This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File:                     Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier:          0QHKur48kEydbjZO7UUa4WM8Z9ZTd3cArNnJdxvl3z8=
Subject key identifier:   DD:13:E7:39:EB:45:C5:FA:FB:FC:10:E7:90:F3:F4:04:73:E4:9E:63
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number:          010A
Signing time:             Sun 07 Dec 2025 03:23:49 +0000
Manifest this update:     Sun 07 Dec 2025 03:23:49 +0000
Manifest next update:     Sun 14 Dec 2025 03:23:49 +0000
Files and hashes:         1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: MHf8SNls8Ibex0bZPW90GPLnTFW8/UHgb4Ysu9dCYGQ=)
                          2: D5C6712C2BF811F0A209EF6DC4F9AE02.roa (hash: 8rr+Ae0hpqDQA95PGvgN3goNJqA35l83x4zl3ssPb/c=)
                          3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=)
                          4: AC038F18740611F0B304387CC4F9AE02.roa (hash: Odj1pliiYQRq/sR/Y5HzPODQczZMdgtZfqLJSE59i+w=)
                          5: 4C7FE6802C7711F084452D84C4F9AE02.roa (hash: DoSA6UaERiqEdMCY3op+YtVmTlaoSDMgolhw801td7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 03:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Dec  7 03:23:49 2025 GMT
            Not After : Dec 14 03:23:49 2025 GMT
        Subject: CN=6934f345-4328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:27:4d:fa:7b:03:5b:27:2c:2c:5c:12:90:
                    cd:b0:a1:81:a8:3b:8e:4b:c2:10:df:4a:63:d6:fa:
                    cb:1f:62:83:ac:f5:17:7a:b7:23:0e:e4:8d:0a:cc:
                    fa:d5:a8:db:92:22:b6:a4:f3:72:ec:49:58:bd:fd:
                    57:69:ba:61:ce:65:f8:ad:36:71:0c:dc:a0:99:ed:
                    18:88:84:00:e9:13:e1:e6:f2:cd:9a:a7:5e:85:5c:
                    b5:64:da:43:a3:89:4d:ec:b9:1a:cf:1f:84:d6:df:
                    30:72:48:1a:78:1e:7d:81:de:d7:e8:dc:91:1a:77:
                    c8:2d:5d:72:73:87:b8:fc:45:45:4f:e3:3a:6a:c7:
                    19:cd:df:bc:67:eb:3b:f0:c0:6e:b8:00:2c:02:19:
                    18:f8:d1:ea:1d:a6:cd:49:c1:14:32:19:34:98:ac:
                    0b:22:4a:6f:1d:fd:b3:45:d7:2b:14:58:11:49:bc:
                    0a:28:97:ef:0f:d3:6d:53:e4:47:10:73:03:6c:c1:
                    ac:0e:dc:9f:09:4e:d8:f2:e0:67:e1:bd:d8:b2:07:
                    ef:b7:66:f2:5a:d2:de:79:04:92:88:28:ac:a6:74:
                    a7:29:71:92:b5:f6:07:5a:06:ea:16:55:af:0a:ec:
                    a2:31:6d:10:0d:27:70:71:1a:18:aa:64:ae:34:81:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:13:E7:39:EB:45:C5:FA:FB:FC:10:E7:90:F3:F4:04:73:E4:9E:63
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:7a:99:83:95:80:2f:cb:57:46:13:98:a8:37:4b:a9:8b:
         2e:66:da:34:2a:1e:06:ba:70:7e:50:ca:7a:25:9e:f4:a4:cb:
         75:07:59:b2:b4:cb:5e:8c:da:ed:11:84:83:ad:a3:9b:0c:d7:
         20:de:f9:5b:fa:5a:8f:e7:26:98:84:b3:cd:10:c4:c1:eb:9b:
         52:48:7b:3d:5e:e1:ab:2e:76:0c:9d:be:77:17:9e:b9:ae:cb:
         21:14:b4:d7:d7:7a:43:93:5f:83:b6:ce:cb:d6:b7:63:8b:95:
         48:99:fc:2c:40:b1:1b:4e:1e:60:c2:ea:a8:75:b2:f6:70:f3:
         ee:3e:e3:e3:14:96:ae:44:a7:49:70:dc:c1:2d:99:d4:d2:39:
         a3:8d:aa:c6:5b:e7:b3:1b:5a:a7:71:5a:95:92:0e:8d:03:22:
         c4:74:08:70:6e:9b:63:7c:59:4a:cc:03:d2:54:20:25:49:95:
         c6:93:9f:f1:db:ad:f0:0a:aa:99:f3:f6:9b:7c:ed:f7:fa:81:
         d8:36:2a:04:89:78:e9:0d:e1:2f:4e:b6:14:24:b9:e4:be:c6:
         6b:58:81:0c:69:25:5d:64:7e:01:db:fa:93:7c:c6:f2:b1:bb:
         24:df:04:06:5e:f5:ff:23:07:01:cf:d9:89:55:8f:99:5e:79:
         50:65:ef:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx
NDQ2RDY3RDQwHhcNMjUxMjA3MDMyMzQ5WhcNMjUxMjE0MDMyMzQ5WjAYMRYwFAYD
VQQDEw02OTM0ZjM0NS00MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21cnTfp7A1snLCxcEpDNsKGBqDuOS8IQ30pj1vrLH2KDrPUXercjDuSNCsz6
1ajbkiK2pPNy7ElYvf1XabphzmX4rTZxDNygme0YiIQA6RPh5vLNmqdehVy1ZNpD
o4lN7Lkazx+E1t8wckgaeB59gd7X6NyRGnfILV1yc4e4/EVFT+M6ascZzd+8Z+s7
8MBuuAAsAhkY+NHqHabNScEUMhk0mKwLIkpvHf2zRdcrFFgRSbwKKJfvD9NtU+RH
EHMDbMGsDtyfCU7Y8uBn4b3Ysgfvt2byWtLeeQSSiCispnSnKXGStfYHWgbqFlWv
CuyiMW0QDSdwcRoYqmSuNIGUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0T5znr
RcX6+/wQ55Dz9ARz5J5jMB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTQ5Qy9FNkFCMkNERTRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5j
RS02S0FPVmZ4OVVVUnRaOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAseHqZg5WAL8tXRhOYqDdLqYsuZto0Kh4GunB+UMp6JZ70pMt1B1my
tMtejNrtEYSDraObDNcg3vlb+lqP5yaYhLPNEMTB65tSSHs9XuGrLnYMnb53F565
rsshFLTX13pDk1+Dts7L1rdji5VImfwsQLEbTh5gwuqodbL2cPPuPuPjFJauRKdJ
cNzBLZnU0jmjjarGW+ezG1qncVqVkg6NAyLEdAhwbptjfFlKzAPSVCAlSZXGk5/x
263wCqqZ8/abfO33+oHYNioEiXjpDeEvTrYUJLnkvsZrWIEMaSVdZH4B2/qTfMby
sbsk3wQGXvX/IwcBz9mJVY+ZXnlQZe/Y
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:01 2025 by rpki-client