This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File:                     UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier:          vvb3GksIBWf16oxCDY5BWHUtFiZ9QwNCBOuBfWFOgrk=
Subject key identifier:   75:8B:DF:BD:AE:5C:25:BE:EA:96:50:3E:52:F0:4A:BC:91:BD:8F:EE
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer:       /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number:          F2
Signing time:             Sun 07 Dec 2025 03:35:57 +0000
Manifest this update:     Sun 07 Dec 2025 03:35:56 +0000
Manifest next update:     Sun 14 Dec 2025 03:35:56 +0000
Files and hashes:         1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: PTLIpBenq5AbBATGj3ylVGuhRUz8AnFeDIJOEDdfjHE=)
                          2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: nCdw/pdOq9y5TEkGVX9N7sYIIziw8hJRZc9PdeGmDU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
        Validity
            Not Before: Dec  7 03:35:56 2025 GMT
            Not After : Dec 14 03:35:56 2025 GMT
        Subject: CN=6934f61d-5c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:59:20:be:c2:a9:e9:be:82:0b:d4:2d:50:
                    74:80:b0:c8:dd:6c:bd:1d:d9:28:b8:6a:bc:59:aa:
                    c1:32:34:56:42:f3:87:12:18:da:f6:e0:a4:fc:49:
                    df:d4:3a:d7:59:96:80:3a:2d:38:23:d2:78:0f:da:
                    82:1d:c2:a6:7e:59:d2:06:ec:0b:54:5e:d0:ec:2e:
                    8c:89:57:72:4e:9f:ac:e7:7e:7b:50:e6:53:1a:e0:
                    0f:58:26:0b:a8:6b:2e:61:3a:85:e8:44:53:e5:e0:
                    0f:22:0f:52:7e:ad:de:dd:54:52:7a:be:bd:75:b3:
                    06:66:cb:47:63:43:85:7a:6b:5a:0f:13:62:f1:b6:
                    10:61:f8:ac:2e:d7:ba:93:e2:8c:98:fa:45:fd:59:
                    84:bf:25:84:84:9a:6c:6a:f6:5a:90:0e:20:ff:c4:
                    00:d7:92:bb:b6:1a:72:31:ae:6d:7d:86:cb:62:3a:
                    f3:6f:2f:a2:d1:67:a4:ce:08:3d:2d:0b:97:e4:d9:
                    5a:04:32:5d:88:2f:75:df:0c:6a:1a:19:59:d9:b9:
                    1a:e7:70:df:ac:c0:33:31:5e:40:2e:c4:e2:bb:e9:
                    49:8d:31:8a:e2:75:61:23:a3:c8:db:a5:26:0f:5b:
                    0f:24:e2:81:5b:c1:a5:3c:6a:42:de:02:c2:79:8c:
                    2e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:DF:BD:AE:5C:25:BE:EA:96:50:3E:52:F0:4A:BC:91:BD:8F:EE
            X509v3 Authority Key Identifier:
                keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:16:3b:52:20:b8:eb:79:30:34:ef:06:a9:64:0b:5b:da:
         a1:7b:b8:49:47:53:c5:b4:35:3f:3e:0d:29:b4:d6:2d:c4:23:
         18:05:56:97:45:b4:5d:f3:6a:6d:77:7e:d1:33:eb:32:29:78:
         ba:67:e8:96:5c:b4:52:43:cc:b9:14:c0:91:b2:93:ef:88:c0:
         dd:56:0d:1d:98:ce:66:81:60:15:f8:62:de:58:1d:5a:27:e9:
         59:e6:19:41:56:fd:7f:20:92:90:f2:66:f1:e6:66:62:4d:94:
         2f:a4:55:eb:7a:9c:33:2f:45:57:f0:e8:bd:e4:97:db:cb:b6:
         59:39:61:59:17:7d:2a:82:02:e3:d4:37:1f:f5:50:ec:76:a9:
         f3:80:74:80:2a:52:f4:6b:b4:d0:02:d4:e9:13:1e:f8:c4:c0:
         45:d9:28:2f:12:83:77:40:7f:01:2e:d6:6f:3f:2a:1f:2d:d4:
         9b:1f:64:b2:6d:19:6d:e7:12:98:da:bd:f1:4c:bf:7e:e0:c9:
         45:6f:fd:2d:54:df:f1:bb:60:e2:1f:3a:bb:5a:85:11:82:46:
         ea:75:44:0e:9b:2c:58:33:d6:50:d1:8f:7a:55:3b:0a:4a:d2:
         d8:62:0f:4e:7f:61:1d:f9:a2:6d:e8:55:07:44:07:42:8b:79:
         3c:2e:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:39:52 2025 by rpki-client