This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
File:                     uXp_AVpzYHTfOERcmAdDeCGdKZU.mft (raw, json)
Hash identifier:          kv4HH6eaJ4QQziJSbQt+K1gd+J8NZInhmjbYZnQaHRk=
Subject key identifier:   FA:C7:9E:97:93:0D:5F:0E:C2:69:81:8C:5C:AD:AF:50:E2:0E:C7:D1
Authority key identifier: B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95
Certificate issuer:       /CN=A91320D4/serialNumber=B97A7F015A736074DF38445C98074378219D2995
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
Manifest number:          0169
Signing time:             Tue 23 Dec 2025 03:00:56 +0000
Manifest this update:     Tue 23 Dec 2025 03:00:56 +0000
Manifest next update:     Tue 30 Dec 2025 03:00:56 +0000
Files and hashes:         1: uXp_AVpzYHTfOERcmAdDeCGdKZU.crl (hash: RGM1jPreUVyZKwrkS1s72Sjbq+F6ibgAtsIWTa+VGMo=)
                          2: BAB65090BD7811EEB634A117C4F9AE02.roa (hash: jy0zSp/Q1wYkZKRUPG13nYx6so6uOIrlxy79qp8e8+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl
                          rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91320D4, serialNumber=B97A7F015A736074DF38445C98074378219D2995
        Validity
            Not Before: Dec 23 03:00:56 2025 GMT
            Not After : Dec 30 03:00:56 2025 GMT
        Subject: CN=694a05e8-54e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:90:c1:d7:28:c6:76:a1:0e:2b:0f:25:89:
                    7e:14:4f:0b:08:eb:eb:30:fb:1d:27:70:de:14:0c:
                    c2:48:6a:af:da:fb:47:28:de:bd:5b:ce:d0:a9:83:
                    ff:af:ef:a2:41:de:90:ed:b7:79:2a:ac:67:4a:d2:
                    b5:02:b8:16:06:2a:0a:88:12:64:34:b2:80:54:ca:
                    7e:ca:07:a1:9e:1e:e8:65:e4:33:e5:3f:c3:54:74:
                    ff:3a:5c:88:d8:4b:4e:86:2e:39:74:cd:22:8e:18:
                    aa:30:14:0a:ad:b0:bf:f4:c5:4c:5f:6e:a3:8e:8a:
                    a2:d2:01:87:2f:0a:a6:ce:c9:46:10:f0:17:85:2b:
                    13:c5:ba:e6:62:c8:33:fe:82:3a:08:ab:b3:26:41:
                    50:51:b8:09:0a:15:f8:c4:b7:89:9d:a3:5a:5a:ab:
                    7f:c6:a3:29:24:32:ee:3c:7f:f8:f5:30:40:28:93:
                    6c:36:8f:bf:8d:af:88:cd:e6:30:d0:6f:6a:2e:49:
                    e3:0f:51:36:11:84:12:23:2b:4b:e7:0a:2e:14:77:
                    35:a9:d0:5a:f9:7a:36:a1:97:ef:c0:8f:50:8b:dc:
                    33:d6:1e:9a:23:2f:c2:b6:1f:80:2d:40:fd:90:67:
                    95:4a:8b:04:35:aa:83:4c:ed:0e:3b:92:37:d4:45:
                    dc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C7:9E:97:93:0D:5F:0E:C2:69:81:8C:5C:AD:AF:50:E2:0E:C7:D1
            X509v3 Authority Key Identifier:
                keyid:B9:7A:7F:01:5A:73:60:74:DF:38:44:5C:98:07:43:78:21:9D:29:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXp_AVpzYHTfOERcmAdDeCGdKZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91320D4/0E3F0C66BC1611EEB9059C86C4F9AE02/uXp_AVpzYHTfOERcmAdDeCGdKZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:71:44:25:37:d2:8c:92:17:d7:33:ea:54:79:7b:0e:c5:a9:
         6f:a2:af:82:6b:25:44:70:28:51:bf:37:6a:8e:e7:c4:90:22:
         36:f4:be:00:c0:9c:d3:71:82:e9:9c:b0:d6:5b:3b:ed:de:7b:
         b5:da:3f:05:c8:27:21:87:f0:cc:77:9c:97:07:19:63:3e:44:
         68:73:05:3f:57:dc:b1:e5:33:d1:4c:4b:44:26:61:c5:7e:6b:
         46:2a:ae:b8:f7:2d:5f:ba:b6:66:6f:bb:e4:9c:8b:a0:aa:5b:
         5b:7d:fa:1c:58:81:8d:16:87:e9:f9:c8:1e:e5:f7:6f:bf:b6:
         94:43:18:96:63:bc:a5:3d:11:7f:a7:be:75:47:37:05:25:fa:
         a0:b2:82:b1:4f:89:92:41:f4:6b:c8:72:4e:49:ec:ac:2f:4d:
         f0:78:3e:1e:ba:5a:63:e1:3e:92:d2:0d:54:f7:20:94:2a:b9:
         cf:ea:dd:0c:0a:a1:e2:73:a8:40:bb:ae:0e:38:2b:63:89:1a:
         dc:01:1c:4c:2c:81:fb:1d:aa:04:0a:ba:d8:2f:ec:06:e8:dc:
         1e:9a:57:e7:9f:86:87:d4:ca:14:f2:6c:bd:71:15:7e:df:bb:
         7d:a5:1a:ca:14:6c:55:71:76:51:b6:fb:f5:dc:07:81:57:7a:
         e8:6e:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:38 2025 by rpki-client