This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          xwCRYAxgF5v7pqIGVe2aKAem0qpL+nPLzNgTrHgbAOw=
Subject key identifier:   AC:21:C8:CB:8A:A7:37:9F:80:78:19:41:9A:C0:39:BC:A2:C2:F9:1A
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          0140
Signing time:             Fri 05 Dec 2025 02:31:39 +0000
Manifest this update:     Fri 05 Dec 2025 02:31:38 +0000
Manifest next update:     Fri 12 Dec 2025 02:31:38 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: 4mv7mMi0iJOspmoEPGnxRFP1GQruM7myoJZ+EhSRSBM=)
                          2: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: g8qMHMQ112lEc0CBX6z9UVtKL/qr3OF4595+543HHj8=)
                          3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: 7nB9PKLpginNAvHpyeXPNO88VYIsFeVoJ8sBAHLSABo=)
                          4: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: GE9if/qMDXWukB3XSTMftXVRzAVJimyZd4NP7/FslLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: Dec  5 02:31:38 2025 GMT
            Not After : Dec 12 02:31:38 2025 GMT
        Subject: CN=6932440b-6773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:3f:d9:d1:22:8d:87:b5:9a:de:6c:e2:9d:
                    54:72:07:e6:50:66:51:ff:bc:ac:75:e7:33:d3:76:
                    0b:d5:2e:10:8f:c1:75:15:1f:83:65:b8:7d:bb:ae:
                    fa:38:6a:0a:64:d4:c6:c2:85:03:ae:03:5e:0a:5e:
                    0d:93:50:68:05:80:20:9d:71:d5:7a:04:35:f4:07:
                    d1:7e:03:f1:39:f4:23:ce:80:26:19:23:f2:28:51:
                    43:cc:a0:a6:41:3c:cb:47:61:d8:64:71:7b:8d:a6:
                    f2:0a:4a:0b:5a:79:03:fb:be:fc:ed:a8:e0:c6:a1:
                    ba:3b:e7:0e:e3:57:6c:15:0f:6d:84:16:60:db:a2:
                    17:b3:bf:56:f8:dc:71:3b:d1:64:2f:0e:93:78:c4:
                    62:c1:da:6b:53:bf:1e:e6:ed:b3:75:dd:45:f3:dd:
                    97:8b:89:73:f6:91:2b:cc:69:22:0e:c6:9a:27:61:
                    e4:72:e7:6f:b0:6e:40:41:52:72:01:24:9c:15:1f:
                    e7:62:a7:2e:b1:a9:43:17:06:fa:db:01:1a:96:3e:
                    42:ba:1b:49:45:07:b7:82:fa:af:16:99:9e:39:8a:
                    56:6d:89:e5:b3:c6:66:db:98:33:67:3b:7b:10:8e:
                    ca:4f:04:2d:bb:ed:f2:91:f5:08:e1:d9:f5:59:de:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:21:C8:CB:8A:A7:37:9F:80:78:19:41:9A:C0:39:BC:A2:C2:F9:1A
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:79:65:d5:09:9e:33:e7:c2:de:ca:b2:b6:16:62:c9:09:65:
         47:81:9a:b1:99:df:20:e4:22:22:56:28:ab:8a:02:d0:93:10:
         c2:62:ad:81:09:a2:e1:81:a2:ef:44:2b:d1:21:4d:cd:ee:6f:
         fb:77:ff:99:61:7d:b9:10:01:57:18:51:43:e0:fd:4b:ba:81:
         e8:4a:32:8a:7b:43:da:2d:6c:50:86:36:5e:ed:77:63:7e:d2:
         1f:d4:0a:d8:6f:b6:ef:87:6b:8f:bc:e1:b4:3e:c0:17:6c:ab:
         a9:6e:20:94:fc:8d:ff:7b:33:29:be:6a:b3:91:a8:58:34:4d:
         5a:99:d8:1f:42:e6:25:fb:1a:e1:40:9d:74:47:48:ad:a0:89:
         f2:51:52:fe:05:ff:6a:79:05:45:c2:9b:d4:bf:13:7a:5e:ea:
         6b:38:74:76:78:00:1d:27:c0:fa:47:d8:98:b4:82:59:ad:e0:
         2b:ba:0d:42:92:2c:37:d2:e6:bf:89:7c:51:67:c1:55:ee:c9:
         78:4d:9a:bb:58:21:87:1b:e2:ce:2b:13:c6:57:f4:85:d3:a6:
         2f:4a:ef:8b:f0:fa:4a:3a:b4:ae:2c:c6:3d:b1:40:42:5a:50:
         f1:8d:cb:72:c6:30:de:0a:0d:0e:d7:5e:f5:3e:3d:bf:f5:88:
         9e:56:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:26 2025 by rpki-client