This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          k8JGBJLTSxhCZhPZOVAbYwE514IDWht1ApiHHu5U7As=
Subject key identifier:   02:9E:9D:14:BC:22:12:08:4D:FE:E0:18:59:B5:33:37:A3:68:DD:6C
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          E9
Signing time:             Fri 05 Dec 2025 03:25:39 +0000
Manifest this update:     Fri 05 Dec 2025 03:25:39 +0000
Manifest next update:     Fri 12 Dec 2025 03:25:39 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: h812yT/P7aNiZWHO97tuavDmrYReQiW2I+kD8KEj+MU=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Dec  5 03:25:39 2025 GMT
            Not After : Dec 12 03:25:39 2025 GMT
        Subject: CN=693250b3-fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:92:87:31:a6:2b:b3:96:52:67:0c:0c:e2:
                    33:9e:03:a2:71:54:9f:89:ad:29:38:3c:a0:2e:f2:
                    5d:68:b0:d8:3c:6a:9d:0c:67:b4:00:68:4b:02:32:
                    bd:bf:61:04:38:54:56:9e:ce:f0:ea:98:20:19:ee:
                    fb:ee:69:30:ea:bc:36:2d:96:e1:73:a6:ac:fd:e5:
                    92:16:32:84:a8:33:6f:7d:14:63:aa:3a:96:03:38:
                    09:87:5f:c0:50:8e:0a:f5:9b:36:1e:41:9c:35:4f:
                    b5:4c:c0:96:48:50:7c:aa:c4:18:90:f8:42:62:11:
                    54:3e:b9:0c:46:90:58:2a:51:bb:99:0b:b0:51:4b:
                    3f:8b:ad:b4:31:07:88:42:54:54:cc:0b:4a:7c:d5:
                    bc:53:bb:5d:55:bf:12:12:f4:5d:ae:ff:b4:23:3a:
                    fb:6b:3a:84:58:67:7b:b5:fd:9f:f5:57:71:66:35:
                    91:91:87:2f:bf:ac:d8:aa:4b:b2:99:52:4e:be:9c:
                    61:2a:f9:dd:5f:a5:7e:bf:7f:63:e8:cc:aa:c2:3e:
                    c1:cf:f4:2c:aa:60:65:be:78:de:20:dd:44:56:9a:
                    29:f7:d4:36:e0:b4:9a:87:a2:81:aa:fa:ce:c6:7f:
                    1d:a0:eb:ed:e1:41:fd:71:13:54:fe:a9:d3:23:cc:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9E:9D:14:BC:22:12:08:4D:FE:E0:18:59:B5:33:37:A3:68:DD:6C
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:30:ef:2f:28:21:2e:53:24:ef:59:8b:57:10:2e:e3:b5:b2:
         ac:5c:0e:cc:2a:3d:51:6a:a9:df:9e:5a:d1:d6:97:10:e5:45:
         0b:72:be:3a:ed:21:9f:31:9d:bb:9f:2a:cf:45:d9:fb:59:75:
         4d:fb:99:61:ff:7b:00:48:da:da:b1:4a:e1:37:a6:89:9b:90:
         78:87:75:98:cf:68:02:56:ac:fd:a0:8c:dc:9d:41:89:21:ce:
         bd:ae:4c:45:b0:59:c0:7f:ea:7b:f2:5b:eb:85:ae:c7:34:29:
         79:64:77:2c:09:62:92:b7:56:75:54:86:78:06:70:28:ef:fa:
         2c:bb:ee:0c:fc:0d:d1:14:7b:dd:5a:ae:05:3e:a1:a4:1e:21:
         d8:46:60:9c:af:41:06:d0:90:13:73:29:4a:89:dc:6e:bf:dc:
         3e:07:c8:c1:ff:85:4d:b6:f0:8b:43:52:6c:46:41:74:22:fd:
         e0:e5:1a:52:80:41:2d:2d:60:b6:9f:d6:97:f9:fd:c2:e8:ca:
         71:6d:82:01:de:c3:b1:af:1c:c7:b8:ae:ab:5e:eb:26:50:e7:
         61:34:7c:35:76:6e:57:7b:e5:e8:37:0d:75:5d:78:08:e4:95:
         00:16:2c:f5:42:e3:6b:3a:6b:a5:c6:d0:4c:83:6c:e4:da:47:
         60:bb:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:02 2025 by rpki-client