This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
File:                     uzvV1-GZJNhitqQb80x_27vpHG0.mft (raw, json)
Hash identifier:          WfcltIS0FEnBbjo34dHsVcP722ObxUG1SOCUKADis9Q=
Subject key identifier:   62:72:D6:F7:4F:92:68:3F:DA:C6:0B:CE:8F:80:BC:08:62:A3:E2:39
Authority key identifier: BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D
Certificate issuer:       /CN=A91CA735/serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
Manifest number:          F6
Signing time:             Tue 09 Dec 2025 03:18:33 +0000
Manifest this update:     Tue 09 Dec 2025 03:18:32 +0000
Manifest next update:     Tue 16 Dec 2025 03:18:32 +0000
Files and hashes:         1: uzvV1-GZJNhitqQb80x_27vpHG0.crl (hash: 7Y5vqJ32XdauQORbdYLU8nEzewG6kNjXH0HDouuBow4=)
                          2: 385E3308639D11EFB668775FC4F9AE02.roa (hash: TCYXclRvYYtZUxQ5mRKUajDIcjauKFDG/zZisgUfCFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 03:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735, serialNumber=BB3BD5D7E19924D862B6A41BF34C7FDBBBE91C6D
        Validity
            Not Before: Dec  9 03:18:32 2025 GMT
            Not After : Dec 16 03:18:32 2025 GMT
        Subject: CN=69379508-5774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:62:9c:79:57:d9:15:9b:d7:3d:56:2e:f1:
                    37:cd:f4:5a:f5:f0:d5:9e:8c:82:2e:cf:56:fe:34:
                    a6:22:08:bf:db:e3:ff:b1:11:70:32:95:a8:ad:a9:
                    be:34:57:0e:cd:da:09:84:49:79:ce:e5:e6:9c:bf:
                    36:37:6d:39:20:7a:05:44:ac:cc:e9:56:b9:26:69:
                    85:34:08:7a:10:c0:cd:15:31:2c:bf:18:39:40:b6:
                    ec:82:b7:f0:bb:e0:0f:c7:ba:31:a5:b4:20:31:bb:
                    4b:fa:55:98:ab:77:ca:b6:38:49:60:98:07:dd:2d:
                    aa:2e:c7:3e:3d:c1:8c:da:45:b5:68:ac:ca:b1:7e:
                    5a:da:26:90:13:07:67:ed:4a:6a:15:00:ab:ab:a6:
                    27:72:48:c2:a8:1c:cb:cf:6c:eb:50:29:f8:c9:3d:
                    d5:4f:58:23:65:56:43:a0:3b:20:41:85:1b:53:f5:
                    3d:a5:bc:17:ae:ad:26:b3:36:7d:b3:d3:c3:c0:a2:
                    9e:88:4c:0c:e3:80:2c:ee:53:cb:27:4c:fa:e0:bc:
                    0a:2f:88:4c:7d:2c:b6:c2:a8:67:1f:b2:72:0e:ba:
                    7f:29:8c:9a:61:1d:4f:6c:1f:3b:6f:53:c9:96:de:
                    8f:2b:6d:18:4a:94:e8:37:61:22:b5:1e:b8:3a:53:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:72:D6:F7:4F:92:68:3F:DA:C6:0B:CE:8F:80:BC:08:62:A3:E2:39
            X509v3 Authority Key Identifier:
                keyid:BB:3B:D5:D7:E1:99:24:D8:62:B6:A4:1B:F3:4C:7F:DB:BB:E9:1C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uzvV1-GZJNhitqQb80x_27vpHG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/C7F441C6639B11EF9B4D2A5DC4F9AE02/uzvV1-GZJNhitqQb80x_27vpHG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:9d:0e:69:11:7b:c8:21:95:e0:bf:63:f4:6b:c0:0e:7c:
         a6:fb:f2:13:7c:f7:dd:f7:75:1f:77:8b:68:53:1f:0c:65:38:
         3d:7c:80:22:6a:0b:12:c0:39:91:33:1a:9b:44:00:8b:aa:3b:
         ba:ab:63:e5:ce:e4:6c:f3:6a:89:69:8e:d1:fc:f5:52:c7:20:
         a2:da:11:2d:d3:4f:d0:2c:4c:62:41:39:d4:92:09:5e:7e:6f:
         19:57:09:43:b9:48:9b:14:b1:f7:de:f9:89:dc:86:87:c4:4b:
         ad:d5:46:75:00:84:2c:18:38:54:e4:3e:71:6b:2a:36:07:fe:
         d7:00:51:38:3a:4d:7b:e0:76:68:bd:6b:a0:2d:78:b2:b6:74:
         70:29:50:2e:95:ab:bd:0b:a4:2d:bc:9e:d1:ef:aa:95:64:00:
         7c:41:33:3e:6d:a5:56:bf:27:0c:9d:c3:56:e2:3e:74:a1:ba:
         d8:76:e0:f4:cf:47:dd:cd:1f:1f:c5:e9:eb:be:b9:c2:9b:3a:
         9c:9c:a7:98:f1:be:47:77:21:69:4e:c1:88:68:da:00:b1:77:
         72:a0:b9:7b:04:a2:2f:1a:02:17:a8:82:6a:55:86:d8:c0:0b:
         3a:e7:f5:0e:3d:99:d2:41:03:dc:31:e4:c9:37:50:b3:46:79:
         06:f2:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 01:45:19 2025 by rpki-client