This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
File:                     uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft (raw, json)
Hash identifier:          Vx3RUjLRohJgCxoPbgpqcEsFGLb/8W6RUFmfMmwZ0bA=
Subject key identifier:   44:EE:0D:FA:16:EE:70:ED:73:58:BE:4B:DF:5E:63:EC:EA:72:31:80
Authority key identifier: B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25
Certificate issuer:       /CN=A917068E/serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
Certificate serial:       06CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
Manifest number:          06C3
Signing time:             Thu 18 Dec 2025 21:34:43 +0000
Manifest this update:     Thu 18 Dec 2025 21:34:43 +0000
Manifest next update:     Thu 25 Dec 2025 21:34:43 +0000
Files and hashes:         1: uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl (hash: R6r8cx4UV41LBE7Wf2pUAu7d6CgRbEpY6daapr/BBTo=)
                          2: 8889F4E484A711EBB701E773C4F9AE02.roa (hash: lWZRobhtO0oFUd+vRpiCuxRaZUL791izmBtb3cII0fo=)
                          3: 7464EB1E876411EE8971C221C4F9AE02.roa (hash: zpTvJznQ+5mTsWYuBwFqmhL2aTwH3SE1aCKMAY/WGXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl
                          rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917068E, serialNumber=B8F8C3626DD06162E67E25F59A9A81FAE4720A25
        Validity
            Not Before: Dec 18 21:34:43 2025 GMT
            Not After : Dec 25 21:34:43 2025 GMT
        Subject: CN=69447373-de5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:bb:31:a9:09:4c:61:e1:ff:77:a1:84:04:
                    6c:5f:b9:d1:e5:c8:df:34:fa:62:d3:8b:21:ec:6b:
                    99:60:92:06:e2:b4:c0:5f:d2:3d:7a:46:65:54:b0:
                    33:d7:bc:0d:e8:af:1c:bd:b9:c1:2a:da:36:ea:ca:
                    b0:61:76:86:be:db:dc:f1:77:59:b8:57:e6:66:8d:
                    9c:99:56:60:de:1e:40:e5:6e:05:6f:65:5f:19:ea:
                    6b:57:e2:e4:b3:03:94:9b:c0:7f:2d:8d:a4:ae:67:
                    75:e5:09:11:ec:40:d9:aa:d3:23:46:59:06:f3:35:
                    75:f3:7d:36:02:b2:d2:10:68:f1:ea:1c:bc:31:b7:
                    69:b1:8e:0a:58:ba:8d:d5:e1:c9:76:f0:5e:cd:7b:
                    d1:ed:13:db:77:7c:49:6b:fc:89:dd:b2:d8:07:aa:
                    fd:16:93:5c:53:06:05:3a:37:7c:17:ec:4e:89:9d:
                    d9:0b:e7:1f:2e:13:b8:ae:44:c9:3e:7a:46:b8:87:
                    03:1a:ae:3c:16:8c:73:8e:54:da:17:f9:6f:42:86:
                    6c:af:eb:8b:9f:19:42:38:85:69:a2:41:97:60:ea:
                    18:72:20:25:cf:bf:f9:fc:7d:0b:2a:bb:ba:e7:50:
                    55:fd:67:60:20:6d:93:fe:b3:c2:f6:f2:ca:4f:a6:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EE:0D:FA:16:EE:70:ED:73:58:BE:4B:DF:5E:63:EC:EA:72:31:80
            X509v3 Authority Key Identifier:
                keyid:B8:F8:C3:62:6D:D0:61:62:E6:7E:25:F5:9A:9A:81:FA:E4:72:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPjDYm3QYWLmfiX1mpqB-uRyCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917068E/D6EF671A84A511EBAE9E4472C4F9AE02/uPjDYm3QYWLmfiX1mpqB-uRyCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:2a:84:25:48:96:47:47:35:eb:de:eb:1d:64:f4:5b:9c:
         9a:42:45:75:3d:d5:16:d6:fc:dc:3b:73:db:48:54:a2:e9:36:
         1d:eb:b6:22:4b:01:ae:1a:44:f8:90:68:70:fb:7a:67:ed:b0:
         ee:b3:13:0c:2c:c9:5a:d2:32:0e:c3:ae:7a:62:8c:18:a1:61:
         45:e5:13:4a:c4:10:61:63:cb:be:be:94:48:52:f4:e8:a8:cf:
         5e:c7:f2:63:f8:07:e7:c2:36:fe:6e:18:6c:2e:59:fa:70:e2:
         91:5e:cc:e2:8c:26:8c:10:26:4b:ca:ef:5a:74:8b:3b:ec:02:
         06:44:32:31:33:b0:d0:c1:f7:7f:2a:ed:08:b4:66:b4:13:b2:
         08:64:18:ad:9b:58:32:0b:ba:97:bf:d0:09:ad:c8:b4:57:b6:
         34:9b:e7:db:27:65:e8:b1:1b:9b:20:cd:f3:86:c5:59:1b:6a:
         07:0f:2c:fd:d9:0b:54:a6:2f:26:e3:82:c4:98:4d:5b:4c:85:
         2c:18:52:ee:40:67:82:7c:d7:58:a9:e4:4b:f2:bb:b4:ca:0c:
         c0:1a:67:f1:af:4a:cb:e0:66:ba:f8:63:d4:ae:ab:d6:9f:28:
         5e:e8:af:af:4b:13:64:a7:f9:72:26:d6:13:0e:b3:19:da:bc:
         e3:f1:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:55:20 2025 by rpki-client