This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          /DnLEsWrc1lPvrEyMbWiNdxEFxkG8GvOiRVDAyBRxGo=
Subject key identifier:   7D:65:9A:FE:00:4F:87:7C:C9:F1:03:D0:7E:12:3A:EE:2A:59:FF:E6
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       0945
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          0945
Signing time:             Tue 02 Dec 2025 19:35:48 +0000
Manifest this update:     Tue 02 Dec 2025 19:35:47 +0000
Manifest next update:     Tue 09 Dec 2025 19:35:47 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: VgeH4GEzQhi+u5xfJm6p84NIXkcvyzcqhm+Tun/owLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 19:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373 (0x945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: Dec  2 19:35:47 2025 GMT
            Not After : Dec  9 19:35:47 2025 GMT
        Subject: CN=692f3f93-6c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:83:b3:eb:43:34:35:13:59:ce:c2:ba:7c:
                    d8:43:6d:46:92:d9:10:2a:2d:c3:65:5f:e5:ad:5f:
                    55:55:ae:09:13:be:cd:cc:0e:55:ed:c5:09:f4:0f:
                    46:e6:b6:ea:98:8b:bb:d2:b5:f9:73:35:33:24:40:
                    67:36:6d:e8:e9:fe:dc:c1:c2:e6:16:ca:87:cd:cc:
                    d9:6b:7f:64:41:92:0e:18:d1:48:d4:e7:ad:48:35:
                    eb:0c:9b:b7:73:d9:91:bf:a0:47:b6:84:67:ac:8a:
                    ff:48:3a:11:da:3a:63:ca:28:9c:ba:ea:ee:d7:7e:
                    60:62:98:8a:c8:95:66:ef:9a:8a:8c:df:ac:01:88:
                    ca:bf:eb:f8:41:e5:5f:60:81:92:6a:fb:df:ec:e5:
                    db:34:a4:80:6b:f9:b2:57:d5:e8:52:10:d7:95:17:
                    84:cd:76:9e:27:14:b8:7b:ae:56:89:8e:82:7d:8e:
                    5c:7e:24:0d:cc:ff:ac:61:3c:0c:62:ac:19:ed:98:
                    ab:3c:88:c0:9b:4b:71:c9:05:22:b6:45:34:db:64:
                    10:a5:80:f4:54:43:a7:6b:7e:84:ff:54:84:a3:6d:
                    3f:9a:d3:83:47:05:1a:d4:0f:6a:80:3d:1e:cf:3c:
                    40:5b:01:6a:f7:10:ca:3b:71:5a:5f:b5:1e:72:10:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:65:9A:FE:00:4F:87:7C:C9:F1:03:D0:7E:12:3A:EE:2A:59:FF:E6
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:e5:ae:23:a1:67:7d:fe:6e:96:a3:87:d9:23:8c:12:e1:
         93:b0:24:39:41:cf:33:24:4b:f7:42:64:b5:d6:35:55:b2:e1:
         c4:c3:9f:e6:9a:88:03:10:16:96:69:4d:66:e6:20:16:fd:44:
         ee:7e:b6:f6:3f:e2:5d:94:ec:d0:15:08:c1:90:9e:4b:61:a4:
         5c:e2:a0:eb:50:38:29:2c:5b:17:3b:05:e4:fd:4c:fc:1d:64:
         b6:00:9a:0a:4f:f0:c0:9c:9e:b4:18:9a:55:1a:b6:37:56:84:
         f0:15:bd:60:f4:51:30:3f:d4:a8:8a:da:6f:4f:e9:8b:d8:7c:
         13:1c:0a:e5:62:0c:5e:9f:27:34:e1:df:20:01:17:89:10:91:
         61:fd:2c:df:ee:e2:65:f3:a2:a2:a5:41:e1:a1:23:ad:05:12:
         0d:b8:93:ac:f2:6b:02:b0:a1:7a:55:6c:84:19:ee:b5:88:24:
         5b:3f:7d:93:81:50:84:28:67:bf:b2:e0:ab:30:f3:e5:10:a3:
         e6:e8:9e:38:f9:30:9b:bb:6d:9a:ca:eb:6d:61:b5:d4:79:29:
         69:64:d9:87:64:be:54:01:3d:1a:4e:e5:3b:53:36:aa:e3:4b:
         13:2f:4d:dd:09:1c:f5:85:c4:f3:3d:9f:08:70:1a:df:c7:af:
         eb:7d:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:49 2025 by rpki-client