This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File:                     Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier:          rr1gCiYlAg8rfFiJfg3CfBUbH3n4JkYXLrUPiwG4AIk=
Subject key identifier:   8D:C0:D8:41:21:4E:12:C7:FF:50:9A:00:64:38:C8:61:4A:DA:68:40
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number:          080B
Signing time:             Sat 06 Dec 2025 20:04:09 +0000
Manifest this update:     Sat 06 Dec 2025 20:04:09 +0000
Manifest next update:     Sat 13 Dec 2025 20:04:09 +0000
Files and hashes:         1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: LUuBcAB+zfGILvPHqlUjgKO5sV9fqzCOED+RkGAZqRo=)
                          2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=)
                          3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Dec  6 20:04:09 2025 GMT
            Not After : Dec 13 20:04:09 2025 GMT
        Subject: CN=69348c39-522e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:c3:42:98:05:27:59:01:74:ac:98:66:10:
                    4f:31:ac:c2:f6:bb:89:c4:30:9c:63:b5:2d:97:4a:
                    e1:8f:eb:a2:73:e5:18:a4:ab:fb:5e:02:34:59:f5:
                    1b:c2:54:3c:12:e8:4e:11:21:e2:b5:21:cf:b7:b9:
                    18:8d:6e:cd:cd:6d:e1:9f:c8:39:c1:b7:95:ae:11:
                    aa:bd:4a:c6:a0:58:6b:3f:1a:e3:c1:52:e7:3f:c9:
                    c7:74:55:4b:1d:6a:cb:19:c9:e7:d1:bd:10:b2:22:
                    3d:24:1e:c5:f8:b2:7a:44:46:ce:e2:b3:13:1b:5c:
                    6d:98:f1:a3:d0:46:f5:c1:2a:65:05:b0:9d:25:80:
                    44:31:b6:03:e5:8b:51:99:9c:08:32:6b:bf:a4:b6:
                    46:be:5e:a8:83:6d:de:dc:58:5f:21:b4:b7:4d:62:
                    90:62:64:ba:54:3f:69:84:f0:e7:9a:23:19:3c:b9:
                    ba:3c:bc:dd:99:c8:fc:49:30:e4:28:f5:6f:2f:0e:
                    75:14:b5:17:ba:8c:44:11:19:73:f7:bf:41:d7:1c:
                    60:e1:e0:d4:51:8a:22:19:74:52:16:60:87:36:f3:
                    ad:ae:66:ed:16:91:df:e6:e9:f7:db:77:3d:e0:74:
                    21:2a:13:2e:7e:01:1d:46:7d:89:5a:65:39:71:64:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:D8:41:21:4E:12:C7:FF:50:9A:00:64:38:C8:61:4A:DA:68:40
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:8e:5f:37:ab:7f:2f:fb:47:66:06:ef:11:dc:bb:b1:df:
         5c:9b:85:74:31:0a:53:11:9a:43:3d:3b:af:fe:18:a5:77:d9:
         e9:4c:2f:65:76:1c:0e:0f:88:7b:85:e7:0c:dd:08:2f:3d:b3:
         ac:3c:6e:2d:69:a3:41:fc:d4:9d:c1:c8:87:98:8b:10:a1:b7:
         12:47:af:1b:30:d2:ed:67:85:15:de:6e:1f:23:74:8c:bf:7e:
         8d:c5:60:4c:53:46:2e:ba:8b:7e:70:e0:54:e7:cf:bc:ae:64:
         f7:ef:da:80:05:a4:83:70:6b:1e:b5:3d:7a:81:48:86:9f:4b:
         a2:bc:e9:69:d6:59:75:d3:58:85:f1:fa:21:e9:9c:24:4b:34:
         b8:59:4c:77:be:1f:12:4b:63:b7:19:f5:07:52:26:af:82:fb:
         68:51:58:76:1c:53:46:a6:1c:2f:79:71:5f:d2:76:c2:3b:26:
         47:54:cf:9e:89:21:08:0c:e8:a2:c7:46:bb:1a:3f:f5:e4:92:
         1e:e7:9b:70:59:e7:b9:5a:12:88:c7:71:12:1e:15:1e:6e:f6:
         1c:a6:99:38:ab:73:65:af:09:d1:40:74:22:b5:64:9c:7b:e1:
         71:2f:de:36:73:99:c1:4a:e6:b0:15:9c:e5:ce:f4:f7:0e:80:
         4a:6f:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:02 2025 by rpki-client