This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
File:                     UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json)
Hash identifier:          v9W3IyyYPY7gZVkVG6VUPExg25aHBNyPYQwdn/fq+Vw=
Subject key identifier:   76:35:C0:CA:0D:C0:4D:4E:73:20:EE:8D:14:34:BD:7E:01:DC:3C:09
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
Manifest number:          F0
Signing time:             Fri 19 Dec 2025 04:26:24 +0000
Manifest this update:     Fri 19 Dec 2025 04:26:24 +0000
Manifest next update:     Fri 26 Dec 2025 04:26:24 +0000
Files and hashes:         1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: jvEVlHxFMRN2bp20fm3UdNDmYIJ6GFE/oN5oaSJNifs=)
                          2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Dec 19 04:26:24 2025 GMT
            Not After : Dec 26 04:26:24 2025 GMT
        Subject: CN=6944d3f0-9899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:9c:30:a9:df:32:2d:e2:d5:4d:7e:de:ec:
                    11:d8:9e:7f:99:d7:86:d3:fd:e6:20:1d:36:38:75:
                    32:ae:e1:c5:b5:df:30:3e:e0:c5:7c:88:d0:f6:db:
                    69:07:6d:42:e1:ee:a2:33:c7:8d:01:cd:0d:fd:af:
                    44:73:47:69:b1:93:95:c4:c8:1c:13:49:2d:4d:7e:
                    04:e3:42:64:98:05:58:7c:45:84:71:85:25:2e:72:
                    38:6e:a4:48:bc:6a:03:b7:ed:43:59:36:e3:7b:65:
                    da:08:ce:7f:e8:85:b4:4d:0b:d1:a9:1f:2b:85:f6:
                    30:ed:85:85:0a:a3:30:97:2c:7a:6d:07:80:ec:a9:
                    3f:da:d0:c1:38:0a:e1:d2:ce:04:e9:66:75:59:b5:
                    b4:fa:20:f9:18:6c:da:34:bb:58:19:01:49:3a:19:
                    69:19:cd:3a:57:5d:f3:d1:d1:de:f1:ee:cc:e2:87:
                    6c:f7:48:73:48:e1:65:d0:1b:61:e0:32:80:8a:cf:
                    86:bb:40:0d:f2:1a:ff:20:e0:70:df:96:86:35:08:
                    e2:89:18:ad:5c:9a:f1:f2:f5:59:df:e3:2b:f7:08:
                    9a:e2:e4:24:6b:26:15:49:68:72:9d:ad:3b:d3:81:
                    a3:05:ca:0c:68:02:20:8e:1a:00:fc:55:a3:d3:31:
                    ac:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:35:C0:CA:0D:C0:4D:4E:73:20:EE:8D:14:34:BD:7E:01:DC:3C:09
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:01:58:6f:c0:73:6c:76:c6:77:6d:b9:3f:13:17:19:e6:
         0a:9f:f9:c7:0d:55:08:50:58:f7:e8:af:d9:f1:e8:e6:8c:79:
         cc:8b:55:57:a4:ab:a2:b0:fb:36:95:52:d5:88:21:de:9a:7a:
         2e:4f:3a:d8:2b:99:80:e1:9e:ed:d9:2b:85:26:c3:d1:fa:c6:
         38:f1:73:4b:34:c2:d5:e3:3f:86:81:37:b0:ab:c9:d6:b1:17:
         73:7f:38:47:1a:1a:88:a8:21:11:f2:46:b4:06:49:52:08:4d:
         27:9b:63:fd:aa:0d:ca:a3:0d:87:3d:75:0f:d2:38:1f:69:2a:
         a0:b2:0d:bd:f5:63:65:23:05:ea:56:c3:cc:1d:2d:9d:49:db:
         f7:58:f4:1b:72:1d:65:a7:62:58:9a:9a:8a:be:5c:62:11:d3:
         1e:38:cb:ed:27:65:7b:61:82:ad:a1:f3:6d:0f:90:02:8f:52:
         c0:5e:2a:44:7a:ef:67:0b:18:82:81:5e:9e:7c:75:01:da:75:
         bf:13:fe:46:f6:fc:b0:20:8a:43:9c:01:31:c4:f2:5b:aa:c7:
         f9:cd:5c:59:7c:f3:ac:03:55:2e:f2:64:87:5d:6e:b7:3b:a2:
         c4:b8:76:af:4c:35:07:06:b9:b7:3b:32:90:e0:a7:09:1d:02:
         f3:2a:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:28:33 2025 by rpki-client