This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
File:                     ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json)
Hash identifier:          vEXlLFfx1C/qnWCZWO+yTCXxpu+t1N1ztB4GJVfEQt8=
Subject key identifier:   E5:21:9F:A2:C3:0D:A9:39:02:33:B3:3F:F0:F7:18:EF:31:79:29:78
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0AC1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
Manifest number:          0ABB
Signing time:             Sat 06 Dec 2025 18:43:32 +0000
Manifest this update:     Sat 06 Dec 2025 18:43:31 +0000
Manifest next update:     Sat 13 Dec 2025 18:43:31 +0000
Files and hashes:         1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: K7LY+txh1KFYIk1ItJy1WErb/9jeKayvHVv1RLEyn0U=)
                          2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Dec  6 18:43:31 2025 GMT
            Not After : Dec 13 18:43:31 2025 GMT
        Subject: CN=69347954-57ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:87:eb:73:9d:7f:2e:a1:30:12:1a:b6:cc:ed:
                    7c:62:7a:42:ba:f8:6a:63:e8:07:e9:01:06:bd:74:
                    56:1f:30:99:0a:b9:38:92:77:15:13:8a:88:c7:f8:
                    b2:1d:52:27:98:97:ad:a6:26:75:f6:84:38:22:bf:
                    9d:97:3f:b7:1f:86:29:c9:1b:5c:32:3c:60:48:e0:
                    80:45:e8:8d:da:8b:57:58:6a:54:db:0c:c8:fb:68:
                    15:53:27:f7:31:41:0f:02:b4:9f:fc:6e:10:43:df:
                    b1:a3:8f:cb:45:45:a8:e2:23:70:dc:8e:8a:09:ec:
                    a2:88:1d:5a:b6:91:79:20:04:b1:4f:f9:48:7a:60:
                    6e:f8:58:07:40:16:73:2e:c1:0f:2e:40:b9:7e:45:
                    af:d5:24:da:eb:9c:c4:b6:22:77:ec:50:a1:bb:6d:
                    59:9e:a5:2c:a0:25:c0:db:51:bf:67:ea:e9:3a:65:
                    fb:d2:15:35:7e:22:e7:40:df:d3:37:e1:1f:9e:66:
                    90:05:bf:e7:00:b9:19:39:12:4e:39:6d:33:80:dd:
                    82:9c:44:e9:c4:39:c7:bc:5e:d6:ab:9b:f3:6a:82:
                    4a:2d:95:05:95:f1:d8:1c:c6:7a:a6:cf:a5:36:41:
                    be:17:57:ba:0f:4d:c6:37:45:db:61:4e:f6:6c:90:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:21:9F:A2:C3:0D:A9:39:02:33:B3:3F:F0:F7:18:EF:31:79:29:78
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:3f:f7:b9:e2:9f:70:1d:6a:ad:4f:b0:43:bf:80:2f:df:
         16:7e:2d:86:e8:40:f1:b0:46:92:4e:4f:41:5f:54:b6:7a:f8:
         03:ff:0d:86:d6:2c:86:38:4f:10:37:f6:6f:39:38:9b:d6:97:
         83:45:ff:f1:75:48:8d:7b:c0:f6:ec:38:c6:37:95:59:f3:62:
         b9:17:c6:d2:71:e1:17:e1:f9:96:8a:14:a3:7b:ad:55:be:a7:
         e4:88:97:b7:f2:f3:87:ef:de:67:07:eb:2d:38:f0:b1:2a:e1:
         6f:94:a5:5b:34:49:c4:f5:1e:49:82:ca:4e:ec:f2:e4:8f:e2:
         66:8c:e6:4d:75:40:64:e3:e8:95:0a:4a:b5:a1:5d:77:d5:f0:
         fa:47:3f:9b:ee:38:69:74:68:d1:51:32:d3:c8:09:46:fd:d9:
         7b:93:56:ac:c5:05:25:08:a1:3a:52:bc:77:65:09:8e:21:04:
         4e:f1:10:40:23:6a:72:e8:f0:17:e4:fe:ba:51:0c:bf:76:af:
         65:b9:b1:24:03:69:52:4e:4a:95:fa:6b:c6:af:62:86:42:a0:
         12:3d:35:86:63:a3:b5:ee:b9:b0:a4:d6:17:95:1f:fc:24:52:
         9d:b1:e3:90:20:04:46:d8:6b:14:61:98:1d:13:7d:8b:ab:e2:
         3c:97:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:38 2025 by rpki-client