This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          +cYxcqZMSeLUXRJKdpUjAUattXw0M+DE67/umm03hdA=
Subject key identifier:   69:70:BC:FF:E8:AB:40:3C:AE:42:85:DF:28:4C:1E:45:31:EE:89:D5
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          020D
Signing time:             Fri 05 Dec 2025 00:36:32 +0000
Manifest this update:     Fri 05 Dec 2025 00:36:31 +0000
Manifest next update:     Fri 12 Dec 2025 00:36:31 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: imwVwXqIQyOLFj2+buESTTXk+ghDBFpIALlW2Uf6+ME=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Dec  5 00:36:31 2025 GMT
            Not After : Dec 12 00:36:31 2025 GMT
        Subject: CN=6932290f-9e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:10:ac:ef:35:94:ed:ea:67:88:9c:ae:d2:
                    34:65:6f:b3:22:6f:b1:90:dc:87:b8:cb:97:8f:c8:
                    e5:24:19:a7:23:05:e0:b8:76:72:8e:44:cf:b1:e0:
                    80:d8:28:fb:90:21:d2:b7:cf:61:d7:4e:12:f7:64:
                    81:e8:68:a5:c7:be:c9:b9:a3:6e:f1:1c:bb:2f:ae:
                    8a:07:32:96:82:1f:d3:b8:d9:91:12:f2:ce:8b:f8:
                    fb:48:3b:04:37:de:36:eb:03:5e:9a:f9:50:f5:08:
                    93:d0:bd:fb:e1:05:1f:ba:85:2c:51:68:e3:6f:a1:
                    1e:46:3c:f2:5f:a9:f2:84:cb:52:37:43:28:e9:4b:
                    2f:59:5b:f2:b4:a2:c7:e3:b0:25:fb:30:1b:86:c8:
                    24:3c:2e:01:74:07:bc:f4:7e:4e:21:ed:17:a2:8e:
                    ce:2e:ff:dd:b2:24:47:9a:a3:57:f3:99:e0:ae:ca:
                    97:75:54:a3:50:fb:48:f9:50:6f:41:e8:e5:91:8c:
                    78:8c:ca:a9:bf:be:4a:9c:b4:71:91:c1:4e:e2:bf:
                    fc:69:80:f3:79:a6:b1:46:9d:71:bb:48:04:f9:20:
                    a6:2f:c9:fe:50:a1:a2:69:01:f6:fe:d9:49:b0:b5:
                    d0:3d:85:ab:b4:05:3a:24:1d:d4:44:7e:d0:a1:19:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:BC:FF:E8:AB:40:3C:AE:42:85:DF:28:4C:1E:45:31:EE:89:D5
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:f2:83:7e:96:2d:58:85:72:5f:2f:22:76:a8:6e:8e:98:
         26:92:0f:ea:a9:13:63:6c:86:cc:04:d0:1e:cc:aa:84:07:76:
         74:06:31:13:e1:ac:cf:38:6d:1d:38:98:3e:c6:c2:cf:c6:cd:
         f8:e7:08:22:6b:35:29:28:84:43:8c:0a:9f:b5:c2:7a:f6:6c:
         5b:0d:15:62:72:fe:95:a5:81:a3:e1:23:4e:06:bd:47:a0:a3:
         45:3a:8f:74:a7:b1:df:bd:0a:a1:4e:59:6c:86:fe:92:d7:c2:
         fa:ea:c1:ad:89:a5:3f:28:e4:c8:c7:37:ab:0a:8c:45:24:52:
         7a:df:f3:86:8c:f6:fe:90:87:1c:29:0c:38:a9:20:a5:db:9d:
         dd:f4:58:b6:05:d7:e6:45:80:c5:c4:91:98:9e:ad:51:cc:d6:
         d5:24:69:a8:23:68:be:e9:2a:83:0f:f1:d2:fd:1a:a4:a3:a0:
         ee:62:f9:8b:85:66:04:fa:b1:6c:82:8d:fa:d3:13:ef:bc:40:
         a0:ce:01:21:d0:fc:76:d6:9f:11:3c:cf:76:f2:86:b9:32:7a:
         80:9c:bb:ab:b6:65:ad:b8:1b:ae:e6:e9:8e:f8:6a:94:bc:b8:
         39:1a:ca:fa:80:d1:51:78:38:e4:c7:fd:c7:8f:96:77:90:2a:
         f8:e5:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:58:56 2025 by rpki-client