:1e:c0:f6:ec:ab:7c:d4:a3:69:b7:74:80:c4:10:fc:
         0b:3a:9b:ec:39:e0:60:ac:87:77:73:7f:ab:45:52:94:a2:da:
         1d:6f:14:eb:29:37:03:d5:5e:a5:a5:9c:2a:31:aa:6c:84:a4:
         6e:62:c4:37:b6:54:24:f5:cd:cd:12:48:7d:5e:57:83:d6:40:
         bd:84:31:ae:50:40:20:de:aa:ec:52:bb:93:bf:1a:04:7e:cc:
         37:60:8b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:21 2025 by rpki-client