This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File:                     uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier:          jCfhwnVb8UYaW9pNeqXX9S2qqnPyErvi9fBHzPPZsJE=
Subject key identifier:   60:87:9D:04:91:51:D2:1E:73:3B:22:07:4B:A4:17:F4:FB:E6:93:D5
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer:       /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number:          84
Signing time:             Fri 05 Dec 2025 04:36:26 +0000
Manifest this update:     Fri 05 Dec 2025 04:36:25 +0000
Manifest next update:     Fri 12 Dec 2025 04:36:25 +0000
Files and hashes:         1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: RsOv/5UJ7zHfJgPaOJR+jVhcA2sCL8mErBCspCcy85M=)
                          2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: aySEvRngppKs/Lyekhtc0uzM27zK/l0cRA6UmOeIzlU=)
                          3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: v1ibDjxmzIv2LQG97YVedEX5wevRpNJDRuNHyDfGpBg=)
                          4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: JronbENc2C4chw8Lr5GoQXHOGuejfoIjiKRSNDdiR4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
        Validity
            Not Before: Dec  5 04:36:25 2025 GMT
            Not After : Dec 12 04:36:25 2025 GMT
        Subject: CN=6932614a-9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7e:e4:f3:8e:ea:1e:a8:9c:28:06:fc:5c:96:
                    4c:5f:23:b9:34:16:f8:42:55:96:48:17:6c:08:e3:
                    33:7a:53:19:37:25:46:1a:8b:58:77:38:b6:64:f9:
                    9a:bd:93:aa:16:df:f8:4e:c9:36:e0:fb:90:c8:2c:
                    c3:22:f7:4a:8e:6e:ca:7c:15:2c:bc:f9:40:54:23:
                    c0:83:e4:cd:3b:2c:f4:52:3e:d6:79:d5:d7:db:13:
                    61:05:92:0b:16:04:9d:20:9f:34:ca:26:98:de:d9:
                    88:73:de:57:53:7d:35:6a:88:f2:48:1d:63:a8:a2:
                    b8:3d:52:ad:6a:e8:c9:06:bd:c9:4e:37:20:1e:6f:
                    fb:30:69:b6:b8:24:69:3b:8c:82:df:66:4d:24:74:
                    dd:49:c9:a6:3e:65:38:6a:2e:e1:30:d7:b8:06:27:
                    99:96:fd:7f:f5:8b:97:34:a4:c7:f3:2e:f6:ee:21:
                    87:33:5f:0b:5b:c9:e8:c4:df:1d:40:c3:37:87:ea:
                    52:f7:c2:0b:f6:fd:6d:41:7b:1f:8a:96:ff:34:f8:
                    68:05:29:cd:1b:f8:b4:57:28:9d:fe:41:54:12:1b:
                    c9:d4:42:a6:8e:1f:eb:8e:8b:08:e3:0a:3c:0f:07:
                    90:d1:4d:98:bc:51:34:9f:00:01:68:2c:84:24:1e:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:87:9D:04:91:51:D2:1E:73:3B:22:07:4B:A4:17:F4:FB:E6:93:D5
            X509v3 Authority Key Identifier:
                keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:ed:c6:1c:81:2e:fb:d9:2b:66:93:bc:d4:00:2f:56:9a:
         03:76:68:99:db:08:81:89:67:74:95:43:53:c6:5b:81:20:c9:
         f6:25:24:3b:9e:95:f0:6f:eb:9c:60:c2:38:fc:5b:59:d1:a2:
         23:0d:1c:ee:6e:82:dc:cf:65:d2:14:fb:5b:bb:dc:02:82:59:
         65:0d:6a:00:3e:ec:0d:aa:7c:00:26:5a:b1:d6:bb:ad:62:a4:
         8a:b5:d5:39:2c:46:ce:e6:c4:24:47:49:4a:01:10:f0:a7:e7:
         d2:92:31:a5:48:75:12:c5:2c:b0:76:fa:d9:93:78:61:1e:c6:
         c9:57:75:bd:be:1a:dc:40:12:dd:84:da:d4:96:2a:dd:bb:62:
         9e:83:11:01:b0:28:17:cb:b1:a3:3b:62:eb:30:f7:e9:e9:72:
         be:02:f9:54:e6:f6:a0:9c:ad:e9:15:b4:b5:c8:17:c7:15:ff:
         ac:6f:65:f2:58:68:6a:6b:b5:93:0c:a1:79:b6:3d:5c:70:7b:
         35:1d:b8:5d:dc:11:c3:1b:8e:90:aa:64:c3:c3:74:ab:9d:3b:
         ca:d4:75:c2:a6:d4:1e:f9:2d:56:4d:04:b3:8c:2d:08:33:15:
         65:c6:43:db:b1:9f:d5:25:43:8e:71:d1:3a:e6:e0:ed:50:43:
         39:3f:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:37 2025 by rpki-client