This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
File:                     UuFqm4muyCoM8IXPWufcPrCPDJE.mft (raw, json)
Hash identifier:          ZooNcrr6I4EddbUGHeTqlgLpQ9cq8M1SAi5l6eyMW+k=
Subject key identifier:   18:81:D3:01:3D:48:25:9C:5E:04:9B:BF:A2:6F:C9:10:0C:63:2A:C0
Authority key identifier: 52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91
Certificate issuer:       /CN=A915CA20/serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
Certificate serial:       102C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
Manifest number:          1023
Signing time:             Sat 06 Dec 2025 16:55:23 +0000
Manifest this update:     Sat 06 Dec 2025 16:55:23 +0000
Manifest next update:     Sat 13 Dec 2025 16:55:23 +0000
Files and hashes:         1: UuFqm4muyCoM8IXPWufcPrCPDJE.crl (hash: XRNl6yWTE9TxZ2AVRKJKzGdP2iySbzAilZ8k51hicYg=)
                          2: 63B80D12552011E9BA55007FC4F9AE02.roa (hash: gPm95k9B9IRjr3SYjHp0eLr7oEtltC4Q30ofIoBPOx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4140 (0x102c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CA20, serialNumber=52E16A9B89AEC82A0CF085CF5AE7DC3EB08F0C91
        Validity
            Not Before: Dec  6 16:55:23 2025 GMT
            Not After : Dec 13 16:55:23 2025 GMT
        Subject: CN=69345ffb-db3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:ac:22:d8:e8:6b:c4:04:8f:db:a2:b5:dc:
                    38:83:8d:a9:9a:b5:90:da:88:ae:27:40:c9:2f:f8:
                    bc:ee:3c:40:35:80:46:f2:22:56:e6:f3:99:aa:51:
                    50:2d:9f:6c:5b:fe:f7:be:1e:b0:5b:26:34:04:6c:
                    97:55:d8:25:08:d8:51:c2:26:c5:a6:5d:66:9f:6a:
                    6a:ea:37:1c:bc:df:f1:8d:15:9a:84:af:78:86:08:
                    52:6b:93:69:e5:95:88:cc:c2:a9:df:a0:45:ee:2f:
                    3a:c1:80:0e:dd:a5:ad:f5:2b:e1:9b:87:cb:d2:46:
                    77:37:ca:54:d3:49:7a:d1:ad:3d:85:26:f1:ad:81:
                    e2:8e:4d:4e:8c:5a:e0:fa:d3:e7:b2:ce:7f:4f:aa:
                    40:25:72:b2:28:dd:e1:17:90:61:fd:23:c7:38:3d:
                    21:bf:85:b2:af:45:c5:65:32:68:8a:1e:f5:9f:4b:
                    88:e1:31:6d:16:f3:ac:ba:31:8b:da:2a:0a:92:1f:
                    41:c7:08:54:b6:9f:bf:ab:47:18:ca:ab:5c:10:c5:
                    98:f2:d2:13:74:52:11:41:ff:48:93:b1:44:6a:50:
                    0d:a7:f5:81:fe:c3:c2:6b:eb:e7:74:a0:a8:ca:2b:
                    4f:a8:f9:25:cb:b0:48:d0:aa:c9:5b:8c:fc:43:01:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:D3:01:3D:48:25:9C:5E:04:9B:BF:A2:6F:C9:10:0C:63:2A:C0
            X509v3 Authority Key Identifier:
                keyid:52:E1:6A:9B:89:AE:C8:2A:0C:F0:85:CF:5A:E7:DC:3E:B0:8F:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UuFqm4muyCoM8IXPWufcPrCPDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CA20/2266AE22551B11E98BA0C073C4F9AE02/UuFqm4muyCoM8IXPWufcPrCPDJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:43:d6:04:36:80:dc:2d:08:38:dd:7e:09:53:0b:ac:8e:
         55:66:c2:ec:b6:68:11:3c:1b:4b:d9:00:5c:5f:1b:d4:55:c2:
         c2:bf:20:5e:ff:84:93:ba:79:36:bd:51:75:2d:93:29:8d:49:
         16:26:4f:80:7f:dd:4a:df:64:5e:46:90:ec:08:81:5e:a1:1b:
         3d:e4:cd:10:7c:9e:99:66:f4:26:e3:fa:26:17:50:d1:c7:72:
         c6:96:d1:f8:64:43:db:df:39:16:9f:00:d5:9b:86:f0:63:f7:
         43:13:54:b3:87:5e:60:74:1e:74:8f:7e:62:d3:a9:88:fa:f7:
         b0:d4:08:1d:f9:63:d7:fa:6f:52:aa:8c:86:71:cd:1f:d2:33:
         4e:7d:90:d6:76:97:18:25:59:28:f1:27:08:35:a3:2c:52:04:
         50:3e:e2:5b:e9:46:64:38:81:5c:32:00:d9:0d:d2:31:6b:9b:
         41:e6:70:2c:7a:08:0b:d2:e9:b3:43:b5:52:9c:02:68:99:22:
         07:70:67:0f:a1:49:3a:d8:db:f0:09:8e:51:57:ab:7b:af:e6:
         46:2b:ad:67:22:c1:6a:9d:1c:a6:21:12:dd:5b:78:38:2b:ed:
         cf:80:e2:84:3f:54:cf:da:f3:e2:92:1c:ab:0c:cf:d4:49:95:
         f4:51:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:53 2025 by rpki-client