This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
File:                     Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json)
Hash identifier:          5PYnIOiGOT9O7eALOPPTcxS1JmXSV8Y2nMNwfr2E9ec=
Subject key identifier:   58:4B:F8:FF:9F:88:F9:AA:53:61:09:3F:E7:4D:D4:78:F0:1E:92:CA
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Certificate issuer:       /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
Manifest number:          94
Signing time:             Tue 23 Dec 2025 05:24:21 +0000
Manifest this update:     Tue 23 Dec 2025 05:24:21 +0000
Manifest next update:     Tue 30 Dec 2025 05:24:21 +0000
Files and hashes:         1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: wY1ogXn2vNA0gSWpyTHM/xF/sAOD4xzDls5h1dMVN3A=)
                          2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: EqPvfZWybFxDEzuqUOMumy7hGqKdVROQozF26OVvW/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
                          rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
        Validity
            Not Before: Dec 23 05:24:21 2025 GMT
            Not After : Dec 30 05:24:21 2025 GMT
        Subject: CN=694a2785-eb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:b9:ba:18:02:17:fe:3e:a3:f1:0d:61:36:
                    be:ac:f7:9d:79:c1:0a:17:87:f5:b5:82:4d:7f:59:
                    fe:d3:52:4c:f8:fb:1d:be:29:d3:14:c8:83:f5:e4:
                    09:51:b0:85:dc:29:7c:8a:95:61:79:d2:45:e5:79:
                    11:b4:fd:16:aa:96:cc:c5:54:ef:13:0a:74:67:9f:
                    a8:8c:dc:95:63:be:d5:0e:3c:36:80:87:dc:9b:5b:
                    c2:6c:24:5e:db:1c:e1:59:0b:4e:e8:04:8f:79:7e:
                    db:03:c4:45:ce:f7:1b:9a:cc:78:7f:4a:ab:30:f9:
                    b0:ae:d4:fc:b5:65:12:02:71:91:9b:d2:bc:60:c5:
                    71:42:30:e2:29:92:f7:a5:dc:6d:1c:13:86:b4:ed:
                    a0:ee:7c:3f:31:f1:d2:5d:63:75:7d:c9:3f:da:9c:
                    5f:4b:ea:f1:69:a1:66:59:a3:6d:f4:67:78:f8:8c:
                    37:ea:27:60:5c:89:12:12:ac:3c:6f:ab:6f:99:f2:
                    08:cc:d9:54:ab:10:0c:66:b4:cb:11:da:74:a8:be:
                    a0:86:1a:bd:88:ba:a8:cd:36:e9:92:f2:d3:05:40:
                    07:e4:27:48:97:5c:76:04:ac:26:e6:4a:9f:2b:5f:
                    75:fc:3e:9a:53:9c:1e:cc:d5:02:d1:7f:ce:82:bf:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:F8:FF:9F:88:F9:AA:53:61:09:3F:E7:4D:D4:78:F0:1E:92:CA
            X509v3 Authority Key Identifier:
                keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:50:00:cc:cc:02:01:19:a8:b9:eb:b5:23:2d:6d:ed:54:
         b0:3e:1a:8f:e8:ce:0d:cf:f7:2d:b9:ff:69:7a:d2:b6:f7:b2:
         76:70:88:f5:49:8e:a9:cc:27:ce:54:06:69:06:4c:b4:96:ad:
         85:c8:40:89:c9:02:b1:bb:98:94:a5:c7:2e:85:69:c0:81:1c:
         69:c5:29:f2:08:53:bf:a7:47:8e:96:0f:2c:d9:eb:75:0c:cb:
         06:1f:fc:2f:83:79:c2:4a:29:5a:6d:50:f8:b8:92:ca:2b:7d:
         96:ee:f4:c3:8f:79:ed:8a:31:d7:09:5f:d5:12:ab:5b:07:d0:
         2b:67:d3:fc:60:2d:4c:1e:53:3e:b5:0d:ec:db:52:56:3c:a8:
         bc:1c:67:05:65:5f:74:1a:a9:06:e2:c9:0d:48:e1:83:70:2b:
         9d:87:9d:54:a8:e1:9d:fd:65:77:85:60:39:39:61:a9:15:70:
         36:5a:da:70:3d:22:40:3d:a5:ce:f3:73:2d:70:fa:8c:cc:a4:
         d5:24:03:12:70:d5:da:4f:a1:e4:82:50:1f:fb:7b:6f:4d:e3:
         13:f0:02:2b:39:35:08:31:d9:90:0d:f3:d6:3b:76:0c:c7:cb:
         66:d9:c4:50:33:d9:09:40:18:4f:94:55:58:a7:60:47:e5:7c:
         74:6e:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:40:34 2025 by rpki-client