This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
File:                     uKIid-zGsQo9ICqjkMyn-7kqRuA.mft (raw, json)
Hash identifier:          pKGWanBxlUBgzeIBUb/0E1Acp5WjrOSqOz/uv8HTP44=
Subject key identifier:   73:A4:9F:C3:D2:8C:0F:15:7F:87:84:7E:86:1E:44:6D:EF:BB:EB:6B
Authority key identifier: B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0
Certificate issuer:       /CN=A91975CC/serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
Certificate serial:       03CB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
Manifest number:          03C7
Signing time:             Sat 06 Dec 2025 23:15:47 +0000
Manifest this update:     Sat 06 Dec 2025 23:15:47 +0000
Manifest next update:     Sat 13 Dec 2025 23:15:47 +0000
Files and hashes:         1: uKIid-zGsQo9ICqjkMyn-7kqRuA.crl (hash: EsaqUg3E0VcIYD6OZBU5jT2GM9OaIZ2iSHvu2Y/ZtqM=)
                          2: AF08CB4CC77511EC81DCA645C4F9AE02.roa (hash: fCg3LsUh16wFnDfXkxVhThF2ZOUkgckgr+TaTcI9RIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl
                          rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91975CC, serialNumber=B8A22277ECC6B10A3D202AA390CCA7FBB92A46E0
        Validity
            Not Before: Dec  6 23:15:47 2025 GMT
            Not After : Dec 13 23:15:47 2025 GMT
        Subject: CN=6934b923-b463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:b2:82:5b:27:64:ea:84:4a:81:b6:76:b1:
                    07:1d:16:1f:56:d6:a3:99:e6:eb:67:40:22:0c:c5:
                    d4:0d:ed:87:eb:50:0c:2e:94:f6:ec:40:70:a1:2e:
                    db:9b:74:29:85:31:d3:cc:42:d0:de:3f:7b:43:5d:
                    82:1f:5d:9e:c4:17:9e:28:54:20:9b:49:6d:ba:ab:
                    1a:7a:9b:91:44:6e:3a:44:2e:f5:c0:82:cc:c8:e2:
                    d7:7e:22:c5:57:52:b4:b7:13:f2:92:c9:6d:94:2b:
                    f5:6e:92:1d:36:45:b2:a6:5c:30:a9:59:cc:39:5d:
                    90:6a:53:cf:3c:f3:d3:99:c5:86:05:4a:e0:70:bb:
                    d0:79:4a:3b:b1:e0:68:20:bc:e6:25:32:74:65:19:
                    fe:0e:73:2f:c8:e4:e1:87:1e:05:30:d7:0c:e3:fa:
                    3b:3b:2a:2c:78:6c:ae:a4:b2:09:12:33:70:2c:29:
                    ae:1d:e6:8c:0b:b1:8c:02:39:52:49:17:b3:71:c9:
                    07:e8:14:3c:c7:52:01:bb:61:4f:57:d1:78:91:2b:
                    c1:35:17:ac:75:1f:17:e8:75:8a:26:52:22:15:36:
                    cd:52:7a:a3:20:24:fe:3c:08:53:63:15:fa:87:77:
                    d7:31:ac:33:84:4c:58:29:ab:c7:d3:23:28:f1:5e:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:9F:C3:D2:8C:0F:15:7F:87:84:7E:86:1E:44:6D:EF:BB:EB:6B
            X509v3 Authority Key Identifier:
                keyid:B8:A2:22:77:EC:C6:B1:0A:3D:20:2A:A3:90:CC:A7:FB:B9:2A:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uKIid-zGsQo9ICqjkMyn-7kqRuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/13E7D72EAFE311ECA2CB066DC4F9AE02/uKIid-zGsQo9ICqjkMyn-7kqRuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4b:a8:58:b6:3f:c2:4d:0c:6d:4c:41:90:05:b2:dc:32:5a:
         39:94:50:d6:63:6d:8a:ae:4b:5a:75:a1:bd:82:8e:76:14:67:
         8b:32:07:7c:11:6c:be:4c:2a:5d:41:7e:a5:90:da:95:2f:1b:
         d0:23:7a:23:b9:2b:61:51:ec:e6:38:45:e8:96:d5:de:ff:97:
         b5:4b:8f:c8:86:51:6b:60:72:30:79:0e:f2:83:dd:86:99:fd:
         81:79:42:d2:38:f8:ab:fd:ec:96:d7:a5:ac:ec:d3:f1:99:e5:
         92:f7:d4:29:6f:4b:a5:d1:78:4a:4c:97:49:8d:4c:2f:c5:95:
         d9:ed:86:f8:e9:b2:d8:89:cc:5e:db:54:fe:3f:35:d3:15:d4:
         28:68:9c:93:5b:62:22:ce:5d:a8:de:78:6d:15:93:ec:fe:12:
         b1:49:22:d6:3d:1b:7a:5b:8b:a5:c6:3a:ed:c8:6c:da:ec:ed:
         67:ce:ef:42:05:5b:8f:ca:f5:8c:35:f6:60:d3:87:e0:e4:e6:
         a4:a8:88:f7:bf:df:32:c7:5d:1d:23:c8:7b:2d:62:f4:61:1e:
         55:1d:5c:c4:40:31:d6:76:33:4a:28:40:03:98:e2:63:1b:02:
         24:5b:ff:68:d7:26:cd:7e:71:c7:35:0e:de:45:b1:45:f5:ce:
         49:6a:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:25 2025 by rpki-client