This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
File:                     UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json)
Hash identifier:          +w8frDKUTSTu2FjcdKUOgDlrnkrc0uvNKN+t7zNj0fc=
Subject key identifier:   25:A9:D8:2F:C6:27:92:E6:90:3B:4D:51:F5:6A:3B:98:F1:EE:42:FC
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Certificate issuer:       /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
Manifest number:          59
Signing time:             Wed 03 Dec 2025 05:24:05 +0000
Manifest this update:     Wed 03 Dec 2025 05:24:04 +0000
Manifest next update:     Wed 10 Dec 2025 05:24:04 +0000
Files and hashes:         1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: 76ClhKD5fy/r1AsOfLJp9xL6dkqWX8zKdYDFyyfNgKc=)
                          2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
        Validity
            Not Before: Dec  3 05:24:04 2025 GMT
            Not After : Dec 10 05:24:04 2025 GMT
        Subject: CN=692fc974-6072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:31:f7:fa:e2:b4:46:83:78:9c:8c:e9:97:
                    07:03:b3:fb:82:3b:74:c3:6a:02:db:db:ad:af:81:
                    85:34:61:51:70:81:4f:3b:f5:7c:56:85:89:ff:f2:
                    a7:d5:00:35:c2:d2:c7:fa:54:4c:38:13:b4:04:57:
                    59:0f:eb:19:1f:df:3d:92:b3:12:67:2f:43:3f:01:
                    5d:d6:3b:86:d8:d3:6e:0b:1b:ca:c0:48:19:ff:78:
                    d5:a1:1c:45:68:ff:21:76:08:b0:0b:6f:de:bc:ec:
                    cf:3d:26:31:84:31:7a:a9:20:f1:9b:fe:c9:db:b9:
                    7d:38:54:58:3a:0c:71:f0:28:84:93:46:6a:f5:cc:
                    5b:d5:68:22:83:14:ca:ec:b1:f5:4f:c7:47:30:c9:
                    7e:19:75:81:27:b5:a5:9b:66:af:db:00:e8:08:b9:
                    e2:27:63:2f:51:02:57:55:6d:49:1c:b4:e7:b5:5a:
                    4b:06:74:27:89:25:25:02:51:28:00:c2:52:3a:f5:
                    08:40:dc:d7:90:ec:20:42:1f:53:ee:01:78:0f:b9:
                    0c:5c:8c:30:3d:f6:be:3d:e2:58:24:ae:10:c2:d0:
                    39:05:b9:12:27:6c:4a:4e:33:de:3a:85:10:7e:44:
                    d8:8b:ee:59:e1:ba:54:cc:4f:59:8e:3b:4f:10:d0:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A9:D8:2F:C6:27:92:E6:90:3B:4D:51:F5:6A:3B:98:F1:EE:42:FC
            X509v3 Authority Key Identifier:
                keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:17:49:e2:18:fa:3e:f4:0d:67:8a:f5:2e:da:1d:72:b0:
         01:c2:6f:e0:eb:be:da:4b:81:2e:c1:09:7c:df:f4:8f:95:b6:
         b8:99:b6:5b:df:10:cb:89:24:a3:87:60:e3:fb:eb:ab:28:15:
         fd:ef:d5:9c:24:cd:47:f7:97:5f:5d:f1:36:78:a1:5d:ef:8f:
         c0:c2:88:5d:b1:b9:8b:b2:1f:2f:49:cd:f4:aa:de:0d:15:05:
         ec:47:21:bc:cb:7f:cf:a5:50:d4:ae:49:38:24:cf:9d:6f:89:
         99:73:48:f1:e2:24:6d:90:1d:77:c5:5b:40:d2:ff:7b:7c:94:
         60:77:a9:fd:8c:29:32:80:c3:d3:3f:06:07:75:49:d1:92:70:
         6b:fb:1f:3d:e9:68:9a:75:56:92:bb:9c:d8:de:b6:03:55:83:
         8e:10:57:b3:10:20:f2:33:b6:ae:09:e8:a6:f5:0b:5a:9f:24:
         97:97:58:1d:e2:29:fa:25:c9:44:f4:3b:22:33:40:c3:72:eb:
         c2:70:dd:14:13:d1:4e:c0:bb:d5:67:b8:ff:ed:05:d7:f3:78:
         bb:5c:8d:5b:4a:f4:37:d6:4f:f8:dc:83:f3:f5:89:e9:2e:76:
         bd:b1:a9:99:4c:48:6f:92:38:e1:b3:53:f7:5b:b7:00:cb:03:
         f6:31:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:26 2025 by rpki-client