This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
File:                     UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft (raw, json)
Hash identifier:          +xU9B3WhsAhgHsAyKPfni9lJobuN/lsba/piKE0VD1k=
Subject key identifier:   E9:A7:CD:34:F7:54:E9:C5:FE:31:51:94:17:BA:FE:BE:C7:2D:0C:CA
Authority key identifier: 51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23
Certificate issuer:       /CN=A91383BF/serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
Manifest number:          0124
Signing time:             Fri 05 Dec 2025 03:12:52 +0000
Manifest this update:     Fri 05 Dec 2025 03:12:51 +0000
Manifest next update:     Fri 12 Dec 2025 03:12:51 +0000
Files and hashes:         1: UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl (hash: 6JR/1Xl5GENvgYVHWyXXCiq36WsqpQIDuiHsHT+9ths=)
                          2: C23053B019A911EF97366417C4F9AE02.roa (hash: 7AHfRlf5obcLabSztF3WSrRoKuN5MOc2fWcxIFrj8UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl
                          rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383BF, serialNumber=51A48258D4CD6E01D2458C5B9216EFA45210B623
        Validity
            Not Before: Dec  5 03:12:51 2025 GMT
            Not After : Dec 12 03:12:51 2025 GMT
        Subject: CN=69324db4-1c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:70:7f:0d:3b:54:7d:2c:04:74:4f:92:3a:39:
                    1e:91:9d:9b:76:9f:d7:03:36:e2:e4:10:24:5e:84:
                    3e:25:df:d7:1f:cf:8a:ad:a0:43:b9:1f:e8:31:79:
                    fc:3d:0c:10:46:5b:49:9a:f7:24:c3:15:ba:e4:b9:
                    84:34:03:57:dc:61:9f:29:4d:b5:0d:71:34:91:24:
                    b2:fb:bf:21:da:d5:a9:10:ea:c4:c5:59:14:d8:a6:
                    72:d9:4c:86:d9:6f:77:cd:39:0e:34:75:f7:43:27:
                    7e:18:7a:83:e8:6a:eb:9f:b5:95:23:c6:0d:39:7b:
                    ac:f3:b9:3a:7e:40:b3:27:30:4a:4d:b2:83:04:e8:
                    8a:53:a8:f7:fe:50:ca:d9:50:4d:20:02:7b:d9:25:
                    67:2e:db:4c:f8:99:26:c2:60:15:65:0a:90:46:c4:
                    0b:2e:fc:d0:73:06:90:25:7c:04:c1:b2:df:73:1e:
                    7b:cb:4f:3c:f4:b9:5a:1f:12:81:c8:f5:ba:d5:bd:
                    be:11:c5:85:5b:cb:ce:1c:11:07:af:ca:68:5c:b9:
                    d9:cd:77:66:48:21:f4:aa:af:88:c5:8b:20:4c:d5:
                    22:0a:ce:de:44:60:55:f2:fc:02:64:d0:9e:bb:b9:
                    97:e8:d6:e5:a1:30:74:b6:b0:f6:15:e5:f3:fb:cb:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:CD:34:F7:54:E9:C5:FE:31:51:94:17:BA:FE:BE:C7:2D:0C:CA
            X509v3 Authority Key Identifier:
                keyid:51:A4:82:58:D4:CD:6E:01:D2:45:8C:5B:92:16:EF:A4:52:10:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaSCWNTNbgHSRYxbkhbvpFIQtiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383BF/F67C61EA198111EFA5AC4753C4F9AE02/UaSCWNTNbgHSRYxbkhbvpFIQtiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ff:b6:ce:ee:a0:ba:75:ac:b1:7d:57:05:ac:03:a5:a7:55:
         d6:7e:7b:cd:56:4f:23:0f:f7:09:35:d0:fb:bc:82:b9:52:dc:
         ce:cc:91:f2:48:5e:d2:52:f3:a3:d1:a7:4c:e6:60:df:83:55:
         02:d9:af:11:7b:53:95:6f:41:4b:bf:db:3b:24:59:0e:d9:c1:
         35:ad:83:86:e7:c8:47:84:24:3d:f6:86:3c:e8:26:c1:bb:fd:
         6d:98:93:ca:35:7c:ab:a8:d0:08:7d:41:3a:1b:0d:7c:a1:ae:
         a0:21:26:01:2d:5a:90:53:0b:ac:27:b8:3c:9d:cf:06:64:7d:
         42:5b:d1:fe:9d:d4:6b:7a:3e:db:84:f5:9a:37:2f:cb:74:12:
         37:d7:a1:ac:8c:33:3f:a7:16:d0:78:56:68:b0:cf:c9:1f:c1:
         e1:2f:0a:00:f1:9e:71:16:51:a2:b7:bf:69:d3:d0:08:f0:67:
         73:f0:a2:9a:5e:4e:d9:fb:21:be:fc:50:f5:a9:42:ff:27:a0:
         8f:ac:f1:35:f8:43:08:49:1d:f5:67:6e:34:31:d6:7c:aa:70:
         c7:0f:36:fa:7f:76:82:14:ca:53:e7:05:22:5e:92:76:a4:03:
         4f:c3:6d:ae:3e:8e:5f:d7:39:86:c9:f0:95:98:ff:a6:a9:10:
         70:0b:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:33 2025 by rpki-client