This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          h2CkCh1JLaCMiXQsibsow+knJdg9TocZXZBTlf8jJr8=
Subject key identifier:   04:8B:5E:65:04:98:DA:65:74:75:31:39:90:B5:4D:8E:4E:D1:90:54
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          013B
Signing time:             Sat 06 Dec 2025 15:43:43 +0000
Manifest this update:     Sat 06 Dec 2025 15:43:42 +0000
Manifest next update:     Sat 13 Dec 2025 15:43:42 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: 5WGLjI1xdA98jsGZiMwOF3t7ePz9Y3bB/kJq3p1EXiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Dec  6 15:43:42 2025 GMT
            Not After : Dec 13 15:43:42 2025 GMT
        Subject: CN=69344f2e-4cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:ad:c3:6c:78:68:8c:50:80:cb:4c:35:48:
                    d7:3e:66:5c:84:14:0a:4a:1d:61:4e:69:af:b8:22:
                    bd:de:07:f6:5a:d8:04:d7:0c:1b:55:13:ad:73:be:
                    e0:fe:e7:37:11:8b:78:a2:fa:c9:6b:1a:84:53:a5:
                    70:7a:22:f2:9e:cc:95:1a:21:a1:e8:e2:2c:5f:06:
                    d4:6a:ef:b6:24:36:f3:f9:83:68:7a:20:69:00:27:
                    01:bb:5e:d9:5b:5f:dc:fe:e5:86:a2:96:5e:5f:a1:
                    93:bd:06:37:53:94:e2:81:47:0c:1a:5d:2b:a3:54:
                    4e:39:ed:86:a1:95:46:c6:8f:d6:e7:82:64:03:5b:
                    e5:d9:80:98:22:d4:7d:9f:cd:1b:b2:1d:c0:3a:64:
                    fa:d1:1f:2e:58:46:81:c9:24:39:c9:9e:55:d7:18:
                    e5:e0:a9:f9:34:5f:4c:7e:96:29:e9:61:af:29:10:
                    45:46:41:3d:f2:20:97:ed:5b:b0:48:b7:5e:59:84:
                    70:b5:97:97:cd:1d:fa:4e:e4:11:75:66:33:ae:7c:
                    7b:1c:bf:5e:13:6f:4b:fa:dc:34:68:3e:32:0e:ef:
                    03:e3:6f:73:44:75:32:b2:62:4d:51:a2:94:9e:ad:
                    73:62:f6:95:60:ae:67:20:86:14:93:6d:c1:d1:70:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:5E:65:04:98:DA:65:74:75:31:39:90:B5:4D:8E:4E:D1:90:54
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9a:25:3f:56:05:de:c2:5a:e6:a4:6f:36:a8:0f:db:0e:5c:
         8c:fa:82:e6:a5:bc:3b:34:c5:cb:58:7a:ea:dd:1d:29:d7:b5:
         20:7e:70:d5:5d:7f:97:e3:9b:6d:06:a7:7b:be:9a:53:15:e6:
         ee:fd:ea:8c:15:c0:2c:02:26:a3:b0:3e:39:32:93:49:7e:e1:
         88:e9:77:93:ca:ae:50:05:82:37:a2:a0:6a:3a:52:48:4e:b9:
         eb:c1:ad:8d:d4:7d:49:f1:e9:86:19:5a:2b:39:82:ad:53:e3:
         b1:99:92:1e:41:b4:3c:58:61:54:40:87:2d:7e:90:93:69:67:
         24:fb:ff:3a:35:70:c4:a6:39:52:4b:92:b6:a6:5c:08:0d:fc:
         49:63:58:7b:99:d9:cd:b6:87:87:25:cd:1f:08:f3:27:ac:e2:
         58:c4:f9:0a:2d:22:ee:ce:49:62:7a:eb:e2:45:20:1e:8c:f1:
         86:ba:96:ce:dd:7f:ef:af:54:13:89:df:ab:c5:1d:a7:8a:ce:
         c2:8e:f4:0c:04:f2:67:85:d0:c3:02:96:71:88:46:27:78:98:
         dc:c4:c4:be:d2:f7:1e:1e:fa:35:7f:12:3d:f7:44:c6:d9:5d:
         f6:1a:99:56:14:53:cc:c5:32:21:5e:d1:45:74:44:d1:db:b2:
         71:5d:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:06:03 2025 by rpki-client