This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
File:                     rUZnzujj-e3_kuf7uzf_xmwAc6I.mft (raw, json)
Hash identifier:          d7QVGuBUjIfs9zo/TG/jLjttsFeON34HxgZR3xgg2kM=
Subject key identifier:   46:70:C9:10:0A:A3:74:09:03:9F:6A:91:84:9E:DF:D6:CD:CF:79:04
Authority key identifier: AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2
Certificate issuer:       /CN=A919C0F6/serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
Manifest number:          01E3
Signing time:             Fri 05 Dec 2025 00:57:22 +0000
Manifest this update:     Fri 05 Dec 2025 00:57:21 +0000
Manifest next update:     Fri 12 Dec 2025 00:57:21 +0000
Files and hashes:         1: rUZnzujj-e3_kuf7uzf_xmwAc6I.crl (hash: 8uKLTk5zTNSvEezPA7M+maaJ05tRXrRFxLzT640uI48=)
                          2: D016C916EF5A11EDA6863E67C4F9AE02.roa (hash: eiPnVd5qH0st8XKPTvL7lm0W7OhTr1gyWFD5Z01ogbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl
                          rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:57:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C0F6, serialNumber=AD4667CEE8E3F9EDFF92E7FBBB37FFC66C0073A2
        Validity
            Not Before: Dec  5 00:57:21 2025 GMT
            Not After : Dec 12 00:57:21 2025 GMT
        Subject: CN=69322df2-4dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:6c:2f:b1:b6:4f:aa:17:a6:02:b5:cf:1e:
                    6d:ca:1b:46:b6:0b:5e:20:2b:93:b2:a1:f4:6b:85:
                    85:20:4d:d1:f1:72:d3:8a:e4:d8:5d:22:9b:a7:0a:
                    c2:a8:35:bc:f3:21:6a:5a:1b:54:70:3a:86:d7:57:
                    ef:7a:06:50:8e:44:a2:6e:57:8b:61:b2:89:b9:ff:
                    52:c0:31:6c:b6:83:63:e7:c5:64:75:ac:9b:50:2e:
                    dc:18:a5:6e:dc:a5:bc:24:a5:36:71:a8:b4:41:33:
                    3a:0a:7f:0d:15:b6:fc:16:9f:66:71:57:9b:0d:ad:
                    bb:30:39:54:c8:ab:f0:b2:f3:e8:c3:c2:40:3d:8f:
                    80:15:c1:0b:3a:67:f1:06:80:0f:27:30:66:ab:e8:
                    cd:d4:27:8a:a5:e2:60:d8:56:3f:78:b1:2f:00:e3:
                    83:9a:6d:6c:84:e9:1d:55:44:e5:c0:b4:50:3c:b6:
                    a6:7d:95:b1:e2:fc:1d:06:2e:88:0b:27:bf:1f:55:
                    61:bb:1a:82:35:aa:6a:cf:13:54:2e:2a:15:21:16:
                    b6:c9:8a:3e:69:09:88:11:61:84:8e:a1:1f:92:b1:
                    ae:8c:b9:fe:a5:1f:df:31:41:8c:0c:76:28:9a:e6:
                    13:11:7b:f4:4e:64:12:4c:97:7b:12:39:06:34:40:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:C9:10:0A:A3:74:09:03:9F:6A:91:84:9E:DF:D6:CD:CF:79:04
            X509v3 Authority Key Identifier:
                keyid:AD:46:67:CE:E8:E3:F9:ED:FF:92:E7:FB:BB:37:FF:C6:6C:00:73:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rUZnzujj-e3_kuf7uzf_xmwAc6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C0F6/D2BB755AEF4F11EDB5D71F46C4F9AE02/rUZnzujj-e3_kuf7uzf_xmwAc6I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:b6:d7:ca:f1:19:21:6d:d1:5c:8c:11:c6:4a:4f:03:37:
         92:6b:3b:25:f2:0f:bd:c4:1d:9e:6a:6b:50:f4:08:44:72:87:
         e4:6f:11:72:34:38:38:4b:3d:8e:5a:80:fb:56:8b:84:f0:c0:
         62:41:ee:1e:94:d6:66:7e:e5:8e:2c:ff:c8:c8:01:c7:06:5c:
         01:7e:c1:ef:0b:7e:32:f4:98:34:f4:41:20:6a:8c:4a:ce:fa:
         05:20:d0:ce:77:6a:53:f0:30:c3:48:56:dd:7d:4c:c2:bc:87:
         d4:fe:00:23:fa:60:c1:ed:8e:b0:58:81:90:0d:bf:d0:74:91:
         a0:ea:c8:66:37:4c:ea:52:37:f5:9f:59:ad:91:2f:96:e1:90:
         81:bd:e9:45:56:c7:04:4f:8f:51:f5:a4:ce:ec:c6:1d:6a:2c:
         6e:91:30:81:84:e4:42:cd:70:b8:e4:0a:8b:03:25:9d:80:7f:
         cd:89:b6:4b:20:1b:3d:16:05:6c:b3:26:71:3c:6c:9b:7b:7d:
         1e:d5:b0:65:55:d7:0f:a2:80:4a:bc:10:5f:e0:96:20:15:64:
         92:e2:69:77:6b:b9:0d:97:59:b8:25:16:27:52:b4:67:b5:be:
         d3:e7:14:d1:12:d8:0c:80:0f:07:93:4f:63:6b:2c:07:7d:a9:
         24:fb:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:23 2025 by rpki-client