This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File:                     UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier:          KM8oPBVOUBACHyy074GrdzJwRuuygAgyhyoWIucG5uA=
Subject key identifier:   1E:49:7C:94:F4:1D:60:DE:5A:15:36:F3:7B:06:E4:70:43:3F:71:00
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer:       /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number:          16
Signing time:             Fri 05 Dec 2025 05:41:40 +0000
Manifest this update:     Fri 05 Dec 2025 05:41:39 +0000
Manifest next update:     Fri 12 Dec 2025 05:41:39 +0000
Files and hashes:         1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: VltHZpTPm49X/3METL/bAZ8mR+eha3X85dzk+6CTXkc=)
                          2: 8BA5F114B33C11F0B890EE54C4F9AE02.roa (hash: NE2eXCQMzk7qVx293u2lcJ27LjuwxAu1DrsesQw1Ntw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
        Validity
            Not Before: Dec  5 05:41:39 2025 GMT
            Not After : Dec 12 05:41:39 2025 GMT
        Subject: CN=69327093-d0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:9e:ed:ce:59:3b:b5:4d:6d:51:87:70:e5:
                    d4:df:db:bf:9f:be:bf:c6:0a:e2:2a:66:50:3a:78:
                    df:1b:6e:92:39:4a:83:ce:8a:2d:7d:1c:62:d8:72:
                    d1:66:79:91:c8:ba:43:57:b2:ce:f9:1b:e1:26:8c:
                    a7:23:1c:65:4f:3c:e9:59:04:69:23:70:ec:c4:8b:
                    94:50:c0:71:84:c6:b6:15:cf:5c:1b:29:d2:e0:66:
                    55:87:24:58:e7:bd:df:e6:cb:14:ae:e1:72:9b:fa:
                    79:16:03:9a:f0:5c:bf:9f:50:11:8e:f1:3b:96:42:
                    3f:b8:56:54:ee:06:4e:8e:fb:08:05:24:de:09:19:
                    9b:4b:31:d4:19:58:0a:7f:cd:2d:8c:66:e7:7c:0f:
                    72:c5:99:3a:fd:d5:68:1f:91:0f:a1:fd:95:2c:b3:
                    1c:33:27:9c:59:fe:a4:cc:38:93:99:0e:ac:68:36:
                    6f:32:4e:7c:15:bf:e9:55:8c:6b:90:ee:76:a3:d0:
                    1d:64:9d:4e:16:5d:46:e0:63:ac:b0:41:5c:1d:04:
                    62:c4:2b:8f:2c:2e:5c:5f:48:92:44:ba:01:25:cf:
                    c9:94:9a:58:fb:b9:85:e1:55:e6:09:5e:c6:ae:42:
                    2a:ce:93:74:69:c1:2c:c7:ce:47:01:f9:7c:5f:c3:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:7C:94:F4:1D:60:DE:5A:15:36:F3:7B:06:E4:70:43:3F:71:00
            X509v3 Authority Key Identifier:
                keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:e1:74:5a:e0:16:70:03:7a:0f:62:4d:ee:2f:9b:db:90:
         01:82:71:a6:9f:26:b6:df:f8:8a:53:86:d4:d6:3d:67:3e:8f:
         47:75:a8:f7:69:16:31:36:81:da:54:29:b1:36:85:6f:66:4f:
         2f:c8:36:51:ba:98:0a:f4:98:52:11:84:f1:74:8a:5c:13:9e:
         97:9a:49:6e:98:7b:93:fc:2d:30:55:6c:fc:ea:b7:00:bc:53:
         7a:34:fb:ea:bb:8b:45:65:74:05:20:30:04:78:ba:e2:65:0e:
         a1:cb:c2:3d:a5:0e:1f:e6:29:82:89:9d:03:33:ee:90:fd:2e:
         37:ab:6b:0a:83:3f:20:90:47:df:ba:f5:a3:43:9c:c8:5e:ef:
         d5:31:17:3b:e8:0a:4d:84:58:ad:3a:32:4c:5b:88:02:bf:15:
         4e:84:cb:37:e4:70:65:fc:2d:24:2b:4c:a1:39:b5:f9:cd:ab:
         38:cb:3f:e3:8a:dd:6d:93:e4:2e:67:75:17:d9:c6:dc:85:08:
         62:1f:be:e8:95:56:e8:97:3f:9f:a7:ee:26:9b:88:a3:66:8e:
         e4:3c:6d:7e:19:6e:a2:66:62:99:43:2e:5c:f8:47:c0:d8:34:
         66:98:3e:78:62:ab:8f:eb:dd:c9:94:05:94:f2:9a:a7:a2:f6:
         5d:85:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:51 2025 by rpki-client