This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File:                     ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier:          o3vsHnIBIx7qxjouD0VKyLPK2+18vM3Bl1eeQfDODB8=
Subject key identifier:   3E:06:57:2B:FE:1A:EB:0A:21:E6:09:F9:1C:2F:2F:53:F7:87:F9:23
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer:       /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number:          04
Signing time:             Mon 15 Dec 2025 10:25:20 +0000
Manifest this update:     Mon 15 Dec 2025 10:25:19 +0000
Manifest next update:     Mon 22 Dec 2025 10:25:19 +0000
Files and hashes:         1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: EA+ezlQ0pGDrGE+uB94ak7PS8efL4hzZmscfLiPViRg=)
                          2: 5BCC0548D99B11F09EC1D6B265D3641D.roa (hash: ns7eTHStxfQNLhyWTvt0z1m0cdRciLzTPm7YQhUzhwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
                          rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 10:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
        Validity
            Not Before: Dec 15 10:25:19 2025 GMT
            Not After : Dec 22 10:25:19 2025 GMT
        Subject: CN=693fe20f-3f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:91:dd:53:4b:e8:46:d7:ad:6c:90:89:d9:
                    5f:12:13:c6:9a:3d:b2:bc:57:99:6c:59:20:65:92:
                    02:9e:39:03:f0:df:00:b5:d9:ba:63:40:56:85:7a:
                    d5:71:48:37:a3:57:17:25:b4:ef:37:54:3b:96:3e:
                    da:58:ec:89:b2:21:8c:97:0d:81:ed:d9:e8:91:3d:
                    c5:c4:85:a9:97:c9:68:ee:39:fc:00:49:cb:72:6d:
                    37:8e:1d:2f:dc:52:cc:b3:c0:26:f2:1f:a3:16:47:
                    f6:f1:df:80:5a:6c:09:8c:4a:5c:4a:ac:14:ea:5f:
                    53:ab:77:b8:c8:01:64:82:00:3d:a5:ad:ca:8c:f3:
                    f3:a0:98:51:ff:76:69:75:3c:81:4e:62:80:a5:a3:
                    a1:72:4e:ac:12:fb:84:63:e1:fa:d6:16:7e:71:8b:
                    4d:d6:77:21:59:4c:f5:cb:da:5f:c4:e8:1c:c2:2b:
                    b5:89:21:f5:8e:75:85:bd:e6:55:55:bb:25:0b:5b:
                    4e:43:42:6b:9b:38:8a:5e:8a:6c:70:48:54:37:4f:
                    ac:34:0d:13:0d:b3:5a:0a:de:d1:ba:fb:86:a9:7f:
                    90:8d:16:2f:2d:fb:9f:a1:9f:92:c1:63:86:ef:12:
                    08:d6:82:f3:85:1f:4b:07:f0:c3:0c:9b:c3:2a:d4:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:06:57:2B:FE:1A:EB:0A:21:E6:09:F9:1C:2F:2F:53:F7:87:F9:23
            X509v3 Authority Key Identifier:
                keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ab:67:9e:6e:53:2c:13:e4:c6:63:80:4b:c5:47:dd:fe:1b:
         9a:25:61:e4:d3:4e:8b:5c:a8:ac:0c:13:4a:1d:57:8d:3e:d6:
         bf:15:8e:a7:b1:6d:9a:b8:34:f1:34:64:e1:51:29:54:80:68:
         b0:ca:31:8e:bc:c6:2b:c7:2c:f9:f7:75:54:6a:a0:b5:67:68:
         ef:0d:60:1c:ec:ef:4d:c0:99:fa:13:4b:93:f4:6d:93:7c:fe:
         ca:2b:7f:e0:d7:fe:f4:56:bf:9c:f7:8f:c4:c3:b3:93:08:08:
         38:61:84:95:b9:af:81:ea:78:96:2d:6c:4a:a2:19:b9:85:fa:
         c3:fc:d2:6e:f7:95:fc:2f:b4:71:ee:64:c0:e8:ee:08:39:20:
         3b:51:64:58:30:aa:a7:ea:ff:86:35:df:0a:8e:7e:b1:fe:f2:
         47:f3:ed:8b:8c:e4:bd:cb:14:09:dc:66:76:6a:3a:57:1f:0f:
         21:96:2d:82:ab:84:cc:2a:10:f8:38:7d:60:15:42:dd:37:b0:
         1c:96:79:df:fa:f4:76:40:bd:10:77:2f:79:31:3a:87:65:57:
         89:a4:ce:4a:96:f7:e5:b3:74:17:c2:b9:17:f8:33:68:37:57:
         1a:2d:bc:66:27:25:b6:43:c2:59:aa:1c:b8:f6:92:e6:97:7d:
         45:30:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 10:04:34 2025 by rpki-client