This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
File:                     XUKGguien-2WK-nEQys0xF4uCck.mft (raw, json)
Hash identifier:          KQKoBaiRuFF7iWRS+M/vbW8+I9yKLDzLb4c3J58fKxg=
Subject key identifier:   AF:2C:7A:CF:C0:94:58:5D:24:FF:25:B0:8E:A3:3C:F5:C2:78:BA:D0
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Certificate issuer:       /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
Manifest number:          0C5E
Signing time:             Thu 18 Dec 2025 18:24:07 +0000
Manifest this update:     Thu 18 Dec 2025 18:24:06 +0000
Manifest next update:     Thu 25 Dec 2025 18:24:06 +0000
Files and hashes:         1: XUKGguien-2WK-nEQys0xF4uCck.crl (hash: gJuvJSDF0vCA5UuOvUzRKAsqLhIZZyCXFnXyO0BE7do=)
                          2: 8C1F014E911411EF84279055C4F9AE02.roa (hash: V8nQ6joTyZ1jRPqY/KVj5wtQBsQ9D1RCr3b1ne/Hdes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
                          rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
        Validity
            Not Before: Dec 18 18:24:06 2025 GMT
            Not After : Dec 25 18:24:06 2025 GMT
        Subject: CN=694446c7-9b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:58:fa:4f:f4:ba:02:0d:36:c4:2e:6c:11:
                    d3:87:1e:49:41:58:8d:e2:57:b6:34:15:f4:55:ac:
                    90:24:4b:b5:88:34:d9:f6:75:50:c4:09:22:99:0c:
                    3f:76:34:ea:80:f0:72:cc:08:1b:27:6a:db:80:82:
                    b8:16:c6:64:90:44:bb:11:d6:2a:33:82:6e:ed:b8:
                    19:0d:2b:2f:38:83:52:f3:fd:c0:b0:4c:58:73:30:
                    c4:e7:d1:83:48:e9:fe:86:98:6d:a5:c9:9e:b8:22:
                    fb:7e:d9:4f:da:de:a7:a8:08:bc:73:96:55:b3:4d:
                    a5:51:3e:41:90:c0:e4:89:58:4c:5f:25:8b:73:63:
                    3c:ea:eb:7e:4f:c0:66:b6:52:78:46:dd:52:6d:2d:
                    33:25:7c:78:01:e8:f9:60:11:79:3e:80:6c:d3:b8:
                    05:07:27:01:e0:a3:63:72:dd:74:cc:c9:4f:e9:33:
                    81:4d:7b:40:a7:88:fb:08:18:1f:2c:94:36:72:5f:
                    42:64:6f:aa:7b:91:78:63:f9:90:73:5c:a4:c6:90:
                    ff:cf:cd:7d:b1:96:05:59:ea:51:e5:8d:7c:4b:fd:
                    bf:0c:45:25:ef:e5:e5:01:9a:80:eb:f2:f8:66:90:
                    5b:aa:f0:dc:fa:0a:da:98:ed:93:d9:4e:4a:df:93:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2C:7A:CF:C0:94:58:5D:24:FF:25:B0:8E:A3:3C:F5:C2:78:BA:D0
            X509v3 Authority Key Identifier:
                keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c0:85:ac:51:8c:77:93:c2:74:1d:5f:04:40:ed:c6:55:e3:
         dd:67:98:e8:31:ac:d8:65:80:c7:f5:03:a1:f4:70:c0:17:c8:
         e8:8b:4b:34:d2:44:00:bf:13:c0:73:f2:70:ee:3a:8a:3c:9b:
         39:5a:d0:d2:8d:15:c9:91:5f:bb:4c:08:9a:23:fa:63:31:ff:
         58:02:86:e4:75:8b:c4:88:59:75:8c:d5:4b:ef:3b:1b:5b:87:
         9b:63:32:3a:64:a5:51:82:5c:9b:e3:a8:23:34:c1:24:f8:2e:
         4b:cb:00:dc:78:ae:6f:2e:89:48:bf:d8:67:21:31:02:6f:8b:
         10:2d:11:f4:a3:eb:13:0f:b6:b7:c3:e3:5e:fe:fc:06:eb:3e:
         4d:03:ed:78:05:03:83:66:ce:68:34:0a:c9:88:f8:67:d9:fd:
         39:a5:03:49:c8:fc:08:0b:5e:c9:e1:48:d2:4a:6f:e6:5d:e2:
         8e:77:20:db:06:fc:f4:a6:20:46:76:b4:37:8d:4f:dd:95:ac:
         0e:f9:f2:ca:ab:3d:40:d9:4a:a8:91:70:e9:e1:3b:bc:03:b8:
         a0:58:bd:d2:3a:a2:d1:75:29:de:b5:66:82:c0:7a:06:1c:3c:
         d0:f4:80:bf:1f:f8:b6:a4:39:4e:a5:db:35:84:f8:82:c4:2d:
         e7:35:f8:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0
NUUyRTA5QzkwHhcNMjUxMjE4MTgyNDA2WhcNMjUxMjI1MTgyNDA2WjAYMRYwFAYD
VQQDDA02OTQ0NDZjNy05YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JJY+k/0ugINNsQubBHThx5JQViN4le2NBX0VayQJEu1iDTZ9nVQxAkimQw/
djTqgPByzAgbJ2rbgIK4FsZkkES7EdYqM4Ju7bgZDSsvOINS8/3AsExYczDE59GD
SOn+hphtpcmeuCL7ftlP2t6nqAi8c5ZVs02lUT5BkMDkiVhMXyWLc2M86ut+T8Bm
tlJ4Rt1SbS0zJXx4Aej5YBF5PoBs07gFBycB4KNjct10zMlP6TOBTXtAp4j7CBgf
LJQ2cl9CZG+qe5F4Y/mQc1ykxpD/z819sZYFWepR5Y18S/2/DEUl7+XlAZqA6/L4
ZpBbqvDc+gramO2T2U5K35MV8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8ses/A
lFhdJP8lsI6jPPXCeLrQMB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC
M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjZERS84N0FBRTc0QTFCM0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4t
MldLLW5FUXlzMHhGNHVDY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2wIWsUYx3k8J0HV8EQO3GVePdZ5joMazYZYDH9QOh9HDAF8joi0s0
0kQAvxPAc/Jw7jqKPJs5WtDSjRXJkV+7TAiaI/pjMf9YAobkdYvEiFl1jNVL7zsb
W4ebYzI6ZKVRglyb46gjNMEk+C5LywDceK5vLolIv9hnITECb4sQLRH0o+sTD7a3
w+Ne/vwG6z5NA+14BQODZs5oNArJiPhn2f05pQNJyPwIC17J4UjSSm/mXeKOdyDb
Bvz0piBGdrQ3jU/dlawO+fLKqz1A2UqokXDp4Tu8A7igWL3SOqLRdSnetWaCwHoG
HDzQ9IC/H/i2pDlOpds1hPiCxC3nNfhX
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:19:17 2025 by rpki-client