This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
File:                     uPcTXGBh-I9CraXVMMFwUK66jYU.mft (raw, json)
Hash identifier:          PkVqQVckG5iMko9EkIjfXiHxs7UbtZZHMhYYAqibkRc=
Subject key identifier:   B6:80:88:B3:C4:5E:59:B7:8E:B0:65:42:49:EB:48:61:B3:E5:CA:59
Authority key identifier: B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85
Certificate issuer:       /CN=A91B7929/serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
Manifest number:          04
Signing time:             Fri 05 Dec 2025 05:56:29 +0000
Manifest this update:     Fri 05 Dec 2025 05:56:29 +0000
Manifest next update:     Fri 12 Dec 2025 05:56:29 +0000
Files and hashes:         1: uPcTXGBh-I9CraXVMMFwUK66jYU.crl (hash: VjinCHFYlAigJdIx8lgNk2EQLLawb+fCg/WK7gZ1ciY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7929, serialNumber=B8F7135C6061F88F42ADA5D530C17050AEBA8D85
        Validity
            Not Before: Dec  5 05:56:29 2025 GMT
            Not After : Dec 12 05:56:29 2025 GMT
        Subject: CN=6932740d-88ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:86:f4:69:42:f5:92:be:63:99:6c:fd:1a:
                    a8:2e:95:6f:db:f9:18:86:41:25:41:31:b4:98:ef:
                    61:94:3d:65:c9:a5:28:22:c7:ce:e5:69:53:ee:e2:
                    a3:99:ef:fc:d7:a7:85:d7:c2:9a:fb:4d:c0:1e:1a:
                    fc:ff:ae:19:e9:6a:c9:c2:4d:04:c0:01:b2:79:d8:
                    d9:cd:bb:c0:8d:84:95:9e:f5:03:31:86:ae:f8:81:
                    17:80:33:92:b9:23:5c:0a:65:0c:ea:79:d4:cd:f0:
                    d2:4c:e8:99:f5:ff:85:65:91:e4:7e:a8:9f:a3:f8:
                    0e:3f:3a:e5:f4:75:65:31:bd:73:b8:38:b8:07:48:
                    d3:12:a6:db:80:42:1e:3c:0a:4f:57:c2:79:8d:22:
                    b5:a5:eb:69:bc:43:c4:a6:31:3a:61:08:17:01:35:
                    10:c9:01:e4:6e:32:25:d3:b4:bc:e6:b3:aa:b2:c4:
                    f5:39:d2:0b:c5:f7:bd:14:fd:f8:96:43:c0:01:3d:
                    a0:c6:82:a4:5b:e4:dd:bc:24:ab:8c:77:b8:9d:cd:
                    88:a0:5f:c1:34:cf:bc:6f:f8:06:55:fd:bb:b7:d5:
                    6a:d0:c1:85:6e:e9:aa:6b:9d:8d:61:23:02:48:7a:
                    3d:66:44:2a:ca:16:e2:72:e6:3a:7a:7b:58:72:ba:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:80:88:B3:C4:5E:59:B7:8E:B0:65:42:49:EB:48:61:B3:E5:CA:59
            X509v3 Authority Key Identifier:
                keyid:B8:F7:13:5C:60:61:F8:8F:42:AD:A5:D5:30:C1:70:50:AE:BA:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uPcTXGBh-I9CraXVMMFwUK66jYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/BA6CE2D0CE7311F086432214C4F9AE02/uPcTXGBh-I9CraXVMMFwUK66jYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e2:82:51:1a:8a:a3:48:cb:6e:2e:5b:ad:1f:8b:18:47:c5:
         de:0d:b9:64:bd:b5:61:94:30:53:21:11:d9:6a:04:02:df:d9:
         53:b3:6f:e9:3d:1e:c0:c9:e0:62:c4:20:41:45:e1:f5:5b:0f:
         4d:2a:62:91:91:7c:ee:2d:bd:67:fe:69:7a:f3:6a:a3:19:d1:
         dc:13:d3:f2:ae:e4:d3:dc:ce:07:66:8b:39:8e:99:64:87:d8:
         d5:04:ad:9f:c2:bb:b7:6d:8c:cc:92:99:2d:76:d7:5e:f9:3e:
         b5:de:00:59:be:31:4b:39:19:cf:9e:14:be:ff:1f:32:17:91:
         2c:84:f1:6b:25:79:f2:40:be:fe:3c:7a:28:02:9c:6c:20:66:
         68:01:bd:88:83:35:66:30:2f:fc:7f:d7:f4:84:21:7f:23:31:
         cc:76:20:92:28:fa:a8:49:e6:11:ed:76:3c:8e:d3:04:e5:6a:
         94:c4:af:96:72:8e:09:e2:4e:f7:bc:72:ee:c1:13:8c:03:49:
         20:de:88:f3:3a:93:be:fa:e0:9e:4d:0b:c4:84:68:b6:99:c7:
         b4:3e:04:e8:7c:63:f4:a1:6f:2e:5c:13:c3:75:93:0f:6e:96:
         e4:93:39:42:6d:db:0a:06:ef:5a:1c:da:dd:c5:52:ca:1d:05:
         15:62:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:35:37 2025 by rpki-client