This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
File:                     uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json)
Hash identifier:          j6jxOAF42RHs2Z9AurKat2wyHZzlF5/I+izYIUmAk/w=
Subject key identifier:   68:D7:B0:9A:4A:A6:FC:7B:F0:FC:9D:B0:37:91:30:EC:6B:15:3C:9E
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Certificate issuer:       /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
Manifest number:          0854
Signing time:             Thu 04 Dec 2025 19:52:30 +0000
Manifest this update:     Thu 04 Dec 2025 19:52:30 +0000
Manifest next update:     Thu 11 Dec 2025 19:52:30 +0000
Files and hashes:         1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: wl+E5bLSEOA2T0srYdPLujX1xS5mlBJpr10MHQqxlTA=)
                          2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
        Validity
            Not Before: Dec  4 19:52:30 2025 GMT
            Not After : Dec 11 19:52:30 2025 GMT
        Subject: CN=6931e67e-1576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:95:08:c8:82:e0:b8:68:eb:21:98:c9:12:
                    9a:ec:34:30:07:60:c9:90:77:c9:2e:8b:83:f1:eb:
                    c5:f2:69:25:09:69:16:2b:66:48:ba:2c:bd:22:20:
                    73:62:74:ad:fd:44:53:ef:77:1e:24:46:40:f2:47:
                    05:8b:38:6f:d0:4e:a5:0a:4f:d0:d4:f9:84:d9:f0:
                    a5:fc:8a:59:d2:b2:c0:97:37:b8:85:e2:1c:59:1f:
                    e3:a3:b3:74:9f:38:e2:8b:e0:31:34:80:0c:a3:7e:
                    80:54:0f:bd:33:c4:3a:d2:70:b2:2c:92:2f:81:86:
                    a7:e9:75:82:e0:f8:d1:07:f3:d9:8a:76:7d:3c:d6:
                    df:07:c5:21:00:3f:26:81:fb:9f:c2:28:3f:64:d4:
                    49:c5:20:e9:bf:6f:cc:d4:18:94:f2:ee:79:68:52:
                    fe:94:ab:37:d5:c7:a1:5a:1c:25:79:50:7a:92:d8:
                    d6:6a:ca:10:01:60:70:7c:f3:06:2b:91:46:95:05:
                    6d:17:5a:d6:ad:4f:47:83:11:9d:37:ce:2c:e4:a9:
                    81:aa:ba:21:78:3f:30:4d:2a:dc:60:2e:06:e7:78:
                    fa:0c:88:49:13:cd:07:b1:99:00:8e:a4:59:09:9a:
                    90:3d:26:26:28:a2:80:10:e0:19:fd:6d:30:c1:13:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D7:B0:9A:4A:A6:FC:7B:F0:FC:9D:B0:37:91:30:EC:6B:15:3C:9E
            X509v3 Authority Key Identifier:
                keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:56:26:52:84:5c:df:30:4e:05:8b:53:48:96:f4:11:82:a0:
         06:73:b4:cb:c7:c6:39:f7:36:be:f1:c3:01:79:af:15:d0:ec:
         a9:9d:ab:22:3c:b2:bd:a6:a4:32:4b:00:57:05:37:09:60:e4:
         21:f9:20:59:0f:ff:b4:52:c9:41:52:d2:90:cf:61:e5:76:9a:
         49:84:72:a7:5a:93:ff:e4:da:67:f9:62:b9:21:bb:d2:83:b1:
         b9:75:d3:ab:c2:3d:0b:3d:07:51:3e:e6:b6:45:99:38:e6:53:
         f0:1f:2a:c8:99:a5:93:17:8d:5d:c4:c0:2d:01:1b:f2:08:e6:
         06:bc:85:e9:db:8c:20:4e:92:6c:a1:3c:e8:74:d9:bc:18:d8:
         73:f5:83:a6:2e:c6:64:9b:77:3e:f2:4f:de:89:02:6d:fc:98:
         d6:a7:d5:50:52:08:14:36:5c:3b:29:f5:71:5e:06:e0:38:61:
         7d:68:a8:78:51:62:08:1f:69:ee:84:26:75:ce:1f:21:0f:c5:
         51:1f:00:b7:f0:48:1b:06:dc:23:b7:7f:aa:43:7f:75:8a:19:
         8d:2e:3d:f0:73:ad:54:d1:8c:60:a5:20:db:28:68:9f:c6:1d:
         66:ba:8d:72:7a:72:e1:b0:76:aa:6d:93:2c:b0:c9:bb:a9:c4:
         b8:56:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:32 2025 by rpki-client