This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File:                     UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier:          Sguz4dERzh//nnJ7XU2F1JtnhhevCbA2kFn4Zpc8DvI=
Subject key identifier:   13:7C:95:B6:5D:BC:3D:87:C3:C7:31:65:EB:7B:27:90:EE:7A:9A:11
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number:          07
Signing time:             Fri 05 Dec 2025 05:55:39 +0000
Manifest this update:     Fri 05 Dec 2025 05:55:38 +0000
Manifest next update:     Fri 12 Dec 2025 05:55:38 +0000
Files and hashes:         1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: 7hK8ydOefXn8PeBzh0IUu03PzIzrWH0zBlU+3ZGbQ04=)
                          2: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=)
                          3: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:55:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Dec  5 05:55:38 2025 GMT
            Not After : Dec 12 05:55:38 2025 GMT
        Subject: CN=693273da-95f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:a8:ab:f0:7c:c3:35:6f:08:10:48:22:fa:
                    22:cb:32:78:72:ea:54:b3:e8:51:0b:08:23:bf:73:
                    f0:c8:80:6e:a2:97:3e:2c:d1:45:66:a5:ce:74:b4:
                    e2:96:17:62:8d:07:7a:8b:e2:a6:9f:f4:74:2f:56:
                    11:78:0e:83:e4:4b:96:58:75:93:53:f0:12:40:42:
                    b7:95:e8:1e:0c:8c:d1:e5:8a:ac:8a:99:e2:fe:e2:
                    1e:8d:58:68:b6:cc:a1:92:be:a7:0a:8b:c7:de:d9:
                    e2:8e:02:68:04:58:3b:ba:9b:48:b7:92:32:8c:a4:
                    71:3b:ce:c4:43:25:dd:a3:cf:b5:36:5d:4a:9b:ec:
                    70:1d:36:18:4d:67:63:e5:be:ee:79:62:bd:9f:92:
                    9b:b6:da:e5:03:76:4b:00:39:da:d4:75:1d:fb:8e:
                    c5:47:08:55:60:d8:9d:ea:b9:8a:15:4a:54:98:d9:
                    48:df:5c:1a:46:61:d7:81:31:38:70:02:61:df:a9:
                    ad:66:31:df:a8:ac:89:6b:4f:99:74:a5:ae:d9:dc:
                    d2:b2:71:e4:ca:8d:62:2a:d8:3e:0d:88:5b:39:3f:
                    5c:26:e3:4d:24:04:2f:76:f9:97:e8:c4:c8:3a:73:
                    14:c4:39:5c:4b:39:ed:c5:bd:5c:f5:c4:3b:79:fe:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7C:95:B6:5D:BC:3D:87:C3:C7:31:65:EB:7B:27:90:EE:7A:9A:11
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:3f:3b:ac:ae:2c:90:5f:2c:8e:10:9b:a2:e9:0c:00:c4:
         79:72:37:9c:f8:59:71:83:3d:41:52:fc:76:0e:a8:f5:c5:36:
         92:40:6b:4c:8f:77:9d:c5:31:a3:9b:f5:52:35:b8:aa:e5:f3:
         48:e6:ac:b2:5f:cc:65:97:0b:08:5f:23:54:af:a3:c4:68:f8:
         ca:f9:6b:15:93:a7:b4:e1:75:25:e5:90:5a:64:52:07:f5:5c:
         48:c7:3e:85:9e:ac:a2:38:d2:21:60:23:01:26:8e:cc:e0:78:
         a7:46:6f:de:ff:97:38:5c:a7:6f:2b:70:7c:9b:c9:a3:d2:bc:
         e5:b6:c5:d3:54:aa:07:b3:82:1d:1b:7c:47:76:e9:fd:5a:fb:
         f5:f9:56:10:eb:fa:e7:0d:58:f3:c4:56:62:50:57:58:0c:78:
         23:e8:b5:2d:b7:5d:a1:bb:86:39:9f:27:ad:06:2b:54:a9:48:
         a6:94:3a:ad:6a:99:54:53:8b:b9:c4:05:6e:17:aa:89:87:af:
         32:74:9e:59:c5:b8:34:4d:0f:e3:46:8b:6b:b1:d4:73:af:ad:
         68:41:85:1a:92:f4:d0:56:e5:1f:42:2c:e4:20:f1:dd:39:a7:
         67:63:c3:1b:bb:b1:36:80:20:a0:21:da:4c:7b:9c:b4:c9:f0:
         23:4b:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:05 2025 by rpki-client