This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          z1LatAnkD7/eTmIyvezjdEP+8Nh0UhLSjniqnoKgkp4=
Subject key identifier:   0F:FC:2E:F5:AD:A1:A9:9F:A2:EB:27:DB:4A:0A:E3:22:89:CB:DD:46
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       0630
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          062A
Signing time:             Sat 20 Dec 2025 22:05:43 +0000
Manifest this update:     Sat 20 Dec 2025 22:05:43 +0000
Manifest next update:     Sat 27 Dec 2025 22:05:43 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: 01xus4ZZPD6lyrj/j0voGYjBlGtvtvDItGMAB9k1J98=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: ukIxpeCDJL+cHaq9Y1gYJ/+w2w9VIUdZg9SIKhaaemE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 22:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Dec 20 22:05:43 2025 GMT
            Not After : Dec 27 22:05:43 2025 GMT
        Subject: CN=69471db7-5fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:78:bb:8e:b9:00:a2:f3:f5:65:a8:b3:4c:
                    4b:c7:c6:d5:09:e2:7f:d0:e2:12:a6:2d:a1:8d:97:
                    94:e1:b5:bb:6d:b4:7b:9e:fc:26:b6:58:95:6c:fa:
                    9f:df:56:b3:e7:1e:3e:12:6e:cf:92:5f:23:74:b7:
                    96:4e:0a:79:25:4b:af:91:93:ba:64:c9:e9:80:cd:
                    93:09:12:7a:2f:ff:05:1f:82:ac:96:cf:46:d1:ce:
                    c3:c9:1f:fe:96:bf:98:7b:5b:cd:04:77:4d:47:81:
                    98:43:a9:fb:56:37:8c:3a:f3:45:84:f4:2f:aa:99:
                    db:df:d6:82:ae:fb:13:14:5e:b6:23:58:30:b0:85:
                    5d:a5:65:23:ed:bd:46:43:de:bd:0f:81:85:be:ed:
                    02:43:7d:9b:c2:e1:e1:36:73:7b:81:56:a5:18:70:
                    4c:18:0d:39:cb:90:c6:0a:4e:a0:fa:b2:8a:c3:97:
                    98:03:a2:25:e6:a2:6e:27:52:1b:a2:11:f0:24:dd:
                    4a:27:49:63:e5:5c:b8:e1:2e:e3:2e:e5:06:01:49:
                    69:25:8b:19:44:58:5e:f9:0e:df:ef:18:20:4b:88:
                    91:13:01:31:ff:c1:b3:92:86:48:f0:24:75:b7:15:
                    d5:e6:5d:0b:16:8f:16:36:be:11:e7:4e:92:6d:4e:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FC:2E:F5:AD:A1:A9:9F:A2:EB:27:DB:4A:0A:E3:22:89:CB:DD:46
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:66:3d:36:d4:30:34:fd:3b:a5:07:fc:2d:b7:8e:46:c3:6f:
         31:ba:eb:c6:44:e3:e7:f2:ee:88:29:b2:f8:f5:6b:92:a8:00:
         cc:07:9e:06:49:71:19:79:c2:61:aa:40:28:97:13:38:39:bb:
         09:83:a5:4a:8f:59:ae:8d:41:a6:f6:43:ad:5d:4c:09:10:0d:
         da:dc:5c:8f:b9:b8:64:d4:72:ef:02:14:cf:56:71:3a:a4:87:
         8b:ac:08:1c:85:e4:b5:7f:89:c9:e9:3d:48:2c:83:0a:27:c4:
         d8:1a:8a:1c:0e:db:af:1c:9d:de:9c:49:27:09:34:09:15:c3:
         54:05:5d:8b:ad:a2:0b:ab:40:a6:72:64:89:0c:51:63:8f:ff:
         dd:74:af:e2:be:80:a9:02:91:0b:a4:82:75:42:30:4e:68:43:
         0d:7f:6d:45:3d:b1:5c:79:26:bf:b0:70:da:55:2b:81:07:d7:
         43:8f:6d:21:65:5d:77:14:4c:49:f2:1b:3a:3d:27:f8:1b:2e:
         b5:85:74:bb:a3:ea:da:89:08:40:d4:35:21:c9:95:d5:99:49:
         7e:c2:31:4f:1f:ba:04:dc:b7:0f:4d:b7:c6:ea:78:d7:58:33:
         c1:79:fa:8c:5d:05:51:fb:12:3f:20:cf:28:68:3b:a9:c2:59:
         fb:b2:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:18:25 2025 by rpki-client