This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
File:                     UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json)
Hash identifier:          ZjYJRtDRPnM3zLEkXgseM2rXlBhyK6DuuFgxHhMr/gU=
Subject key identifier:   EA:D1:79:5E:7F:40:EE:0C:58:2E:1B:9A:BD:66:3B:27:CF:2E:92:78
Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64
Certificate issuer:       /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
Manifest number:          038C
Signing time:             Thu 04 Dec 2025 23:13:54 +0000
Manifest this update:     Thu 04 Dec 2025 23:13:54 +0000
Manifest next update:     Thu 11 Dec 2025 23:13:54 +0000
Files and hashes:         1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: OYrQ84grgZtihgHK3BOurKJvQKmM77xNAvCaOepohmQ=)
                          2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64
        Validity
            Not Before: Dec  4 23:13:54 2025 GMT
            Not After : Dec 11 23:13:54 2025 GMT
        Subject: CN=693215b2-5fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:c4:cc:33:68:d0:3b:fc:3d:c1:c4:51:d4:
                    2c:44:ef:dd:84:d3:be:34:df:f3:d0:94:6b:62:27:
                    96:e0:05:a7:c7:9a:a1:13:14:24:55:78:b1:25:88:
                    07:57:bf:ac:c8:55:19:ba:a1:8b:c3:37:1d:47:10:
                    76:7e:c1:22:c5:64:cd:4b:da:72:09:63:fe:e9:9f:
                    4e:79:92:d6:3e:9b:3e:61:77:ed:73:2b:09:e4:ed:
                    c1:22:04:e0:93:4d:bc:4f:e6:91:80:05:4c:84:e9:
                    16:b9:03:43:7e:d5:96:c4:99:88:28:13:1a:a0:ea:
                    56:26:14:fa:64:2b:c6:9a:a8:01:8d:3d:2f:e8:08:
                    9e:91:3d:2d:b4:d6:5e:5c:e4:0a:08:95:c6:48:f1:
                    ec:f6:d4:f0:2e:88:54:73:b6:d8:a7:4d:15:70:93:
                    a5:e6:b5:da:60:69:53:82:57:8f:65:b5:68:0e:cb:
                    10:6f:66:ec:fa:18:f2:ea:9b:b8:d6:fc:26:bf:d0:
                    79:ee:0d:67:6c:c7:e1:f0:58:6a:59:62:b7:dd:c0:
                    a3:4b:14:42:7e:3f:a5:98:93:b1:03:b4:bb:b4:8c:
                    17:84:bc:a8:a6:ff:88:cd:55:2f:86:db:a2:e0:cb:
                    1f:08:d2:ba:b8:e9:9f:6c:f3:ad:e2:52:21:3b:3e:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:79:5E:7F:40:EE:0C:58:2E:1B:9A:BD:66:3B:27:CF:2E:92:78
            X509v3 Authority Key Identifier:
                keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:2c:5a:84:8d:46:58:09:3a:9d:6c:25:c9:56:25:1c:b5:
         4f:54:38:17:80:f2:da:21:b3:e1:60:8c:f4:68:54:2b:a7:25:
         7c:9b:b7:8d:db:fb:8f:f9:d0:c7:fc:9b:68:a4:fa:21:e3:20:
         64:ab:3c:a0:40:36:80:79:88:0d:b5:35:c4:49:b5:71:75:41:
         28:6a:30:03:bc:0f:31:27:c3:0b:85:7f:e3:0c:0b:58:c6:bd:
         0a:30:38:a2:a8:0b:83:08:b5:df:ed:06:0d:23:d4:aa:43:87:
         45:66:b0:4f:14:15:ed:4e:4e:32:70:97:91:fb:21:ef:4d:01:
         5a:27:6e:bd:d6:7a:f0:e8:8f:07:92:09:7b:6e:c2:0a:e6:bc:
         64:9f:8e:25:a2:63:f6:c5:e9:0f:4a:e7:5c:12:3c:b7:c4:b4:
         54:4b:60:9e:c3:71:5e:d4:1e:a5:4a:99:ff:6e:77:e8:bf:ca:
         22:fa:9d:bf:98:91:be:37:95:33:38:3a:5d:d0:3c:b8:1f:af:
         1b:2b:ef:b2:da:a2:94:be:f0:d6:bc:ac:28:08:ba:6e:77:5b:
         a6:d0:a2:fc:04:c4:5a:dc:26:16:a7:88:c8:cd:78:5d:85:2c:
         bf:04:ed:32:bf:94:e8:03:db:03:ae:be:54:4e:09:ad:e7:fd:
         47:c8:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:38 2025 by rpki-client