This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
File:                     uf67oJzxCyh-7SzlZyKzyaDvEv8.mft (raw, json)
Hash identifier:          oR+8qtEnzeM11fGgILjrg51872reNMley+2G7c+qrmQ=
Subject key identifier:   B8:CB:60:A7:45:41:16:D3:5B:E9:27:05:1E:86:9E:B9:E5:37:70:5A
Authority key identifier: B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF
Certificate issuer:       /CN=A918BB7A/serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
Manifest number:          09E1
Signing time:             Sat 06 Dec 2025 19:07:45 +0000
Manifest this update:     Sat 06 Dec 2025 19:07:44 +0000
Manifest next update:     Sat 13 Dec 2025 19:07:44 +0000
Files and hashes:         1: uf67oJzxCyh-7SzlZyKzyaDvEv8.crl (hash: qDI13hVNPRmYbrHNvCEgBy36IPpbcxj6ceOYTL12nh4=)
                          2: 27030ADA8EB211EA9D09090FC4F9AE02.roa (hash: KzsEqYZi4RymBpkz6QVCB3ieArM+VhARkW/2ksmdU8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl
                          rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 19:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB7A, serialNumber=B9FEBBA09CF10B287EED2CE56722B3C9A0EF12FF
        Validity
            Not Before: Dec  6 19:07:44 2025 GMT
            Not After : Dec 13 19:07:44 2025 GMT
        Subject: CN=69347f00-8dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:26:75:08:98:27:69:a4:5d:e6:52:d9:82:7b:
                    b2:0b:b4:20:8a:51:ec:0a:23:2e:26:79:8a:3b:fa:
                    6e:b1:1d:09:92:00:9b:2f:fc:63:41:15:d6:fd:1a:
                    53:14:96:df:8e:a2:a0:d2:08:1a:9c:18:2d:8a:ba:
                    b9:48:35:3d:f4:41:33:c2:23:7e:33:dd:bd:75:ee:
                    c8:a2:ed:18:bd:2a:b3:26:de:f5:6c:ae:84:b5:cf:
                    37:bc:d6:2e:6a:ef:3f:73:4d:fc:5d:62:b3:49:5b:
                    9d:39:83:17:f5:1c:7b:85:c9:58:eb:1e:75:cb:7a:
                    f3:ce:a2:7f:d9:57:12:95:a6:5c:cc:22:a2:ae:0e:
                    b5:72:bb:3a:34:5e:1b:d9:00:ad:9a:ba:69:32:c9:
                    c4:32:fd:2a:41:7e:c4:24:2b:a2:09:5c:2a:05:56:
                    ff:a6:f2:ac:b8:11:97:d1:5b:0e:df:08:b3:ac:38:
                    0f:c2:ec:5d:88:63:e9:0e:fb:74:3a:ba:16:4b:37:
                    5a:63:2d:94:b4:43:44:2a:67:eb:07:2a:d1:cf:80:
                    f1:c4:5a:ad:81:9a:d3:d4:1a:e0:19:df:c3:43:67:
                    8e:f6:f8:7d:84:55:d6:03:80:d5:ad:76:3b:bf:82:
                    c6:a9:71:17:06:06:e8:ab:3f:3a:94:53:5e:f4:fa:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:60:A7:45:41:16:D3:5B:E9:27:05:1E:86:9E:B9:E5:37:70:5A
            X509v3 Authority Key Identifier:
                keyid:B9:FE:BB:A0:9C:F1:0B:28:7E:ED:2C:E5:67:22:B3:C9:A0:EF:12:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uf67oJzxCyh-7SzlZyKzyaDvEv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB7A/5D21184C8EB111EAB02A550EC4F9AE02/uf67oJzxCyh-7SzlZyKzyaDvEv8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:a1:67:b1:4a:72:b3:8f:e2:41:0c:90:ff:a6:cf:24:b5:
         a9:0f:32:bd:65:19:c2:ac:32:9a:ff:cb:98:f1:2f:bc:10:87:
         e5:c1:38:ec:ec:fa:94:73:06:a8:a3:8a:b2:8c:f5:2b:81:8a:
         ea:29:c2:0d:1b:17:f3:cc:7c:8e:b7:e5:02:a3:48:20:01:60:
         98:fa:b9:9a:b3:c6:fc:44:75:55:0b:aa:d9:ba:6e:4e:d6:bf:
         b3:65:cc:e1:d1:bb:02:67:4d:2e:37:48:93:d9:77:e8:b6:28:
         d0:59:50:3f:fe:48:c9:60:5a:cc:f4:7d:bf:dc:f9:56:23:af:
         23:1e:f7:ae:c3:18:31:c1:6f:f6:4c:60:c7:9f:f3:33:0c:f1:
         2c:bd:fa:8b:ac:60:71:08:e6:da:2c:14:c3:7c:6f:3c:1e:a4:
         44:0c:e4:1a:39:5d:f6:1d:6f:48:36:a2:32:4a:1d:ac:d0:24:
         9d:03:c3:6e:1a:97:7a:02:7b:54:44:4a:9b:f6:d9:41:d8:77:
         13:77:35:20:ae:bf:8a:78:46:c5:22:ed:e7:82:80:ae:e6:57:
         5b:0c:20:dc:f2:40:3a:e2:97:7e:02:8b:51:f8:93:a5:4f:6d:
         5a:62:4e:e4:11:f7:03:c9:d2:7b:2f:b8:8c:b8:1a:c1:af:77:
         30:7a:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:23:59 2025 by rpki-client