This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
File:                     uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft (raw, json)
Hash identifier:          Ih3iuPTQWMcR/su8KEbjWiNvivgsgmzp92fHyfY3tVE=
Subject key identifier:   6E:10:8D:25:CB:C7:C5:36:DA:E1:AB:BC:54:B2:A1:D5:E1:61:18:0D
Authority key identifier: BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14
Certificate issuer:       /CN=A9138C14/serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
Certificate serial:       04B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
Manifest number:          04A4
Signing time:             Thu 04 Dec 2025 22:30:29 +0000
Manifest this update:     Thu 04 Dec 2025 22:30:28 +0000
Manifest next update:     Thu 11 Dec 2025 22:30:28 +0000
Files and hashes:         1: uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl (hash: xTcPctM/T3pTGwPGcKesdErGoSR0ofQ0qAxOc5iY4wo=)
                          2: 4911720A694F11ECB6F9B541C4F9AE02.roa (hash: 7k8YHn/nAtUVU3VLssB80YxDHO9IxRBfL7eh5zIgJsw=)
                          3: 53E4239C99F811ECA0663D19C4F9AE02.roa (hash: Y7h+ThuR3023tbfID3tJUzdvMuVp3Y56Ae3EjEbCXpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl
                          rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138C14, serialNumber=BB0E550379FEA281A881A67479B77C8602D01314
        Validity
            Not Before: Dec  4 22:30:28 2025 GMT
            Not After : Dec 11 22:30:28 2025 GMT
        Subject: CN=69320b84-7083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:2e:1a:9b:7e:eb:89:bf:0f:17:a5:6c:66:
                    e0:5a:c0:e3:a7:0b:ef:d3:c2:38:bf:e2:29:e4:8e:
                    b9:10:c8:10:08:2a:b1:db:20:0b:6b:41:1b:86:54:
                    5a:2e:12:ea:17:2e:13:18:d0:dc:d7:01:b8:48:6c:
                    61:d0:c3:8c:f8:82:75:08:e3:ef:68:b6:a6:6b:97:
                    88:47:b7:b3:d9:48:78:da:b6:0f:2d:d5:cb:96:de:
                    43:6e:65:85:d8:12:07:57:5e:2e:18:18:24:71:85:
                    1a:64:e4:40:36:0e:40:9a:9b:16:9a:d6:e2:6a:47:
                    81:b2:14:21:55:9a:3e:36:96:0e:1b:b1:8d:07:27:
                    7c:90:dd:e8:e5:fd:d8:23:c3:47:b3:1e:9e:37:bc:
                    da:d7:fc:0a:f2:f6:d5:64:36:32:9c:bf:c0:9d:04:
                    ff:a2:6f:b7:d4:bf:f6:b2:6c:76:25:33:9d:30:17:
                    83:e3:82:3f:c4:ed:4b:47:23:ff:b9:2d:d1:f5:1c:
                    4f:67:9e:0b:9c:ed:b6:20:4d:ed:ad:7b:47:44:0b:
                    11:55:e9:28:b0:10:b1:7b:d8:7b:b9:6b:e2:40:2a:
                    84:f6:32:7e:dd:66:55:09:2e:a5:18:0b:4b:80:c0:
                    6d:74:3a:79:d7:85:32:52:4e:25:3a:d0:55:bb:76:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:8D:25:CB:C7:C5:36:DA:E1:AB:BC:54:B2:A1:D5:E1:61:18:0D
            X509v3 Authority Key Identifier:
                keyid:BB:0E:55:03:79:FE:A2:81:A8:81:A6:74:79:B7:7C:86:02:D0:13:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uw5VA3n-ooGogaZ0ebd8hgLQExQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138C14/3E4C46305BC411EC96279354C4F9AE02/uw5VA3n-ooGogaZ0ebd8hgLQExQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:37:ec:b3:5d:c0:28:d7:b0:9b:28:46:5c:da:1a:a1:9b:5a:
         30:97:01:a2:94:cb:c3:22:45:7d:a1:b9:42:dd:06:31:1b:b5:
         ed:13:99:81:b8:71:df:81:16:ae:28:56:aa:dc:69:05:e0:6a:
         77:dd:fd:c6:d1:78:68:cc:96:b7:e4:d6:2f:fa:58:b5:23:8f:
         e1:ef:cf:1f:ed:05:19:3e:e9:dc:af:7c:0a:3f:36:29:df:4b:
         19:5f:89:d7:6a:06:cf:16:6e:4b:ee:d1:e7:a8:cd:16:3d:94:
         26:53:64:d7:78:fc:ec:75:62:41:28:22:f6:64:cb:88:0d:6a:
         01:6c:8c:24:e7:5d:3c:db:14:a9:e1:14:6e:ef:27:21:db:6e:
         0b:5b:c9:ad:98:81:9e:ff:74:94:b0:bd:5f:c1:6f:72:9a:dd:
         10:ab:80:fc:f7:aa:39:86:62:f9:08:20:b4:29:a1:fe:54:2a:
         33:49:04:ca:81:40:a0:38:5d:f6:10:43:fe:93:8f:e6:4d:78:
         f4:cb:9f:06:db:62:df:2f:86:2b:93:47:59:c5:26:fc:21:0e:
         90:c5:7e:63:84:14:10:6b:e8:14:fe:7d:4e:b2:83:75:f4:ea:
         f6:c3:06:72:77:8c:35:e3:46:52:37:0b:76:47:e9:ec:92:78:
         e7:d5:fa:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhDMTQxMTAvBgNVBAUTKEJCMEU1NTAzNzlGRUEyODFBODgxQTY3NDc5Qjc3Qzg2
MDJEMDEzMTQwHhcNMjUxMjA0MjIzMDI4WhcNMjUxMjExMjIzMDI4WjAYMRYwFAYD
VQQDEw02OTMyMGI4NC03MDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAEuGpt+64m/DxelbGbgWsDjpwvv08I4v+Ip5I65EMgQCCqx2yALa0EbhlRa
LhLqFy4TGNDc1wG4SGxh0MOM+IJ1COPvaLama5eIR7ez2Uh42rYPLdXLlt5DbmWF
2BIHV14uGBgkcYUaZORANg5AmpsWmtbiakeBshQhVZo+NpYOG7GNByd8kN3o5f3Y
I8NHsx6eN7za1/wK8vbVZDYynL/AnQT/om+31L/2smx2JTOdMBeD44I/xO1LRyP/
uS3R9RxPZ54LnO22IE3trXtHRAsRVekosBCxe9h7uWviQCqE9jJ+3WZVCS6lGAtL
gMBtdDp514UyUk4lOtBVu3ZijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4QjSXL
x8U22uGrvFSyodXhYRgNMB8GA1UdIwQYMBaAFLsOVQN5/qKBqIGmdHm3fIYC0BMU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEMxNC8zRTRDNDYzMDVC
QzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9vR29nYVowZWJkOGhnTFFF
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3NVZBM24tb29Hb2dhWjBlYmQ4aGdMUUV4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEMxNC8zRTRDNDYzMDVCQzQxMUVDOTYyNzkzNTRDNEY5QUUwMi91dzVWQTNuLW9v
R29nYVowZWJkOGhnTFFFeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIN+yzXcAo17CbKEZc2hqhm1owlwGilMvDIkV9oblC3QYxG7XtE5mB
uHHfgRauKFaq3GkF4Gp33f3G0XhozJa35NYv+li1I4/h788f7QUZPuncr3wKPzYp
30sZX4nXagbPFm5L7tHnqM0WPZQmU2TXePzsdWJBKCL2ZMuIDWoBbIwk51082xSp
4RRu7ych224LW8mtmIGe/3SUsL1fwW9ymt0Qq4D896o5hmL5CCC0KaH+VCozSQTK
gUCgOF32EEP+k4/mTXj0y58G22LfL4Yrk0dZxSb8IQ6QxX5jhBQQa+gU/n1OsoN1
9Or2wwZyd4w140ZSNwt2R+nsknjn1fop
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:43 2025 by rpki-client