This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
File:                     2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json)
Hash identifier:          dqzcjSzccRE8YRpr0g6eiieP+BDvpPYjlR4Ry89+9z0=
Subject key identifier:   8B:07:F8:E3:95:A9:E2:4D:D4:DF:8D:A2:F9:53:D3:E6:0A:55:62:D9
Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA
Certificate issuer:       /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
Manifest number:          10
Signing time:             Fri 05 Dec 2025 05:47:49 +0000
Manifest this update:     Fri 05 Dec 2025 05:47:48 +0000
Manifest next update:     Fri 12 Dec 2025 05:47:48 +0000
Files and hashes:         1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: +d/u+nrYXZWib9186rCT0OxDqCdOXruTedITxHvSqDM=)
                          2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: 6W8pbhnGV4OI+/BAF+L1OPuH+jw3tDQBKF3blq5Eu2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl
                          rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA
        Validity
            Not Before: Dec  5 05:47:48 2025 GMT
            Not After : Dec 12 05:47:48 2025 GMT
        Subject: CN=69327205-53ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:ee:42:60:ee:12:34:df:49:95:8d:3c:d1:
                    c8:d2:79:fb:5b:50:03:10:f4:9d:0f:76:05:e5:0f:
                    eb:bb:4d:ca:e5:06:4f:75:d6:15:05:c6:a5:6e:a0:
                    cf:c0:54:97:7e:00:27:f3:88:ed:b9:be:4d:71:4b:
                    dc:2e:0c:73:88:75:12:77:3a:d5:75:ef:0e:cb:c9:
                    c1:71:af:25:c7:74:ed:4b:f2:a0:d3:6d:a8:a5:80:
                    11:64:fc:b5:c8:cb:a6:71:a7:80:1f:ac:19:46:62:
                    02:50:1d:5f:4e:f4:3c:e2:62:28:29:c5:02:2c:2a:
                    64:fc:78:66:3a:c1:f0:b1:c6:40:54:0c:f5:58:c7:
                    be:a9:be:67:d8:5e:fc:73:fe:bf:34:84:47:fb:77:
                    91:82:04:a8:67:cd:97:cd:21:dc:74:3f:65:90:9a:
                    20:04:3a:64:67:db:89:d3:e5:f8:b7:54:da:0c:27:
                    d2:61:56:0e:11:a1:72:14:1e:1b:72:15:99:8f:70:
                    42:f4:be:cc:85:20:a5:d1:a8:9d:b0:91:91:db:18:
                    82:d6:c1:5a:88:8f:4a:16:ae:d3:93:d6:9b:df:93:
                    76:52:07:a6:6b:b3:37:4b:95:70:09:91:81:9b:74:
                    e6:e4:a5:92:62:3f:62:15:cd:f7:34:c2:2b:cf:9b:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:07:F8:E3:95:A9:E2:4D:D4:DF:8D:A2:F9:53:D3:E6:0A:55:62:D9
            X509v3 Authority Key Identifier:
                keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:f0:f7:0c:eb:9b:a3:08:60:cf:84:2f:c9:3c:73:b6:67:
         99:d6:f4:70:12:fa:6d:e0:62:3d:09:70:b3:29:97:94:12:4c:
         f3:22:b8:d8:72:3a:76:b1:7a:1d:f6:ad:ee:21:ce:f3:ef:06:
         65:1b:41:6d:f3:d2:52:6b:7d:e2:e7:09:f8:ec:12:56:ab:e0:
         86:88:5c:64:8e:46:b4:82:f9:40:40:de:57:32:31:ed:d7:36:
         42:de:b8:92:b9:eb:7a:8f:7c:d4:56:25:ac:85:7a:ae:d7:1e:
         de:97:97:10:9e:be:d4:02:ad:e7:23:7d:3c:ee:19:0f:e3:57:
         f6:c3:85:bd:83:a8:03:b6:fe:34:cb:ce:af:f2:0b:fe:8c:e8:
         8f:14:7f:3f:86:a1:20:ec:ee:19:07:1d:f7:92:b2:49:33:e4:
         f0:0f:4f:01:67:af:c3:06:d6:51:24:ed:f5:91:12:88:8b:83:
         c2:48:62:81:f2:67:bc:a1:f6:b2:79:c7:31:e4:bf:3b:ee:ca:
         9d:7b:fa:6c:f9:97:26:79:97:78:9e:46:c6:cf:22:30:9a:9e:
         5b:e7:6c:6b:10:e9:58:85:58:7e:8d:7c:86:44:c1:5c:c1:40:
         f1:26:54:50:bf:ba:f3:c4:6a:cb:85:d6:d4:5e:3b:70:db:98:
         69:97:75:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:19:10 2025 by rpki-client