This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
File:                     UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft (raw, json)
Hash identifier:          qwnp8ijsebCEnVVu3tRlQaKNyZNpjtaBHPzi6rdCY9E=
Subject key identifier:   3F:96:66:78:98:D5:D0:A3:06:15:EF:FE:84:D0:B0:E2:79:7E:36:44
Authority key identifier: 50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23
Certificate issuer:       /CN=A91FBDDF/serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
Manifest number:          018A
Signing time:             Fri 05 Dec 2025 01:45:32 +0000
Manifest this update:     Fri 05 Dec 2025 01:45:31 +0000
Manifest next update:     Fri 12 Dec 2025 01:45:31 +0000
Files and hashes:         1: UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl (hash: DZHYga7jBWG6hu4/emNHsnlDFk6u7svoONVf7I6VPfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBDDF, serialNumber=503D1BF56B2229B52AA3FF68534699F06FD25023
        Validity
            Not Before: Dec  5 01:45:31 2025 GMT
            Not After : Dec 12 01:45:31 2025 GMT
        Subject: CN=6932393c-0c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:51:de:aa:8b:00:64:43:31:f0:ad:35:b7:
                    d6:d3:7b:1b:cb:c3:a8:2f:72:ca:5c:a8:d2:53:06:
                    55:34:ac:4e:37:1b:7f:ea:b8:8d:66:4a:df:21:be:
                    ea:e0:dc:fa:06:4a:52:57:8d:d4:3d:8e:7c:8b:fc:
                    b8:59:b7:dd:85:8f:f3:5a:51:e4:10:d6:53:a6:d7:
                    99:32:2f:59:3d:52:d7:3d:1a:26:c7:06:0d:53:34:
                    d2:5e:b9:c0:e0:c4:26:0e:a9:c4:c7:77:d2:f6:19:
                    40:08:68:53:5c:a8:cd:d8:3b:08:b5:8a:d6:b4:37:
                    a7:26:78:19:3a:4a:49:be:ed:35:16:46:c4:56:93:
                    b2:7a:93:6b:c4:25:79:5d:88:f3:f1:13:f2:17:57:
                    7f:b5:ae:ac:77:b3:c4:f6:df:74:47:e9:48:d5:50:
                    76:90:cd:39:5a:71:a2:78:c9:6d:f8:13:8d:e2:89:
                    7f:86:c5:29:37:08:5f:08:a9:87:52:60:12:84:00:
                    a4:f9:31:9a:fc:ad:96:07:bb:42:1c:4b:e1:31:03:
                    c8:07:6c:dc:db:04:f8:d8:90:bf:7e:9c:b1:0b:ee:
                    a2:e2:cf:25:4c:09:21:ff:e9:96:e7:8e:32:72:04:
                    7a:a4:32:1c:f9:98:cb:9f:d1:3c:66:51:ab:d6:e6:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:96:66:78:98:D5:D0:A3:06:15:EF:FE:84:D0:B0:E2:79:7E:36:44
            X509v3 Authority Key Identifier:
                keyid:50:3D:1B:F5:6B:22:29:B5:2A:A3:FF:68:53:46:99:F0:6F:D2:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBDDF/475C64BE724511EEAA29EC74C4F9AE02/UD0b9WsiKbUqo_9oU0aZ8G_SUCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:3c:22:2a:eb:4a:b1:ac:dd:e6:e6:5c:18:11:87:1e:fb:
         19:10:37:4c:dc:f9:f7:70:b0:4d:fe:54:6c:6e:22:94:a2:65:
         6e:54:c8:d9:fe:9a:72:60:59:69:d6:0a:f7:ce:0a:50:44:72:
         e8:b6:e0:77:48:96:f4:d9:bb:e9:ea:75:7b:a3:2b:23:09:3a:
         8a:65:a0:d8:d0:8c:34:e7:1f:f5:2d:27:5d:aa:c7:c1:3a:0d:
         1e:e4:a5:35:41:a5:86:df:82:6c:d5:96:20:83:3c:73:12:7f:
         6a:95:45:be:90:a0:cc:88:d3:ed:2b:1c:0b:96:7d:8d:60:0e:
         1e:44:5f:de:cb:aa:19:75:79:a8:a6:58:67:73:1b:02:f8:d3:
         73:b9:cd:8b:56:0a:b6:78:8f:30:1d:bb:b3:a7:59:79:25:ab:
         a1:3e:eb:58:23:86:fa:bd:88:6f:56:a8:2e:fd:ef:07:43:f1:
         9d:37:75:37:65:40:58:4d:42:19:7d:74:d4:bc:61:53:d9:d8:
         da:89:31:85:52:ea:6e:8e:32:41:b3:92:13:7c:a7:c3:91:c0:
         4e:cd:54:63:38:1e:18:30:f9:8f:2c:5b:f0:c2:20:09:a2:de:
         98:75:f7:6e:14:d4:cd:00:73:d0:c5:c6:67:04:cb:ec:4f:b8:
         ef:c6:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:59 2025 by rpki-client