This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
File:                     UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json)
Hash identifier:          9sU2pQ58hVL1rv4c4YE+wz1klIdAvvDvC7gtpGe3fic=
Subject key identifier:   E2:6E:39:CA:86:AD:B0:F1:E1:59:06:D8:EC:89:BA:A0:D2:E7:29:A1
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Certificate issuer:       /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
Manifest number:          0213
Signing time:             Fri 05 Dec 2025 00:47:04 +0000
Manifest this update:     Fri 05 Dec 2025 00:47:04 +0000
Manifest next update:     Fri 12 Dec 2025 00:47:04 +0000
Files and hashes:         1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: T9iny3FFwYUeS6fm6PyXCIyWxuAl66HWw2w4QkjG+I4=)
                          2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: O4FUSN5LS+aElz5VOCMijpDVd7ugBsWS/neaZYIhjDU=)
                          3: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (hash: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs=)
                          4: B46796B8B8EE11F0B3E74640C4F9AE02.roa (hash: KU0fghawNYrmUS52BrVzcRnbvVugg48SLZDAX+rBsLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
                          rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
        Validity
            Not Before: Dec  5 00:47:04 2025 GMT
            Not After : Dec 12 00:47:04 2025 GMT
        Subject: CN=69322b88-7877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:0c:84:06:c0:8d:6f:9a:a9:25:5e:a8:33:
                    e0:60:fb:36:10:0c:c8:2d:05:f0:ce:09:44:74:de:
                    ee:15:92:67:d7:29:a6:88:43:f2:14:a7:b4:51:0d:
                    83:d8:ed:de:10:a9:87:69:31:05:99:4b:62:23:0c:
                    0f:75:22:6c:36:e3:22:2f:af:c6:7c:72:07:0d:8c:
                    4e:39:e8:52:2e:f7:15:50:af:33:6a:dd:97:2d:31:
                    bf:bc:ae:fd:76:94:12:0e:c8:09:11:32:50:e7:10:
                    0d:61:28:1a:62:42:64:56:ba:c4:65:e8:43:4e:ec:
                    43:70:7b:96:f3:b7:c7:d3:b6:eb:57:f6:7a:9f:f6:
                    64:e8:e6:8b:01:db:79:80:07:43:1b:e3:44:ae:c4:
                    9e:3f:ca:ac:60:24:9c:89:43:22:e6:13:6f:97:16:
                    7d:f7:df:2e:e7:22:f3:a3:05:8c:56:76:87:f1:ac:
                    29:99:c7:77:6c:c4:b9:f7:3c:d3:3a:86:94:e9:68:
                    97:ac:41:57:0b:da:3c:00:c2:14:bc:f2:79:e3:66:
                    3a:89:de:db:bd:ad:23:64:0e:16:3d:77:34:ea:4d:
                    27:9d:84:9d:bb:d2:7b:a4:c1:26:3c:37:0d:65:bd:
                    69:6a:25:f5:01:a4:f8:22:c1:45:c2:b3:28:aa:98:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6E:39:CA:86:AD:B0:F1:E1:59:06:D8:EC:89:BA:A0:D2:E7:29:A1
            X509v3 Authority Key Identifier:
                keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fb:2e:5c:ab:af:41:63:40:77:a0:3b:a5:1d:a4:aa:4c:d8:
         fd:e5:e1:7d:1e:f5:03:26:46:ed:e2:f5:90:13:0c:49:0f:b3:
         82:c9:51:47:ab:d9:e5:16:80:da:aa:90:b1:a4:a5:c4:d5:c8:
         4d:67:a9:01:9f:6e:d2:a5:9f:9f:c4:7e:88:63:87:d7:67:5f:
         84:72:2c:56:6a:4b:4d:ba:27:f8:b2:84:93:29:3b:c9:22:86:
         84:c6:90:a7:b9:00:22:cf:e0:d0:8f:02:e8:91:a9:4f:ce:2d:
         ab:b1:48:c6:86:43:f4:6f:87:a0:1a:47:e2:98:c9:cc:45:a2:
         85:64:e7:5a:c4:92:47:ba:78:20:fa:5b:17:4e:fd:f2:c5:39:
         cd:4d:16:1b:ee:92:67:39:4a:0d:a0:87:c1:8d:a4:5e:ed:7d:
         ed:e0:89:b4:c7:2b:3e:d2:74:c6:08:48:23:53:a5:94:bc:a0:
         f9:d3:15:b9:60:62:6a:99:38:e7:7a:9f:f8:20:1f:17:74:a4:
         cb:45:d9:01:52:ec:df:ce:6c:98:8d:ef:67:fd:0a:92:5e:02:
         7d:db:50:2a:29:f6:56:48:76:43:25:c8:3c:50:e0:8a:71:17:
         0e:87:b4:18:17:88:88:c1:24:e3:50:b0:f9:f9:fc:03:41:64:
         d8:90:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:35 2025 by rpki-client