This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          U3ar01zT/s3j7hjmqNwSxPiYvD1pWQEZQtpbxFBK+D0=
Subject key identifier:   62:37:CC:13:84:30:73:96:A1:36:39:FE:79:AD:09:7D:A6:71:B2:F2
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       094D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          094D
Signing time:             Thu 18 Dec 2025 19:42:45 +0000
Manifest this update:     Thu 18 Dec 2025 19:42:45 +0000
Manifest next update:     Thu 25 Dec 2025 19:42:45 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: K/wEqLN6KUmIaPBQrzvraYiSdjP68lA3kg/YPR0bNP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Dec 18 19:42:45 2025 GMT
            Not After : Dec 25 19:42:45 2025 GMT
        Subject: CN=69445935-eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:2e:64:17:e6:80:fc:00:77:49:71:4e:4d:
                    78:07:35:b1:86:44:3d:81:b3:00:62:22:80:61:68:
                    97:48:6a:8b:f4:df:1b:e2:94:4a:c2:db:78:fa:b6:
                    11:21:ea:54:0f:be:80:24:87:b7:d8:86:bf:fe:3e:
                    85:03:1c:07:89:18:ad:cd:2e:e9:28:e0:dd:96:28:
                    d0:f7:fe:2e:82:72:63:ed:d0:2f:a2:8d:5b:75:e4:
                    53:03:87:37:ac:79:25:9a:0f:87:e8:8c:ff:b4:54:
                    bb:b7:01:a9:56:76:2d:08:18:70:c6:e9:fb:60:12:
                    9b:18:9c:a2:50:d3:42:9f:29:ec:3c:07:73:b9:da:
                    85:06:52:4f:b9:a2:48:b7:a0:aa:b8:64:dc:51:6a:
                    3a:c2:8e:27:09:a5:8c:d5:47:84:88:22:95:db:fa:
                    4a:22:71:6e:34:1b:28:be:97:17:47:9b:c0:31:62:
                    b1:1b:73:c5:5f:4e:c5:40:65:5d:06:2a:22:90:d1:
                    5e:e4:ce:ff:17:b0:71:a2:bd:03:d3:25:f0:e9:e6:
                    9d:c9:32:0c:4b:72:6c:e4:c2:ca:0f:0e:31:fc:2d:
                    26:0e:33:56:bb:9c:77:78:68:4f:5d:02:ea:85:0a:
                    c1:d2:cd:12:f3:fe:10:8b:fc:1f:f3:fe:19:49:d0:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:CC:13:84:30:73:96:A1:36:39:FE:79:AD:09:7D:A6:71:B2:F2
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:f9:d5:18:73:be:33:90:40:f9:dd:b7:96:ee:f2:a0:53:
         83:f1:8c:37:26:12:d7:c4:22:70:c7:87:6b:8e:cb:d1:8c:09:
         b0:99:a9:36:88:7d:e5:d9:d2:23:7b:57:59:7b:a0:5d:86:7c:
         79:27:96:a7:90:be:95:04:dd:37:67:b2:5e:be:89:bd:65:7b:
         d4:42:76:c3:ea:a7:8f:74:8f:70:f9:46:34:bd:9c:5d:8f:37:
         55:dc:70:06:0c:86:79:f4:cb:41:9b:e8:10:64:64:19:78:ea:
         0a:f9:48:60:85:e8:e4:d9:3f:68:83:c2:bb:71:cb:88:de:21:
         aa:6d:a8:4b:03:44:fc:0c:8b:4a:36:cc:dc:1b:e7:34:e7:70:
         32:89:41:5d:be:2c:4e:5f:f6:13:31:04:53:9b:2e:45:16:ef:
         81:1d:e2:de:f0:80:94:b8:46:bb:5c:03:be:98:f2:7a:01:cc:
         19:32:9b:81:4f:81:ef:0b:ce:48:41:a2:b0:3c:77:7f:e5:27:
         23:2d:22:65:e1:46:89:ef:a1:1b:e4:98:4e:d3:09:57:bf:c7:
         50:7f:85:83:0c:c5:cd:0d:43:d3:67:b6:87:74:da:6b:2f:e5:
         50:4c:ec:56:c6:e2:3c:e0:fd:1b:14:d1:22:8a:1f:b0:03:4d:
         54:36:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:50:53 2025 by rpki-client