This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
File:                     UGGUcQC8szKJ4moL3-zixfueCdI.mft (raw, json)
Hash identifier:          mIS7f/6Ik1QgRGKEQLYoWcrH7V1rYOE6lUbpceJJTTM=
Subject key identifier:   F0:81:C2:26:18:4E:D9:AF:E8:BE:A6:65:C5:45:D3:92:90:BC:9D:C0
Authority key identifier: 50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2
Certificate issuer:       /CN=A912BD8E/serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
Manifest number:          A9
Signing time:             Fri 05 Dec 2025 04:10:32 +0000
Manifest this update:     Fri 05 Dec 2025 04:10:31 +0000
Manifest next update:     Fri 12 Dec 2025 04:10:31 +0000
Files and hashes:         1: UGGUcQC8szKJ4moL3-zixfueCdI.crl (hash: a0vVSS5RXNRrBVjkml8eWyMT1slVYSCIbi8jsk2RZjw=)
                          2: 08C7D93ACE8911EFBEC5D618C4F9AE02.roa (hash: nvtKwWFEZOMd88gDjqvdFcOF+TJpXNSXEguvJEtlOSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=5061947100BCB33289E26A0BDFECE2C5FB9E09D2
        Validity
            Not Before: Dec  5 04:10:31 2025 GMT
            Not After : Dec 12 04:10:31 2025 GMT
        Subject: CN=69325b38-46aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cb:45:6a:66:f1:6a:10:d8:e2:a5:4e:15:76:
                    60:4c:80:88:cd:ed:a5:8a:4f:9f:af:90:02:a6:84:
                    a9:05:2b:53:c3:52:92:09:c1:29:ed:9e:ee:b6:e2:
                    1e:d6:db:48:0b:c4:77:0d:c5:43:3f:f4:13:1f:b3:
                    f6:61:f2:1e:ef:ae:50:d7:90:b4:ef:41:9f:14:7a:
                    96:49:aa:29:d4:34:fc:f3:5b:23:1d:ea:e4:0f:03:
                    58:a0:fb:62:86:8d:ea:18:ec:b0:d2:b3:b0:84:68:
                    10:11:cd:3c:6b:fe:6f:6d:d9:ce:66:a3:95:99:63:
                    29:3c:15:63:86:0b:e8:8b:c3:06:4b:49:0a:44:f2:
                    a6:d8:ad:ed:12:5c:4d:53:bb:dd:a8:bb:b2:08:3f:
                    7d:12:84:de:4d:5a:2c:82:22:e9:80:0d:08:b0:3c:
                    6a:cc:dd:41:fb:bf:b7:0b:1c:b7:3a:92:14:6f:d4:
                    b9:65:22:af:74:71:15:c8:4e:49:8d:e4:3f:38:42:
                    3e:17:e1:ab:21:43:f7:fb:83:f8:5f:53:d6:7c:52:
                    d8:3d:91:24:ad:4c:1a:96:74:29:13:23:ac:ca:7a:
                    25:aa:f0:9a:b5:1c:4a:a4:fc:70:aa:b0:e5:db:32:
                    d2:4e:2c:a8:0d:ba:b4:f8:10:c0:12:09:d8:70:c1:
                    fa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:C2:26:18:4E:D9:AF:E8:BE:A6:65:C5:45:D3:92:90:BC:9D:C0
            X509v3 Authority Key Identifier:
                keyid:50:61:94:71:00:BC:B3:32:89:E2:6A:0B:DF:EC:E2:C5:FB:9E:09:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UGGUcQC8szKJ4moL3-zixfueCdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/3AF57FDACE8811EF87C07117C4F9AE02/UGGUcQC8szKJ4moL3-zixfueCdI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:4e:0f:e7:c7:b4:eb:85:e3:8e:9c:18:24:80:1e:cb:7d:96:
         87:c5:9f:cb:0b:52:43:80:6a:05:82:03:f7:3a:8a:57:27:7b:
         6f:3a:e9:06:77:64:25:ed:bd:be:dc:93:13:bd:58:fd:96:85:
         46:a7:33:0b:f1:3e:7e:80:47:ac:fd:a1:ae:c7:7f:8c:7a:ce:
         0f:de:d0:73:4d:4e:5c:59:3f:f7:79:10:1c:24:d6:75:6a:32:
         5f:4c:a8:38:f1:46:29:10:9d:b5:17:ed:2e:e5:76:14:f2:04:
         0f:d6:cf:06:18:82:38:5c:4f:3f:8c:11:2e:03:fa:85:b0:0b:
         e4:30:68:85:bc:de:99:14:2d:5e:94:85:10:f0:ab:14:2f:2b:
         9a:f4:81:06:d4:ad:9c:8a:2c:ae:67:f4:ff:44:4f:ef:e3:0e:
         5a:70:c5:c0:7b:cc:cd:1d:56:bd:e5:0a:33:15:8a:db:6d:0c:
         b0:d0:62:25:84:f4:85:03:b9:6f:f5:aa:10:98:a5:08:6a:b9:
         6a:da:22:ac:6e:9c:db:e3:0e:a2:79:da:ef:35:5a:62:3a:79:
         3c:b8:ef:4b:50:63:70:69:46:b7:8b:d4:b7:a6:2d:72:82:c8:
         19:12:b8:5f:44:05:99:bb:7f:97:c8:ef:f8:6e:d2:bd:b2:da:
         ea:82:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:17:36 2025 by rpki-client