This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          lgqs81H4uJejBIJpDlhFciIDWloTKsgrR0bhjXHXJnU=
Subject key identifier:   2D:F4:36:72:2A:73:1C:72:D0:88:42:D6:95:B7:74:DB:34:2D:75:A2
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          59
Signing time:             Fri 05 Dec 2025 05:01:15 +0000
Manifest this update:     Fri 05 Dec 2025 05:01:14 +0000
Manifest next update:     Fri 12 Dec 2025 05:01:14 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: GIYDVimd2KePNZOh82J2PGhaaT7fzUIG80zykLGUAps=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Dec  5 05:01:14 2025 GMT
            Not After : Dec 12 05:01:14 2025 GMT
        Subject: CN=6932671a-4707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:e4:0a:10:ce:0f:7a:68:13:fa:a9:d5:a4:
                    15:99:cc:74:fe:dc:b3:39:c7:ff:7a:8c:90:86:3d:
                    5d:de:63:40:cf:6c:2a:96:3d:dd:46:99:6e:c8:fa:
                    9e:c8:62:81:f9:d3:84:00:09:b7:7d:12:13:e7:de:
                    6e:70:45:21:f7:02:3a:67:7a:fc:02:b8:aa:c4:f2:
                    b3:e5:12:8a:e0:e6:e8:bc:97:26:a4:af:ce:c5:bf:
                    e4:32:11:0c:38:26:e0:9b:dc:58:5a:75:fb:0c:88:
                    42:d4:1f:5a:db:00:58:17:4a:92:05:1f:8c:0e:77:
                    a3:f8:ca:69:05:14:98:b7:27:35:fd:6a:e2:c7:d0:
                    04:7a:79:1a:e3:47:16:03:43:a8:7e:61:e7:00:fa:
                    2f:6c:76:3e:a0:31:80:19:ad:d4:83:2e:2a:2f:d7:
                    32:d9:42:86:08:f2:80:23:0a:32:90:d9:20:39:d1:
                    a1:c7:ba:e6:18:e8:4f:1b:b8:c1:38:69:3c:76:66:
                    2b:f9:64:19:6f:3a:14:61:ab:6f:20:f0:0a:be:23:
                    e0:29:e8:01:3e:2f:3d:e8:57:9f:d6:33:a2:05:34:
                    fe:51:28:74:60:7e:30:f7:07:9e:06:49:51:94:58:
                    86:e0:d5:7f:b0:f1:8c:55:1c:c7:86:48:21:a4:39:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:36:72:2A:73:1C:72:D0:88:42:D6:95:B7:74:DB:34:2D:75:A2
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:05:1b:87:c3:e9:02:2b:4d:ad:bf:f3:d0:5c:5a:36:38:2c:
         0d:d9:53:09:0b:a5:32:40:46:30:10:5a:d0:f1:d3:00:87:f5:
         c8:f2:6a:2c:ed:78:d0:6d:b7:e3:14:77:47:d9:f2:e9:2e:10:
         e7:f3:7c:21:b7:02:16:26:d3:17:f7:73:17:0d:67:07:ef:85:
         e0:7a:f1:27:33:7f:8a:15:1f:a5:55:2b:03:ed:30:c9:4d:1d:
         06:6b:b8:3e:ae:d3:41:b2:68:2f:53:31:48:10:73:bd:a0:62:
         0d:b5:15:2d:45:34:10:55:4c:74:85:60:29:33:64:ae:06:ae:
         f4:d4:77:a2:2c:a0:ff:89:dd:93:64:35:f5:b1:ec:5c:e9:0b:
         ae:f5:6c:c4:0c:14:58:46:07:94:15:8a:fd:65:25:f1:b8:50:
         33:01:7c:49:f0:5f:98:0a:56:5b:dd:4d:5a:aa:e3:3c:f3:f1:
         8c:f9:00:f3:b3:58:89:78:41:ac:18:94:ef:dd:f3:17:55:47:
         93:f2:f3:f8:ea:44:cf:0c:31:4c:d2:4d:84:de:94:1b:ca:16:
         18:9c:52:37:89:67:e2:93:21:da:d6:17:5e:1e:78:68:3e:13:
         9d:77:66:3c:ff:10:87:5d:e0:94:e8:99:f5:9c:04:62:cc:5e:
         d2:bf:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:42:29 2025 by rpki-client