This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
File:                     UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json)
Hash identifier:          LoRcp6VkxQUdUUuUE2u1YdTHl2kXUaO0/HnOWaA3nwE=
Subject key identifier:   B5:05:75:9C:7C:5E:22:26:95:30:3A:3E:CF:6F:C7:0A:3A:23:D7:E1
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Certificate issuer:       /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
Manifest number:          02EA
Signing time:             Thu 04 Dec 2025 23:37:59 +0000
Manifest this update:     Thu 04 Dec 2025 23:37:59 +0000
Manifest next update:     Thu 11 Dec 2025 23:37:59 +0000
Files and hashes:         1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: SxEWwdvOH6QbEMKD+VwmKyDKFtWEZe3REFwfnlHntb8=)
                          2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: zA/5PEhgjN/BvDw/xl3w8dV/RMsq+gylEcRkytviDsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
                          rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
        Validity
            Not Before: Dec  4 23:37:59 2025 GMT
            Not After : Dec 11 23:37:59 2025 GMT
        Subject: CN=69321b57-84b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:1c:0d:56:fc:6a:45:74:ae:46:c1:88:d7:
                    33:6e:70:13:34:21:45:39:5b:eb:29:c8:a1:65:3c:
                    6c:45:17:1e:10:67:69:f7:2e:c2:2c:0e:5c:e9:02:
                    af:35:17:ef:6d:c2:10:3f:d2:d6:ee:07:e2:96:27:
                    19:98:bd:67:e2:02:4a:21:78:bb:3d:98:a6:f0:38:
                    e4:d5:65:9a:54:df:25:59:4c:be:d0:80:85:0e:aa:
                    1a:b8:d0:8a:dc:89:5e:fe:2a:55:2b:f0:b3:0a:ad:
                    4e:56:4b:f9:30:27:da:25:3f:55:67:1c:14:34:a1:
                    b2:55:5b:49:d9:53:dc:ca:64:4a:55:61:84:b6:70:
                    09:23:fb:9b:4d:21:66:8b:df:06:3f:bd:1b:15:37:
                    6f:49:3f:69:b4:b0:d6:3e:5c:bf:ba:cc:36:1a:f2:
                    79:23:aa:ac:e1:dc:f7:4a:01:ec:3f:26:64:81:68:
                    c0:4c:a7:94:d1:b2:7c:9a:2a:16:45:ff:f4:9d:fa:
                    d7:1e:d1:2d:8d:be:0b:bd:b3:0d:49:4e:24:47:da:
                    4c:00:bd:88:5a:c6:c8:24:3d:fd:95:33:6f:36:89:
                    f7:4c:84:37:dd:f8:05:6b:ca:eb:b3:f3:0e:6c:48:
                    00:35:29:bd:58:85:81:36:13:a7:56:a5:0e:08:44:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:75:9C:7C:5E:22:26:95:30:3A:3E:CF:6F:C7:0A:3A:23:D7:E1
            X509v3 Authority Key Identifier:
                keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8e:f8:ac:89:38:1d:1d:5d:27:ed:18:e7:83:61:36:5f:fe:
         15:7e:c8:ff:98:ac:e7:cb:be:2a:fa:83:4e:99:a7:7d:b1:94:
         41:22:36:d1:ba:3e:b5:b2:5c:82:bd:a6:f4:e5:58:22:1b:bb:
         5c:a0:5a:48:94:cb:fa:0f:69:45:d0:08:6a:ae:81:b1:57:ee:
         70:fb:ea:71:1f:cf:6f:75:c6:b3:e4:4d:23:29:4f:02:28:df:
         e6:c8:74:00:73:5f:cd:c8:8b:21:99:1d:8e:a7:b8:7f:0f:56:
         08:ec:80:c9:66:95:62:33:e7:11:a2:c9:18:4c:90:f4:0f:3c:
         eb:5f:dc:c8:d6:67:d3:b6:b5:f7:c2:1a:e4:fc:31:9a:ec:1e:
         6a:63:be:d1:80:3e:99:dc:5c:25:32:5b:b7:07:6a:75:ab:c3:
         05:1c:a5:6b:e8:31:ca:c2:dd:13:44:41:24:7c:10:0f:d8:ce:
         c9:25:68:80:01:f7:bd:40:58:49:71:5a:6d:ee:a2:06:66:8a:
         92:ca:2a:20:90:a4:c5:ba:b6:d2:3a:63:21:7b:ea:c3:63:5b:
         95:13:ac:b9:36:53:79:d0:c4:c1:d6:27:c8:68:4b:c2:7e:12:
         4a:fd:ac:8b:de:8a:ee:fe:c4:6e:5e:3e:dc:1a:ea:eb:03:73:
         e2:7d:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:37 2025 by rpki-client