This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File:                     uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier:          Hd//0018hZvtIlm3on4k+dD6NCyVvOJl6rHtJPjFJa8=
Subject key identifier:   17:A2:23:83:B2:E7:C1:3F:88:C5:04:B4:5E:AB:1F:A5:FB:F1:38:B3
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number:          02B1
Signing time:             Thu 04 Dec 2025 23:50:51 +0000
Manifest this update:     Thu 04 Dec 2025 23:50:50 +0000
Manifest next update:     Thu 11 Dec 2025 23:50:50 +0000
Files and hashes:         1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: 8g4XLYCWIUOJAHd8UxpTp9kD9JWnSy3Lo7/A07Sltjw=)
                          2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: gIwDWIDp8+Uz5STSFrQB1zJpip3RVo/LQNwdpuz8o1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
                          rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
        Validity
            Not Before: Dec  4 23:50:50 2025 GMT
            Not After : Dec 11 23:50:50 2025 GMT
        Subject: CN=69321e5b-f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:e6:00:85:51:b1:9e:52:be:2b:62:6d:df:
                    c8:80:9e:75:2a:63:1e:0b:a5:3e:c5:9c:6b:34:54:
                    c0:bc:54:d0:7c:45:5c:3a:76:9b:4d:06:8c:16:41:
                    54:33:0b:c0:a0:36:85:ac:de:08:82:cb:ca:7f:69:
                    64:ff:55:db:cc:9f:51:12:80:22:df:5f:99:3e:35:
                    50:af:0b:31:9c:db:8f:04:32:2f:2f:84:b1:3a:72:
                    1d:7a:35:a7:bc:30:98:98:0a:15:50:c5:ae:f5:3f:
                    1b:83:ca:37:78:79:06:da:63:b8:22:85:e4:84:12:
                    8e:69:13:4e:44:18:ef:ea:dc:d5:56:57:35:2f:7b:
                    9b:7e:23:b7:b1:da:98:27:1e:6a:30:67:dd:d3:b5:
                    a2:34:1e:3f:95:55:12:21:86:83:a5:bd:07:05:c9:
                    94:99:fb:c6:19:23:53:ca:74:b2:0f:0e:df:ea:57:
                    2d:43:0b:22:ee:8d:fc:72:60:93:fa:d4:c0:84:3b:
                    5e:8f:2e:60:4c:7b:22:ec:ca:df:15:9b:cc:49:c2:
                    b1:06:ec:f6:8e:6a:3d:5e:db:da:22:4a:2f:57:f7:
                    30:b2:ff:72:be:53:61:a2:92:28:bb:e8:dd:1e:47:
                    f0:9a:fe:2d:59:cf:d6:d4:61:6f:9e:d6:ed:48:0d:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:23:83:B2:E7:C1:3F:88:C5:04:B4:5E:AB:1F:A5:FB:F1:38:B3
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:45:b1:eb:3a:31:df:98:04:e8:19:a4:1d:58:f0:2a:8b:10:
         7d:8f:82:f7:15:d2:f8:00:a2:0c:43:0b:e4:fb:8f:b4:e8:22:
         85:86:10:90:e6:ea:04:78:86:01:61:8f:2d:83:ee:99:5c:11:
         5c:c2:e9:54:2f:ee:0d:c3:a2:47:10:db:f8:50:ec:37:d6:fb:
         9a:7d:cf:e5:03:bb:86:c2:0f:5f:85:e0:36:bf:ea:82:c5:14:
         8d:2a:67:9e:1d:57:6e:e5:5c:37:61:36:46:00:79:6c:c4:88:
         56:31:2a:2e:05:67:08:9f:53:25:99:46:d0:ee:6d:70:26:5b:
         d0:40:8c:5c:53:ca:41:84:f6:f7:a3:a6:01:cb:f2:7f:eb:bf:
         35:df:91:b9:0a:80:f4:6f:d0:62:de:11:a5:86:35:25:df:7f:
         97:89:ae:72:50:2f:ed:7a:c0:7c:e6:48:36:d6:5f:d4:85:3b:
         2d:bf:75:46:2d:75:e7:a4:87:a0:b8:6b:94:a4:93:1b:3a:77:
         09:0a:e5:d2:b7:f6:da:3d:e7:55:bb:db:5e:5f:b8:8c:08:ea:
         17:1c:43:6e:69:49:39:13:86:5f:25:fa:7e:21:d5:98:69:73:
         32:5f:92:a2:6e:f2:47:d9:7b:be:22:bf:d0:73:c6:30:2e:a0:
         d6:22:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:19 2025 by rpki-client