This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
File:                     uwftRksoDVf6dxhB939S6n1QeSc.mft (raw, json)
Hash identifier:          fLgdUi6VZqN0l/TCgb2Lskt4jk0T/14sEEwpzFD6uBQ=
Subject key identifier:   06:82:FA:02:D8:6E:C5:81:92:54:42:FF:DE:58:F5:53:E4:4A:99:6F
Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
Certificate issuer:       /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Certificate serial:       10B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
Manifest number:          109A
Signing time:             Sat 06 Dec 2025 16:51:39 +0000
Manifest this update:     Sat 06 Dec 2025 16:51:39 +0000
Manifest next update:     Sat 13 Dec 2025 16:51:39 +0000
Files and hashes:         1: uwftRksoDVf6dxhB939S6n1QeSc.crl (hash: Z6vSVWeVXxmkIDPmM8YOX53I1zCKDor1QgLjwAjtyOg=)
                          2: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (hash: hPa4OatTYIMb+8b6uDB3EXHHSfu/EbUrHJIf5q9LY6E=)
                          3: 52138B923FCA11E9AB28853CC4F9AE02.roa (hash: F7eiYk5VKF5lCSCN/hKOx3267YakxI+D95C5/M/ItF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
                          rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4276 (0x10b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D85, serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
        Validity
            Not Before: Dec  6 16:51:39 2025 GMT
            Not After : Dec 13 16:51:39 2025 GMT
        Subject: CN=69345f1b-c632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:e8:2c:09:41:6e:e6:83:97:36:a6:28:b5:
                    24:2e:67:4f:cd:e1:3c:7b:b0:92:6c:2a:65:c9:49:
                    ed:a0:10:0e:c0:5a:04:28:94:71:7a:a0:c9:e8:07:
                    10:2b:37:9f:fa:b1:76:3f:58:c6:d1:19:b6:0d:5a:
                    15:9f:a1:3c:ee:8b:43:f8:8f:c2:42:6c:40:0d:69:
                    c9:3e:da:3b:59:57:c0:a6:9f:fb:ee:1c:47:45:6b:
                    d9:d5:b5:b1:ef:d8:08:c8:61:e8:b9:c7:07:a2:10:
                    0a:4b:b8:ca:54:8f:1c:f7:1d:95:12:9c:ae:e1:c2:
                    c2:99:d3:ac:b8:61:86:58:ed:1c:a7:29:d4:31:5f:
                    b3:5a:bc:b7:ff:45:5f:7e:4a:f4:ca:60:a0:a1:97:
                    06:89:49:1c:ad:f3:11:95:9e:93:33:2b:dd:1d:66:
                    5c:7e:2a:f6:d0:6f:5a:37:07:97:c1:61:c7:ea:1b:
                    28:34:0a:b1:ef:09:fa:9b:5c:1f:68:d5:9f:78:d4:
                    aa:a9:d5:c0:a9:86:9f:55:c1:a1:33:ae:6c:96:7d:
                    48:15:a9:5b:40:79:df:35:9e:49:30:fd:ec:df:a4:
                    39:27:e1:e4:af:1b:a6:02:58:89:bc:b4:16:4f:39:
                    92:ae:5f:bb:16:5f:75:42:b7:91:75:ac:ef:e8:ca:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:82:FA:02:D8:6E:C5:81:92:54:42:FF:DE:58:F5:53:E4:4A:99:6F
            X509v3 Authority Key Identifier:
                keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:78:c6:04:e4:8d:e6:ad:8a:06:55:12:0e:56:db:7e:b7:
         ed:85:6e:c1:99:a3:79:11:eb:7b:86:c7:3b:af:85:35:fe:7e:
         07:a0:32:52:4a:59:e2:bc:9b:0c:a9:c2:d5:78:e5:97:46:31:
         c7:72:10:9b:1a:2f:fc:db:25:1e:28:78:32:c6:30:1c:2d:c6:
         8a:b3:da:74:54:35:f1:72:33:df:d7:38:87:60:5d:9a:51:f3:
         28:3f:5f:f9:fb:40:c9:87:93:25:48:04:fc:21:49:46:1c:49:
         99:bc:3f:25:27:71:d3:73:48:cc:00:4c:ab:da:8d:51:5b:29:
         76:c2:cd:8b:11:5b:9e:18:65:57:c3:95:67:4a:46:61:9c:be:
         89:96:f6:90:46:19:e5:b1:85:e6:3b:2b:fb:9f:b7:92:29:6e:
         f2:ab:24:db:63:c7:87:00:19:43:51:e6:d4:bb:39:9b:fb:64:
         be:e2:59:ee:13:62:de:7d:da:b4:08:6d:70:c6:a1:9a:37:53:
         7c:35:d1:2b:5b:e7:2e:05:88:e2:79:af:23:cb:19:3e:1d:87:
         52:af:75:1f:20:26:a6:fc:ef:54:26:76:18:af:4d:df:ba:e7:
         92:e1:c4:7f:0a:3e:60:f2:9d:56:5e:75:00:76:e3:a0:e4:35:
         b0:5f:39:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICELQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB
N0Q1MDc5MjcwHhcNMjUxMjA2MTY1MTM5WhcNMjUxMjEzMTY1MTM5WjAYMRYwFAYD
VQQDEw02OTM0NWYxYi1jNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtToLAlBbuaDlzamKLUkLmdPzeE8e7CSbCplyUntoBAOwFoEKJRxeqDJ6AcQ
Kzef+rF2P1jG0Rm2DVoVn6E87otD+I/CQmxADWnJPto7WVfApp/77hxHRWvZ1bWx
79gIyGHouccHohAKS7jKVI8c9x2VEpyu4cLCmdOsuGGGWO0cpynUMV+zWry3/0Vf
fkr0ymCgoZcGiUkcrfMRlZ6TMyvdHWZcfir20G9aNweXwWHH6hsoNAqx7wn6m1wf
aNWfeNSqqdXAqYafVcGhM65sln1IFalbQHnfNZ5JMP3s36Q5J+HkrxumAliJvLQW
TzmSrl+7Fl91QreRdazv6MqxnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaC+gLY
bsWBklRC/95Y9VPkSplvMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG
QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0Q4NS85MTUzMjUyMDNGQzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RW
ZjZkeGhCOTM5UzZuMVFlU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZz3jGBOSN5q2KBlUSDlbbfrfthW7BmaN5Eet7hsc7r4U1/n4HoDJS
SlnivJsMqcLVeOWXRjHHchCbGi/82yUeKHgyxjAcLcaKs9p0VDXxcjPf1ziHYF2a
UfMoP1/5+0DJh5MlSAT8IUlGHEmZvD8lJ3HTc0jMAEyr2o1RWyl2ws2LEVueGGVX
w5VnSkZhnL6JlvaQRhnlsYXmOyv7n7eSKW7yqyTbY8eHABlDUebUuzmb+2S+4lnu
E2Lefdq0CG1wxqGaN1N8NdErW+cuBYjiea8jyxk+HYdSr3UfICam/O9UJnYYr03f
uueS4cR/Cj5g8p1WXnUAduOg5DWwXzmQ
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:50 2025 by rpki-client