This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          ApzGvNwB+ooRfm5lq0MDzKeCl0f/5cqvOMUabLftGyw=
Subject key identifier:   03:D4:24:D6:37:6C:CA:34:E2:8C:D9:60:9E:25:87:24:A0:EE:29:CE
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0CAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0CA4
Signing time:             Sat 06 Dec 2025 17:41:19 +0000
Manifest this update:     Sat 06 Dec 2025 17:41:19 +0000
Manifest next update:     Sat 13 Dec 2025 17:41:19 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: QV6TXMY+uh1Il/JBsAw7DG+sGWMMdU/qI3mZOtzG11A=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: Ry01yZ5BQjClLdraAGF0vxY6zRTp62DNKwkQE7m6ywY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3244 (0xcac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Dec  6 17:41:19 2025 GMT
            Not After : Dec 13 17:41:19 2025 GMT
        Subject: CN=69346abf-70a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:61:59:fb:29:de:57:a5:fe:7c:8c:23:87:
                    a7:44:6f:51:33:9d:a7:9a:4b:f3:b8:69:63:10:b0:
                    e2:0f:ab:06:4b:5a:5b:68:05:d6:45:7c:28:43:aa:
                    97:10:d6:f9:3e:fa:0f:68:cd:93:d5:33:30:99:56:
                    50:0e:9e:f4:e5:e6:35:3e:45:90:79:36:ba:7a:b3:
                    82:e0:c1:85:f2:07:4d:d2:d4:a4:76:b6:48:75:4e:
                    7e:be:f3:4d:20:58:b4:c7:e4:c9:a7:96:a3:48:87:
                    8c:d5:b1:d5:25:3b:1d:59:9f:bc:17:91:5f:e6:12:
                    18:56:13:28:95:9c:50:3c:84:de:99:73:71:1b:34:
                    a7:b1:f9:02:50:bf:d8:4a:5f:84:d2:74:dd:0c:a3:
                    a2:a4:dc:44:a3:60:9b:01:12:cd:e8:08:09:31:4f:
                    e8:8b:a3:77:0b:59:22:b8:08:9e:5c:53:6e:72:02:
                    c3:8a:71:a4:26:72:5f:46:f3:75:7f:2c:b7:1a:39:
                    05:63:37:cf:8b:68:35:f4:51:2b:6a:27:c7:22:ff:
                    ae:40:7b:58:a4:4d:88:d3:34:c5:90:d4:e2:c3:60:
                    aa:37:49:16:09:da:8f:46:df:6b:56:01:a2:44:b1:
                    1b:41:bf:8f:eb:dc:24:ce:41:2b:f3:70:06:64:ca:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:24:D6:37:6C:CA:34:E2:8C:D9:60:9E:25:87:24:A0:EE:29:CE
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:aa:50:ee:cf:9d:ef:84:8e:5b:4e:90:5b:1f:46:18:d3:c4:
         4b:16:36:10:49:8d:4c:53:56:23:09:81:cc:79:fd:a7:6c:79:
         c1:2a:88:fb:b8:67:d9:9a:8a:7a:cd:87:d6:ad:73:52:61:97:
         bd:1a:90:bd:6b:8f:df:c2:8c:35:94:ad:1c:a7:26:2e:23:17:
         b6:59:c1:da:37:5e:9b:92:d4:53:cc:2e:a5:f6:aa:78:bf:85:
         ff:48:92:da:1a:74:89:ac:79:6f:a6:07:12:55:dd:61:39:8f:
         82:c3:36:52:97:c7:52:91:42:28:05:d9:7c:d3:95:0a:db:13:
         0b:16:7a:c3:06:c7:1c:d6:3d:7e:cd:3c:e1:e7:d1:ca:dc:49:
         a5:c4:a2:68:eb:30:98:9d:02:8f:be:07:50:16:51:af:b8:46:
         c1:b6:d9:e2:a2:44:02:8c:8c:13:d5:3b:38:d4:ca:cc:d4:86:
         2f:fe:46:f9:7a:d7:65:c8:cc:ee:5b:9c:28:a4:a2:bc:29:69:
         49:af:4b:81:92:10:0e:4d:75:ed:cf:f5:3a:48:1e:fa:72:12:
         89:77:c5:80:81:23:b6:b2:07:51:b3:11:e5:58:48:eb:c7:17:
         d2:9f:3c:1a:c6:ee:38:2a:eb:f6:43:bb:6c:29:03:43:9c:94:
         eb:2e:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:44:55 2025 by rpki-client