This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
File:                     U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json)
Hash identifier:          JbfBXMEfGzRY9ogqRsfM36gLcIWlmC6K1ODuYyxWq/4=
Subject key identifier:   E0:A5:FF:C0:3E:E5:5C:09:9A:E8:57:47:F2:50:D2:4F:42:08:FF:FE
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       0CC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
Manifest number:          0CB6
Signing time:             Mon 22 Dec 2025 17:52:19 +0000
Manifest this update:     Mon 22 Dec 2025 17:52:18 +0000
Manifest next update:     Mon 29 Dec 2025 17:52:18 +0000
Files and hashes:         1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: 4lB7h+YSP2VrQ/js80r6kLQmLWmw8VTiQ1BfoJ/SX1E=)
                          2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl
                          rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: Dec 22 17:52:18 2025 GMT
            Not After : Dec 29 17:52:18 2025 GMT
        Subject: CN=69498553-ffba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:4b:77:f3:b9:bc:2a:e6:0d:bf:27:0e:af:
                    48:0c:eb:49:3d:dd:07:f8:54:e7:50:d7:bc:cd:e2:
                    97:d0:92:a4:c7:e9:6e:7e:1c:47:4b:aa:2f:b9:de:
                    a6:8f:e3:9f:e7:2e:5f:9a:e3:6f:f9:a6:bc:a8:cd:
                    73:9b:57:90:58:47:20:58:eb:9a:a5:00:7d:69:c4:
                    96:b9:7f:80:1c:66:3a:38:34:a1:fd:8c:c0:25:6a:
                    0a:55:ad:0a:1c:3f:f7:f3:38:b2:d5:9f:c2:28:1d:
                    3e:06:b7:43:3b:60:53:75:f4:22:1d:94:95:72:56:
                    6a:ed:51:1f:c5:48:ff:f9:57:33:94:08:ff:36:e8:
                    15:ad:2e:28:be:94:05:e3:47:6a:fa:49:63:3c:80:
                    1f:d2:f9:05:9b:9f:2e:a8:a9:1e:fa:56:3a:d4:22:
                    c0:6e:2d:be:bb:fd:1d:25:cd:27:5a:2b:df:44:b6:
                    8c:a6:e5:2e:9d:ab:ba:f3:91:53:57:e1:02:fb:f0:
                    ab:21:9e:27:34:78:a7:7c:06:21:51:35:e9:00:1d:
                    d8:34:86:79:33:c8:4e:4a:bf:1f:43:a6:32:28:f1:
                    11:38:f8:a8:28:a4:08:28:97:8c:28:ef:3c:6f:7f:
                    4a:29:f1:1a:20:4e:53:e6:fd:14:10:45:09:45:0b:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:FF:C0:3E:E5:5C:09:9A:E8:57:47:F2:50:D2:4F:42:08:FF:FE
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:67:54:f9:57:9a:34:20:b2:21:fd:4c:1e:5e:8d:e4:98:8e:
         9f:22:17:73:59:7b:2a:37:24:41:f6:0e:15:84:df:a0:20:32:
         66:c9:74:68:98:ab:a9:a5:26:18:79:8f:f9:80:41:fd:86:55:
         25:f4:f4:d4:68:6e:ec:b3:37:ab:0e:ab:eb:19:16:ca:1f:ec:
         0f:22:c8:35:1f:b1:36:e4:af:75:19:09:e4:05:a5:ab:33:ea:
         85:14:5f:6a:5c:da:7e:19:78:45:19:62:a3:5a:f5:1a:6a:ad:
         aa:75:a9:6a:9e:4d:4f:0b:83:cf:4c:58:aa:1f:9d:fd:e9:1c:
         45:bd:c8:79:51:8c:5a:c2:26:7a:63:27:df:45:a9:46:8d:df:
         3c:30:ae:84:cd:d1:45:8e:4c:68:fc:30:65:f9:53:20:bc:b6:
         18:ed:b8:36:24:42:f8:0e:c4:5e:5c:0d:88:4a:c6:fb:48:4e:
         b9:85:ec:bf:ac:a7:ab:b9:29:e5:10:c1:4f:0d:14:df:e4:9d:
         99:02:a6:51:0b:c0:af:d9:3e:2f:4c:45:42:9d:3d:66:d3:d4:
         64:12:fb:5b:27:f6:94:13:78:4e:d8:7a:8b:87:d5:56:3b:6e:
         06:f1:a1:7a:05:21:97:63:ab:23:91:6f:d1:fe:0e:96:ff:5e:
         5f:7a:1d:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2
NUI0REQ4ODUwHhcNMjUxMjIyMTc1MjE4WhcNMjUxMjI5MTc1MjE4WjAYMRYwFAYD
VQQDDA02OTQ5ODU1My1mZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttVLd/O5vCrmDb8nDq9IDOtJPd0H+FTnUNe8zeKX0JKkx+lufhxHS6ovud6m
j+Of5y5fmuNv+aa8qM1zm1eQWEcgWOuapQB9acSWuX+AHGY6ODSh/YzAJWoKVa0K
HD/38ziy1Z/CKB0+BrdDO2BTdfQiHZSVclZq7VEfxUj/+VczlAj/NugVrS4ovpQF
40dq+kljPIAf0vkFm58uqKke+lY61CLAbi2+u/0dJc0nWivfRLaMpuUunau685FT
V+EC+/CrIZ4nNHinfAYhUTXpAB3YNIZ5M8hOSr8fQ6YyKPEROPioKKQIKJeMKO88
b39KKfEaIE5T5v0UEEUJRQvjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCl/8A+
5VwJmuhXR/JQ0k9CCP/+MB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0
NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP
bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDcZ1T5V5o0ILIh/UweXo3kmI6fIhdzWXsqNyRB9g4VhN+gIDJmyXRo
mKuppSYYeY/5gEH9hlUl9PTUaG7sszerDqvrGRbKH+wPIsg1H7E25K91GQnkBaWr
M+qFFF9qXNp+GXhFGWKjWvUaaq2qdalqnk1PC4PPTFiqH5396RxFvch5UYxawiZ6
YyffRalGjd88MK6EzdFFjkxo/DBl+VMgvLYY7bg2JEL4DsReXA2ISsb7SE65hey/
rKeruSnlEMFPDRTf5J2ZAqZRC8Cv2T4vTEVCnT1m09RkEvtbJ/aUE3hO2HqLh9VW
O24G8aF6BSGXY6sjkW/R/g6W/15feh2y
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:47 2025 by rpki-client