This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
File:                     _UXMVAPGTPsjCqfe7RC8aCKNdHM.mft (raw, json)
Hash identifier:          oCr1iiixI+GcJ8IVeZoPLZfAd2Inmg9Yth0lMWBeIQk=
Subject key identifier:   7C:62:80:7E:30:77:AB:E6:4C:2C:84:9C:89:F9:8C:52:D7:18:38:04
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Certificate issuer:       /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
Manifest number:          01AE
Signing time:             Wed 17 Dec 2025 02:41:42 +0000
Manifest this update:     Wed 17 Dec 2025 02:41:41 +0000
Manifest next update:     Wed 24 Dec 2025 02:41:41 +0000
Files and hashes:         1: _UXMVAPGTPsjCqfe7RC8aCKNdHM.crl (hash: JswRE2rC90Xw9RpO9IAk6RJZGoYeXMoqrKggIZ6kWk4=)
                          2: 6B62D92248D511EEBE05CC7FC4F9AE02.roa (hash: aad5STWtZPNgSUZlTpHai7ItORShh/+m60YWqMbY2wU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
                          rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 02:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
        Validity
            Not Before: Dec 17 02:41:41 2025 GMT
            Not After : Dec 24 02:41:41 2025 GMT
        Subject: CN=69421866-3f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:b9:06:6a:29:18:0a:ea:a9:a4:96:d2:28:
                    2c:33:c3:6b:11:c0:0b:45:6d:d1:8f:3a:02:f5:f8:
                    57:3d:5b:19:84:04:11:df:07:50:f7:bf:80:4c:5c:
                    04:da:40:70:a9:69:d3:c9:8b:e9:d0:0d:e3:fe:a7:
                    60:87:d0:4f:3a:d6:29:98:25:ef:1c:85:d8:30:fe:
                    8f:40:b8:77:7e:3f:2f:06:b8:15:50:f6:75:e2:7f:
                    b8:df:fa:21:1e:67:51:8f:c3:2e:6c:49:a6:7b:8c:
                    55:f8:ba:1d:5e:cc:64:ef:29:bb:79:9b:6e:e4:a4:
                    6d:f1:72:49:09:95:a1:ec:6c:63:5d:46:a7:f7:65:
                    07:e3:f3:1a:ca:03:88:19:1d:c5:e7:d5:d3:b9:85:
                    c8:9d:d0:64:b1:f5:4f:55:4b:ac:08:a0:25:55:8b:
                    42:99:a8:86:3e:b6:df:ca:a5:fe:e6:f5:f0:54:a0:
                    65:7a:81:f7:9f:52:a3:d2:3a:b0:e1:b5:84:58:0f:
                    c3:2d:6e:cf:02:c3:45:36:e8:9a:5f:29:5b:af:f2:
                    99:d2:17:49:2e:76:c0:0a:e3:aa:2d:93:e3:a7:22:
                    b4:85:f4:5c:bf:7d:3d:46:06:7c:90:9d:76:0f:e0:
                    75:b8:f3:9b:64:0f:a9:19:1f:36:14:8e:b2:ce:7a:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:80:7E:30:77:AB:E6:4C:2C:84:9C:89:F9:8C:52:D7:18:38:04
            X509v3 Authority Key Identifier:
                keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:ce:17:44:60:ff:ec:e0:f9:32:cc:65:95:65:32:f6:ae:
         8f:ca:1c:e2:2d:51:c6:23:44:a0:ae:55:8f:f1:fa:59:90:8a:
         14:b5:7c:b9:80:0e:74:c2:98:4e:28:ce:cd:3a:ea:7b:ac:8b:
         96:72:d6:cd:b8:b1:29:be:09:9f:30:7a:59:d5:d5:02:e4:3c:
         7d:d9:f0:48:97:03:1f:1b:bd:dd:b7:dc:71:eb:e4:0e:ac:cd:
         c6:33:33:88:62:9c:3c:20:14:0c:7b:35:27:5a:07:c1:7f:c6:
         bf:21:9b:a8:b7:3e:98:3e:da:a5:fa:a1:d6:cf:c5:c1:75:f5:
         b2:d3:4f:52:52:76:80:cc:77:d0:4a:3b:3d:ed:f2:d3:ac:be:
         c6:ce:14:3a:49:db:c4:ee:e3:47:69:54:bd:29:d6:83:a4:c6:
         85:54:d1:a9:6a:11:85:56:dc:9b:ce:54:a7:06:54:60:c4:0c:
         b3:5c:08:46:64:e8:7c:a1:d5:5c:36:e0:ba:62:5d:1f:50:e8:
         4c:e3:08:94:23:96:9f:b5:21:fb:fb:d0:fd:f3:eb:65:81:59:
         fa:35:48:1c:e6:54:c5:c4:2e:b8:91:aa:07:94:56:23:4a:19:
         d9:07:84:d2:59:2e:b1:f9:75:47:df:78:7d:80:96:56:86:e5:
         e0:7d:a8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 22:22:01 2025 by rpki-client