This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          G6Ge6TU6h2sYiodmWsoyo/9Xu1HIJuhA7AZvjHeR1C8=
Subject key identifier:   B8:09:8C:72:36:1B:17:96:75:79:C0:E2:1E:CB:14:28:01:DE:84:42
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          0353
Signing time:             Thu 04 Dec 2025 23:22:39 +0000
Manifest this update:     Thu 04 Dec 2025 23:22:38 +0000
Manifest next update:     Thu 11 Dec 2025 23:22:38 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: Bbg9P0I7Vn2p0yIQ4QmLySIn3ZBBX4j8THtnUsRq884=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Dec  4 23:22:38 2025 GMT
            Not After : Dec 11 23:22:38 2025 GMT
        Subject: CN=693217bf-5f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:83:20:83:57:55:02:e0:ad:7b:e2:90:d5:
                    f9:d9:b4:a0:42:e4:65:40:80:5d:e5:58:a6:a2:25:
                    17:b4:71:08:e8:e3:b7:70:be:2a:0c:71:aa:82:25:
                    b3:37:81:a4:d2:0c:af:cb:70:c1:00:72:97:f0:81:
                    a8:00:a5:47:28:7b:ae:bb:d9:75:3a:98:dd:75:a7:
                    46:f9:1b:93:e3:0d:1d:da:00:42:10:1b:89:65:a5:
                    47:68:df:9d:2d:c1:69:5f:b1:bb:dd:5e:20:a9:f1:
                    d4:bb:f4:e2:81:8a:72:26:69:37:04:ab:84:cb:9c:
                    c9:f2:68:0b:be:ce:af:8f:f4:b8:68:74:2f:cd:c1:
                    0f:f0:fc:bf:16:a7:3e:ce:c7:c5:cc:a5:f9:7c:92:
                    c7:c9:b4:9c:79:8c:8e:26:61:98:7d:52:e9:c7:21:
                    e1:d8:c8:8e:8a:a4:4a:84:89:3a:48:00:0a:4a:0e:
                    26:1f:a0:19:70:92:45:18:7e:a6:f0:ab:87:23:34:
                    46:59:33:af:2d:0b:f8:c8:92:e4:76:df:65:de:48:
                    7a:17:a0:44:4e:ff:c4:38:6a:13:25:f6:f1:be:18:
                    e7:e9:ec:29:a7:be:a6:64:3c:40:b1:0c:a0:4a:c7:
                    9f:36:86:a1:6d:31:a3:1e:89:8b:14:a9:c2:83:57:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:09:8C:72:36:1B:17:96:75:79:C0:E2:1E:CB:14:28:01:DE:84:42
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:f3:69:9e:56:77:91:e6:3b:e9:d0:31:b5:2c:8a:99:a1:
         f9:e6:bc:77:1f:ec:7f:70:e7:58:b1:8a:b6:31:df:25:5d:d7:
         53:be:cb:25:9a:24:a8:78:4f:ef:28:62:de:95:f1:4c:57:60:
         67:de:e4:32:03:1c:33:66:f3:d6:20:cb:44:c2:2a:28:f8:fb:
         9b:08:c1:92:00:10:73:6d:51:6d:be:99:dc:cf:3c:bc:56:80:
         c2:c5:18:a9:d2:97:8a:21:2d:7f:f7:06:0d:58:31:9c:9d:04:
         7e:cf:2d:fd:4e:fd:9e:6d:3b:e4:f4:4b:4a:82:24:bf:eb:67:
         62:4d:28:30:2d:68:fa:8e:bd:43:17:29:ea:c4:17:65:fd:a1:
         cf:91:20:75:6b:9d:f6:67:7f:0a:d8:f4:11:70:24:37:52:8d:
         93:31:ee:52:9f:75:7b:a0:f0:ab:b4:65:9f:9a:e7:e7:c8:66:
         ab:25:ea:53:54:35:0f:cc:4c:e8:cf:d4:b2:d2:9a:81:af:de:
         45:6b:ea:53:c7:cf:67:6b:4e:29:84:27:5c:1a:57:c9:21:bd:
         7c:ce:4a:57:d7:72:9d:4f:14:48:37:e5:ea:5e:a2:4f:11:b9:
         4b:9b:09:7b:e9:ec:e4:9b:e6:c0:52:7f:39:9a:d9:31:47:66:
         f4:04:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:21 2025 by rpki-client