This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          ERUYR7qbZoPqs/UCCvAo1dHp0p51HhMSGAmcp8juLnE=
Subject key identifier:   A0:45:F5:36:40:49:EE:F7:AC:BE:3A:8E:BC:84:53:80:0A:6C:C2:74
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       0946
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          0946
Signing time:             Thu 04 Dec 2025 19:23:03 +0000
Manifest this update:     Thu 04 Dec 2025 19:23:03 +0000
Manifest next update:     Thu 11 Dec 2025 19:23:03 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: k0aJlg8u2Usc2Yogw8DtHDRL+mekck0wIiZe7JGOLMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Dec  4 19:23:03 2025 GMT
            Not After : Dec 11 19:23:03 2025 GMT
        Subject: CN=6931df97-a1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:07:14:da:a3:d0:df:8e:a0:1b:9a:36:44:
                    17:0d:d6:3a:d3:ae:40:64:cb:d1:c7:68:38:2b:a0:
                    db:2d:10:f0:5c:7d:09:83:ae:08:0d:54:8e:a6:46:
                    ac:df:fa:9f:c5:3b:8a:13:9b:f3:a2:25:a0:04:08:
                    cc:5e:9c:0a:62:5f:91:5a:bf:42:f8:86:8d:6c:2d:
                    ef:72:cf:90:e1:bd:7d:cb:22:54:eb:70:fc:32:03:
                    99:17:33:f3:70:33:f0:6f:c9:f3:0d:b8:5c:ac:ee:
                    a7:88:f3:ac:05:41:c2:3e:df:0e:0b:db:e9:38:06:
                    cb:44:64:ad:43:13:1f:24:0d:f3:a2:1a:02:75:ca:
                    f5:a4:9c:57:b2:d3:7b:8b:d6:ff:29:bc:e7:6c:e0:
                    ff:dc:e5:4e:4f:aa:4a:dd:c5:37:a1:ce:c4:3a:db:
                    eb:01:de:f3:8b:36:6b:c4:d6:1f:2f:e1:84:be:a6:
                    57:6f:b1:ae:36:29:cd:73:e0:69:7c:f2:44:7e:4f:
                    5b:57:2e:12:3a:71:1d:71:03:5d:3e:15:62:01:64:
                    09:77:01:1d:9b:5b:04:e4:6d:df:aa:b7:7d:37:66:
                    71:c8:7b:14:8a:21:69:84:45:91:78:cb:1d:8e:9f:
                    24:a1:ee:3c:99:7c:28:05:6b:03:74:66:92:b9:2f:
                    55:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:45:F5:36:40:49:EE:F7:AC:BE:3A:8E:BC:84:53:80:0A:6C:C2:74
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a0:17:20:c1:40:b5:1a:b0:d6:98:84:a8:16:20:0d:6d:21:
         6e:77:f0:1d:f5:fa:be:69:dd:03:96:0f:74:38:d9:df:a1:58:
         e3:12:0c:ca:75:ac:a6:e5:2e:d7:9f:71:54:3f:30:b3:d7:5a:
         08:6e:04:e5:2e:4c:46:8c:7d:f7:db:26:9b:6c:f1:c4:11:fe:
         99:cf:52:22:a4:68:38:01:1b:72:7a:87:10:eb:0c:b8:0c:aa:
         85:ea:97:e4:70:59:51:c3:47:75:ff:f4:95:d4:98:9c:20:f1:
         ff:73:87:70:76:94:3d:84:66:15:12:49:a2:15:b1:dd:5b:a3:
         30:56:ea:49:68:08:0a:ce:f9:a5:65:71:cb:e9:77:b3:b8:c2:
         b1:44:71:d6:2f:5f:28:82:bf:55:80:71:5e:89:6a:01:1a:74:
         00:f2:66:d6:79:f1:79:f4:be:7f:65:f0:d5:f0:d9:5c:3b:78:
         8f:2a:25:14:11:20:4d:07:5a:66:06:12:11:ce:d9:82:8c:ad:
         aa:ca:67:22:e5:21:36:aa:d6:58:f1:45:76:83:bb:5f:90:8d:
         d2:3b:96:e9:d0:2f:03:93:d6:8b:1f:d9:2b:f5:9c:4c:c6:f2:
         59:e9:50:0a:87:dc:f4:5d:bf:ac:1f:62:a6:fb:89:e7:83:69:
         6a:fb:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:25:09 2025 by rpki-client