This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          gcPQqj5lcvJziXYFW7tZEhbSL+U2evEdlXCo5OW7XcQ=
Subject key identifier:   D2:A1:D4:4E:0A:1B:AB:39:49:6F:09:06:89:FC:B7:7E:2F:33:C3:85
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0C6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0C60
Signing time:             Sat 06 Dec 2025 17:56:23 +0000
Manifest this update:     Sat 06 Dec 2025 17:56:23 +0000
Manifest next update:     Sat 13 Dec 2025 17:56:23 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: X4WdEd6Avajy06In1CaNPhGfOTZHpU6zHGFqWJJDM4I=)
                          2: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: xH17spaHhMO4029wjNj4ZW6FqoA9g6CON6QQbD7o3j0=)
                          3: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: J+JzfdPnvnmB6Ay3Ml+qeWmcjb1XIfVxnUqGVNUN7Ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 17:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: Dec  6 17:56:23 2025 GMT
            Not After : Dec 13 17:56:23 2025 GMT
        Subject: CN=69346e47-afaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:99:69:7c:2d:4f:5c:a0:04:e8:8b:f8:eb:
                    93:10:31:79:6e:45:ce:7b:2c:c5:de:f1:1b:be:1f:
                    b8:85:73:33:ec:c8:c2:1f:60:b4:a2:e7:a3:ac:f3:
                    ef:d8:83:ce:9f:ac:d3:42:06:1a:79:aa:06:95:9e:
                    af:1e:61:ec:c2:76:d0:9d:da:a4:41:22:6c:1c:b6:
                    48:eb:c5:a6:03:52:87:dd:48:31:03:24:b4:c4:3f:
                    4d:00:f4:d0:22:6d:75:61:9f:e4:cc:9f:20:9b:fe:
                    c6:13:a1:64:94:5a:66:6c:f2:8d:aa:1c:21:70:82:
                    18:ad:88:c5:75:17:08:f0:66:dc:33:9f:b7:4f:0e:
                    5f:98:a1:a4:9e:f8:e4:2d:68:44:79:2d:27:e4:b6:
                    ca:05:53:14:cf:8d:25:f1:3e:d9:53:9e:f1:bd:75:
                    d6:30:21:d2:24:38:be:71:3b:bc:7e:3a:87:ae:ed:
                    e4:8b:69:04:19:84:6c:06:0f:4f:8d:11:01:39:ca:
                    6c:09:ff:77:dc:4d:00:68:27:1d:6a:5d:9b:d5:fe:
                    7c:39:79:4c:af:47:a4:50:eb:fb:87:3a:95:73:81:
                    d3:f7:80:2c:34:22:1a:53:65:70:e8:8d:e1:10:2d:
                    97:43:07:06:e4:88:26:ad:ec:9b:52:0a:b4:b9:65:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A1:D4:4E:0A:1B:AB:39:49:6F:09:06:89:FC:B7:7E:2F:33:C3:85
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:32:82:0d:a8:02:7e:ea:a0:c8:e2:80:35:79:cb:4c:9d:
         67:10:11:2e:3f:2c:43:95:3b:ac:2f:d5:f3:e0:0b:83:d0:40:
         b9:e6:b4:86:c5:15:54:16:c7:7e:18:9d:82:19:3b:da:15:a7:
         04:9a:57:22:cb:3d:1e:64:fb:ed:08:1f:d0:1f:ca:a2:6f:cf:
         1e:99:ca:a6:bd:ec:00:ff:fe:15:1b:ed:74:86:c4:13:fd:d8:
         d8:df:c0:fe:4c:db:0c:b9:21:ec:f9:35:b9:fa:fc:6d:73:fa:
         75:32:ef:66:03:72:d2:15:cf:13:8c:b3:54:30:6f:5a:7c:9e:
         b2:06:a1:14:7a:d7:7c:85:65:95:43:66:90:f5:13:50:e9:25:
         d3:08:69:10:90:b7:2d:62:ce:99:7d:ea:14:54:b1:61:3a:ba:
         7d:01:48:b9:a6:ee:08:9c:70:7b:e7:45:3f:10:db:bc:f0:0a:
         35:9f:f9:a1:72:57:df:ca:9e:6f:e7:24:cb:85:b6:a0:4b:aa:
         41:6c:89:26:da:ec:8e:85:0a:06:77:69:7f:89:ee:02:ab:8a:
         31:9e:2b:40:52:c2:89:d8:34:24:f2:91:14:a0:9d:b5:25:14:
         34:ed:86:32:b5:91:86:c7:c6:b4:93:8c:cf:a3:74:8d:17:15:
         e6:41:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:41 2025 by rpki-client