This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          Yh1oIlmpNFsDOLj6iEMH5jzib2dCyOk7exWYhDWXPoA=
Subject key identifier:   EA:C2:69:4F:1C:EF:68:7C:14:39:C2:A8:97:F6:34:7A:EC:B4:A6:E3
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          0107
Signing time:             Fri 05 Dec 2025 03:07:05 +0000
Manifest this update:     Fri 05 Dec 2025 03:07:04 +0000
Manifest next update:     Fri 12 Dec 2025 03:07:04 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: Jp+xihfiEA/f3Vz4Bvmh7AbVm0M2QKtP/tX9+RtNXIE=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: RhQloGXtcZHnLcoyU2Qhf/8Ls5h2TxH8G+0z0bjWi3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Dec  5 03:07:04 2025 GMT
            Not After : Dec 12 03:07:04 2025 GMT
        Subject: CN=69324c58-92c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:6e:9d:ff:c0:a9:d5:a2:58:49:02:d4:5f:
                    74:71:a3:04:6e:be:5d:7e:f6:1c:85:4d:b7:fa:b1:
                    f6:18:85:bb:d6:49:b3:74:95:9c:a5:b9:52:cb:2f:
                    ff:6c:bc:39:16:b8:ee:8b:43:63:e4:4a:e3:d3:c7:
                    ac:4d:55:da:1b:d8:87:f5:4e:96:a3:77:7b:03:96:
                    81:92:68:29:b1:53:1d:31:da:a2:83:68:08:54:e0:
                    44:ce:bc:07:46:13:f4:8f:57:91:cd:67:ef:1a:e8:
                    16:c5:9f:05:b3:80:ca:86:dd:38:7b:47:25:b9:65:
                    78:b4:59:ff:c5:67:2d:e1:81:cb:1a:0d:55:41:bc:
                    79:43:61:22:44:61:32:e7:e0:d0:24:11:5b:fa:e8:
                    b9:c0:eb:41:c8:01:2d:62:cd:85:04:90:df:a8:d7:
                    37:c9:c7:c1:a5:cd:50:18:92:45:2a:4b:7d:8f:bc:
                    54:9d:ef:e5:31:73:aa:ca:e3:9a:fb:bd:c4:12:d2:
                    2a:18:b1:39:6d:c6:07:fc:09:97:95:78:f8:15:08:
                    5c:8d:af:95:b7:c5:34:a5:c3:52:07:84:4e:5f:b6:
                    ae:dc:0f:1f:e7:07:2c:cd:3b:8e:51:2d:13:3d:dd:
                    3b:c1:bc:27:80:61:3b:98:35:a4:6f:e3:60:32:c6:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:69:4F:1C:EF:68:7C:14:39:C2:A8:97:F6:34:7A:EC:B4:A6:E3
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:3e:bf:c0:ff:29:23:db:f8:ce:31:48:80:32:2f:c0:d3:
         c9:08:3c:24:9d:b6:30:88:f4:e8:34:cd:f5:fe:55:42:55:22:
         3e:36:4a:a7:98:8a:38:5e:0f:a8:18:a1:e3:5f:8b:df:7a:10:
         0e:b8:da:c5:4d:82:7f:8f:4a:5e:52:71:3b:37:bd:5d:25:be:
         d5:98:00:0e:ca:b0:ce:7e:35:b4:64:c8:87:77:b1:c0:ac:d0:
         51:ab:e8:31:c5:59:6f:c7:fb:8f:e9:6a:13:eb:d3:a8:0f:0f:
         13:8e:5d:3d:9c:92:04:df:c0:e4:11:e7:cf:88:0a:d2:04:72:
         9b:d8:be:86:6d:b7:d5:10:1d:82:33:cd:ff:32:89:f1:b6:df:
         78:d3:e3:12:07:d5:65:9f:be:84:b9:42:4c:c4:ee:2a:2b:be:
         bf:7b:f9:c9:79:64:89:13:e3:94:11:07:12:3c:13:4d:31:47:
         a8:18:92:3e:bd:4e:b5:f3:e2:f1:fc:1e:bf:a5:a8:16:e2:f8:
         f6:66:82:df:1b:48:0c:4c:e4:2b:c2:ac:76:81:61:1e:e6:83:
         95:ad:5c:94:25:89:fd:54:0f:51:72:0c:f2:8e:2c:61:6a:f5:
         f7:b6:bd:b6:6f:85:31:40:91:56:2d:6b:9c:59:06:89:b0:41:
         99:8b:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:53 2025 by rpki-client