This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
File:                     uHDS4OMcipEO37p2W7fPBMPBDL4.mft (raw, json)
Hash identifier:          dGRGJRASzqx5SPxEnhlMKZEuXLzN1nGe14sYqgqtLcs=
Subject key identifier:   FC:11:B8:F4:B8:C0:02:04:B1:69:9A:F1:EA:3A:18:28:B4:3A:6C:3F
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Certificate issuer:       /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
Manifest number:          62
Signing time:             Tue 23 Dec 2025 05:58:06 +0000
Manifest this update:     Tue 23 Dec 2025 05:58:05 +0000
Manifest next update:     Tue 30 Dec 2025 05:58:05 +0000
Files and hashes:         1: uHDS4OMcipEO37p2W7fPBMPBDL4.crl (hash: YDVDrggrr/5zqkKXc469Ybz9Mjo6kL7dw+Rm2qLgZpw=)
                          2: 48B17B5CB4CD11F094AF5C23C4F9AE02.roa (hash: nlIGArnSyHQ+mO4FvncFWFbJtBmLN0/ZfyCLV+iceoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
        Validity
            Not Before: Dec 23 05:58:05 2025 GMT
            Not After : Dec 30 05:58:05 2025 GMT
        Subject: CN=694a2f6e-9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:fa:59:f9:0d:a1:26:de:cc:b3:b1:e6:26:
                    39:80:c7:d5:a1:dd:8b:95:62:1b:f0:80:b3:f5:90:
                    8f:45:80:31:f2:5a:58:79:04:f0:a5:b1:4f:7a:a2:
                    d5:22:7e:52:ce:74:2f:5e:0a:e4:5e:07:d8:a8:2e:
                    67:5e:67:dd:cc:ab:46:32:ab:64:18:8a:52:97:9c:
                    f0:b1:7a:35:1e:54:32:a7:20:22:8a:22:79:24:e8:
                    b0:a0:83:b9:32:c1:6a:66:8d:50:10:36:94:7f:9f:
                    72:9a:6a:21:0b:ac:5f:dd:e6:04:0f:12:eb:cc:97:
                    17:b9:58:9e:8a:27:45:bc:e0:d0:7f:2f:c9:14:35:
                    bf:f5:9d:06:1f:7a:8e:c7:55:bb:66:58:0f:b3:b2:
                    a0:2c:c8:2a:13:67:5e:58:83:cb:04:d7:0a:1b:03:
                    3b:1a:53:e2:72:c7:97:bf:9f:6f:cf:a6:f5:73:f2:
                    c0:20:6e:c3:ab:b5:6c:15:e2:7e:0c:ae:09:d9:b5:
                    7b:f1:28:d7:4d:83:a2:bf:b1:29:4a:d0:3d:80:69:
                    54:39:36:24:09:a3:ca:b4:52:5c:c4:cc:70:39:2b:
                    e9:30:4b:5e:d9:03:26:7e:01:80:c6:9c:10:c3:da:
                    53:7c:d1:05:e8:84:02:5c:a2:fa:52:6e:aa:bf:ea:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:11:B8:F4:B8:C0:02:04:B1:69:9A:F1:EA:3A:18:28:B4:3A:6C:3F
            X509v3 Authority Key Identifier:
                keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:72:2c:7f:bd:62:f8:84:ae:34:f8:0a:4d:fa:2b:fe:db:00:
         ed:08:58:ae:6f:98:c0:aa:d8:63:17:4c:6f:d2:fd:38:24:bb:
         bc:19:39:ff:8d:11:aa:f3:aa:31:11:f5:58:f2:6a:fc:f1:cd:
         34:d4:a8:a7:61:65:e7:27:e6:91:1d:bb:2e:8b:fd:2f:a4:9b:
         89:b0:0d:da:0d:ab:05:c7:f8:3e:81:e9:3a:2f:da:22:85:35:
         f7:d6:88:41:9a:68:75:87:c8:43:a5:36:d8:17:fc:2c:75:12:
         54:15:99:7a:f6:29:ac:33:6e:de:a8:12:2f:af:8f:2a:bc:d1:
         47:68:0b:3c:80:76:b1:e0:54:35:c5:3f:a9:3e:55:a4:fa:ea:
         90:62:a4:78:37:95:55:24:8c:d4:c1:5d:e3:b1:50:00:80:bb:
         71:bc:ce:1b:67:e3:da:43:9a:df:c9:26:2a:7d:29:42:c4:ab:
         41:78:f0:d1:5a:86:17:78:ce:fe:13:d4:0a:72:22:01:3d:b2:
         fc:8e:ff:d0:bc:56:15:ab:e3:3a:00:f1:13:9f:59:aa:6f:9d:
         83:92:40:58:1d:97:52:a4:f6:61:98:38:0c:a1:56:e3:20:dd:
         53:e7:9f:ff:a0:72:39:24:0d:4b:5a:e2:45:af:70:30:dc:1a:
         8a:4f:6d:98
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzFBRDExMC8GA1UEBRMoQjg3MEQyRTBFMzFDOEE5MTBFREZCQTc2NUJCN0NGMDRD
M0MxMENCRTAeFw0yNTEyMjMwNTU4MDVaFw0yNTEyMzAwNTU4MDVaMBgxFjAUBgNV
BAMMDTY5NGEyZjZlLTkzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvU/pZ+Q2hJt7Ms7HmJjmAx9Wh3YuVYhvwgLP1kI9FgDHyWlh5BPClsU96otUi
flLOdC9eCuReB9ioLmdeZ93Mq0Yyq2QYilKXnPCxejUeVDKnICKKInkk6LCgg7ky
wWpmjVAQNpR/n3KaaiELrF/d5gQPEuvMlxe5WJ6KJ0W84NB/L8kUNb/1nQYfeo7H
VbtmWA+zsqAsyCoTZ15Yg8sE1wobAzsaU+Jyx5e/n2/PpvVz8sAgbsOrtWwV4n4M
rgnZtXvxKNdNg6K/sSlK0D2AaVQ5NiQJo8q0UlzEzHA5K+kwS17ZAyZ+AYDGnBDD
2lN80QXohAJcovpSbqq/6mglAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/BG49LjA
AgSxaZrx6joYKLQ6bD8wHwYDVR0jBBgwFoAUuHDS4OMcipEO37p2W7fPBMPBDL4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0M0RTI2OTU2NTA5
QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBFTzM3cDJXN2ZQQk1QQkRM
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdUhEUzRPTWNpcEVPMzdwMlc3ZlBCTVBCREw0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
MUFEL0M0RTI2OTU2NTA5QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3VIRFM0T01jaXBF
TzM3cDJXN2ZQQk1QQkRMNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAFyLH+9YviErjT4Ck36K/7bAO0IWK5vmMCq2GMXTG/S/Tgku7wZOf+N
EarzqjER9VjyavzxzTTUqKdhZecn5pEduy6L/S+km4mwDdoNqwXH+D6B6Tov2iKF
NffWiEGaaHWHyEOlNtgX/Cx1ElQVmXr2Kawzbt6oEi+vjyq80UdoCzyAdrHgVDXF
P6k+VaT66pBipHg3lVUkjNTBXeOxUACAu3G8zhtn49pDmt/JJip9KULEq0F48NFa
hhd4zv4T1ApyIgE9svyO/9C8VhWr4zoA8ROfWapvnYOSQFgdl1Kk9mGYOAyhVuMg
3VPnn/+gcjkkDUta4kWvcDDcGopPbZg=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:41:46 2025 by rpki-client