This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
File:                     uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json)
Hash identifier:          hD3o8R4UdT3rAYM4vNUlzJwnTL+92Olb0NcpOehIYoM=
Subject key identifier:   CC:03:A8:38:34:76:93:F2:60:90:BF:46:E5:D5:AF:60:A0:EF:98:C8
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Certificate issuer:       /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
Manifest number:          58
Signing time:             Fri 05 Dec 2025 05:03:36 +0000
Manifest this update:     Fri 05 Dec 2025 05:03:35 +0000
Manifest next update:     Fri 12 Dec 2025 05:03:35 +0000
Files and hashes:         1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: CG37vDfbC9X+qr2xVbCE9t9jEXBJvgGn2eqKJyc2/Fo=)
                          2: 48B17B5CB4CD11F094AF5C23C4F9AE02.roa (hash: nlIGArnSyHQ+mO4FvncFWFbJtBmLN0/ZfyCLV+iceoM=)
                          3: 495E782AB4CD11F094AF5C23C4F9AE02.roa (hash: eLaZWYd2IAoJX/jCVip0I9wbpsnmQdFUjnIKDbKlG2A=)
                          4: 483FF590B4CD11F094AF5C23C4F9AE02.roa (hash: lwPZRkJ3CKT2W62+tNtEUbMDOcca3CEzT/1iEB04PzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
        Validity
            Not Before: Dec  5 05:03:35 2025 GMT
            Not After : Dec 12 05:03:35 2025 GMT
        Subject: CN=693267a8-1e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:db:b0:c3:e7:46:41:ca:8d:c5:8a:d9:77:55:
                    da:77:43:07:a6:5b:a2:56:88:ad:0a:13:8b:2b:a5:
                    3e:12:ac:65:cd:47:a5:65:3a:bb:71:81:ae:6a:17:
                    a4:db:55:0d:75:2f:17:c0:8b:38:8c:6a:45:0d:aa:
                    5c:3b:0b:2a:36:b4:a6:1d:db:e5:15:5f:b8:7d:a9:
                    39:6c:59:9e:e7:85:2b:94:c2:da:85:a9:d8:24:33:
                    7b:02:d0:47:90:8a:1f:3c:f5:16:7e:a6:c3:f7:a9:
                    60:de:71:aa:20:92:0e:ea:d4:77:03:15:df:0d:8e:
                    c3:54:31:ca:8e:5c:df:6e:97:99:83:a2:5a:17:6c:
                    59:b0:24:78:43:ed:c6:26:ec:0d:39:27:5a:e8:58:
                    3a:49:7f:ef:6d:9e:8b:aa:64:6f:2b:78:f5:ae:27:
                    69:7c:e2:65:11:77:95:bb:8d:39:d8:33:60:34:74:
                    20:e2:45:df:1f:4a:c1:98:b7:c4:1a:2a:b7:dd:24:
                    7c:91:6d:6c:17:80:13:41:64:b8:12:71:2c:84:75:
                    7f:5f:61:78:54:ee:4b:23:87:49:11:71:61:18:40:
                    be:1d:57:26:a2:1f:41:26:6c:7f:83:96:1b:7d:6c:
                    d5:2c:4b:82:45:da:70:e6:31:06:1d:dd:b2:27:99:
                    c1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:A8:38:34:76:93:F2:60:90:BF:46:E5:D5:AF:60:A0:EF:98:C8
            X509v3 Authority Key Identifier:
                keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:87:94:a6:54:9b:94:f1:37:cb:94:0f:f5:04:59:5c:e2:73:
         8c:43:fb:d2:98:fe:44:d1:50:c3:b6:44:53:2f:09:df:67:85:
         ed:58:59:90:d1:ba:7a:d7:33:b0:2b:03:c5:0b:bb:c0:ed:8c:
         34:67:85:41:4a:5d:79:4a:7f:4b:33:62:f4:6a:98:e6:7f:54:
         fe:92:0b:97:3e:5c:f7:13:5f:13:0e:69:07:0c:90:71:76:89:
         b4:26:61:36:89:d6:b8:a7:fc:b9:7c:e0:22:d0:d7:8a:cb:d8:
         6c:b2:30:35:21:66:1f:58:60:21:1b:fc:ec:28:55:81:b9:7f:
         b7:06:20:85:b3:7f:ab:e5:17:65:d3:ff:e4:88:a7:fa:0c:5c:
         5e:a2:92:61:5b:65:39:d8:78:73:1e:94:17:ed:81:51:97:f0:
         52:d2:97:b8:9c:a9:ad:0c:d3:c6:7c:51:dd:f3:8a:de:bc:34:
         43:b9:7a:fd:8e:b2:b3:10:42:26:9b:7e:9b:40:8b:2a:05:d2:
         e4:5b:c1:26:59:e1:80:56:a1:8b:ec:a5:14:2d:6e:04:b9:91:
         e1:4c:d0:ab:45:f2:2e:e8:b6:8d:99:68:92:2f:71:26:cf:e7:
         15:9b:58:4d:d0:c3:dd:80:2a:0b:a2:2f:2c:16:e6:fe:d2:3c:
         f5:ae:e8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:39 2025 by rpki-client