This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          BriH1xwACq9ZtwJdqZDr3VGnFcf1gChqwvOo09VK6r4=
Subject key identifier:   81:86:06:D3:E1:4B:5E:A6:03:6F:3E:5A:82:33:B5:8A:75:34:3F:C5
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       0346
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          0346
Signing time:             Sat 06 Dec 2025 23:35:11 +0000
Manifest this update:     Sat 06 Dec 2025 23:35:11 +0000
Manifest next update:     Sat 13 Dec 2025 23:35:11 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: IGf973akWsLaFHmTSuefJ6Fwx3EOFvT8wCg8M6qrmwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: Dec  6 23:35:11 2025 GMT
            Not After : Dec 13 23:35:11 2025 GMT
        Subject: CN=6934bdaf-df11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:cb:5a:a8:dc:9e:16:4e:5e:1d:dc:f9:e6:72:
                    7b:f6:77:60:39:c6:f4:8c:aa:96:c7:6a:b5:f7:3f:
                    79:ab:f9:ee:55:6b:d4:06:94:f2:c2:7b:b4:0c:f2:
                    2d:bd:df:d0:db:09:1c:75:99:d8:75:eb:20:da:b2:
                    d4:ff:ad:71:c6:c2:33:41:8f:3a:74:ce:22:44:19:
                    9b:cf:6e:82:7e:a3:1b:42:7c:da:de:3e:a7:ba:f8:
                    a6:24:d9:29:f0:d8:b2:85:d0:4f:f9:02:77:99:74:
                    1f:99:a4:03:c4:af:65:d1:8e:2d:01:54:ad:99:ff:
                    6e:c1:9e:4f:4d:d8:0d:6a:17:c5:b7:ec:1c:29:7f:
                    5b:05:59:99:cb:cf:f2:00:75:0d:f3:de:d5:5b:5d:
                    bb:05:a4:52:8f:66:70:06:e7:b1:ee:b2:a5:72:c8:
                    31:05:7c:fb:3d:6e:99:ad:39:d0:cd:00:b5:fc:e7:
                    7a:9e:b5:f1:b5:f1:89:21:e2:cb:45:56:4c:f1:dd:
                    4c:1f:44:ef:e5:7f:df:f1:2c:f7:b9:08:9e:da:07:
                    e6:3b:25:31:39:55:a0:b4:d8:96:6d:1b:d2:e6:c7:
                    de:ac:7b:3a:13:3c:b1:dd:5b:a8:b3:03:02:e0:d6:
                    7d:4f:28:90:36:04:fc:4c:ee:59:9e:69:62:92:c6:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:06:D3:E1:4B:5E:A6:03:6F:3E:5A:82:33:B5:8A:75:34:3F:C5
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3b:03:a1:b8:7d:ae:c7:b8:75:18:d3:bb:58:a5:5e:f7:93:
         17:03:ed:ff:1a:70:ba:45:8b:f7:79:d9:2b:c1:6c:08:dc:8b:
         f2:10:05:e2:26:7c:3e:37:57:ed:d8:19:0c:27:26:21:07:3e:
         18:cb:e6:90:d2:04:39:1a:08:ed:1c:11:24:98:c8:86:8f:c7:
         19:d2:9b:3c:ef:13:f0:b7:65:45:f5:ef:05:24:bc:31:b0:c3:
         67:0f:24:8b:f9:ab:ca:9a:c5:2d:d6:ad:41:8d:b1:85:7f:c1:
         88:15:38:40:97:c5:13:91:61:8f:d1:2b:e9:f9:8d:5d:b4:12:
         2b:a6:4d:01:c5:c1:f0:2f:56:51:f3:52:21:33:de:09:55:e8:
         5e:ef:11:c8:54:76:7f:bd:21:f9:4f:5c:fb:52:28:3f:0a:d7:
         19:3d:0c:1f:81:13:fc:c0:d8:3a:3c:08:56:fa:d6:92:31:5f:
         a1:2f:f4:02:2a:08:74:b7:0e:1f:0d:31:76:b7:f3:5c:2b:52:
         65:c8:47:06:b1:5d:4d:0f:3b:5d:ea:c9:96:d1:d1:45:2c:fc:
         e7:83:3d:93:ac:b9:69:33:bd:cf:17:d7:95:31:cf:08:c8:0b:
         51:a2:ff:92:ab:7f:50:6c:98:7f:83:7b:bf:e6:a4:7b:c5:1e:
         96:5e:f2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:47 2025 by rpki-client