This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
File:                     uc1X4v9PWLuVmpVBoxz99ml2GLI.mft (raw, json)
Hash identifier:          s+pJgoiIlISu1s89nit1vU3QVdvtNsyW2hOwe8pEzcE=
Subject key identifier:   34:D3:DE:BD:66:39:41:5E:90:36:09:00:C1:AF:48:7C:CD:80:A5:BE
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
Manifest number:          85
Signing time:             Tue 23 Dec 2025 05:33:28 +0000
Manifest this update:     Tue 23 Dec 2025 05:33:27 +0000
Manifest next update:     Tue 30 Dec 2025 05:33:27 +0000
Files and hashes:         1: uc1X4v9PWLuVmpVBoxz99ml2GLI.crl (hash: LuJemUyVpqJ2y6s2TzpuWcbrt1p+CPwuSqbmqqM5Ndo=)
                          2: C420B2B6111D11F0BE9ABA7AC4F9AE02.roa (hash: BmMWgtMQ3PCdQlZ5TlrzvWUUVUt35N0MZwh0nPjZPiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Dec 23 05:33:27 2025 GMT
            Not After : Dec 30 05:33:27 2025 GMT
        Subject: CN=694a29a8-e22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:2e:41:8f:43:5f:3c:b8:30:0d:4e:c4:27:
                    a9:50:a9:a8:dd:33:a4:9f:4d:bf:11:88:0a:39:64:
                    68:af:a0:f0:78:51:d5:9b:a5:87:2c:20:4b:17:d2:
                    34:e3:2c:e2:5b:94:2e:37:9c:d0:cd:f3:56:d7:f6:
                    79:d9:98:6a:91:81:80:f1:48:27:23:34:b6:f4:2e:
                    1e:11:6e:aa:3e:68:55:1d:30:f7:3d:ca:c6:38:57:
                    5c:51:fc:6d:65:c7:94:ca:80:1c:51:d1:be:d3:b5:
                    77:b3:f8:13:d7:a9:12:5a:63:a8:47:d9:de:56:40:
                    4b:1b:19:77:f6:ba:53:61:af:c5:9d:58:d0:46:ba:
                    c8:5c:f3:ab:8b:8a:a1:91:c5:bb:24:b3:d1:7c:34:
                    99:a3:6f:57:3e:97:bf:78:68:03:8b:4c:2d:33:3c:
                    21:47:8d:01:8b:44:94:f8:f5:7b:0f:a7:22:66:f5:
                    65:4c:6c:5d:d0:fd:ac:68:27:1d:ef:b5:d0:25:a8:
                    7c:5b:58:df:78:b8:fc:41:90:98:67:7f:0f:ed:96:
                    62:11:ed:ad:a7:d2:2b:1c:57:36:1c:15:ae:4b:8c:
                    73:00:27:52:9f:14:cf:7d:2d:0d:77:7e:b0:74:47:
                    a3:f7:77:e6:a1:cb:aa:79:13:31:29:6b:14:75:f1:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D3:DE:BD:66:39:41:5E:90:36:09:00:C1:AF:48:7C:CD:80:A5:BE
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a7:d5:7e:55:87:94:b5:81:3b:21:89:7a:f2:10:f5:5f:5c:
         08:03:ec:61:11:5c:79:b8:8a:dd:fb:ed:36:3c:38:6d:55:7f:
         3e:b2:44:22:d6:e0:73:81:4f:ee:93:21:7e:31:e8:fc:19:c3:
         9c:82:4d:72:16:56:aa:1d:b1:ef:d9:7f:51:a7:93:d2:c7:5f:
         24:90:09:a3:6e:10:8e:a4:90:52:ce:43:84:b3:fa:6f:bd:62:
         74:13:84:68:c6:93:b9:c8:54:fd:0e:38:e7:c6:5b:b4:f0:85:
         72:59:33:da:da:06:71:03:43:ae:5d:e9:5f:01:74:ec:d6:bc:
         f5:2f:b4:44:1a:20:56:c6:e2:37:06:17:f3:e6:12:c2:e6:38:
         ef:80:46:28:64:56:18:ef:33:e9:cf:92:20:d5:3d:25:88:3c:
         6b:6f:f2:ce:c1:75:94:c7:7f:a5:73:b7:ea:30:f0:a0:29:16:
         b8:5c:93:7a:60:7a:b6:0f:60:ed:b1:e8:cb:2c:7b:c2:ca:f9:
         ad:0a:33:2e:5c:68:30:56:4c:6a:6a:b9:ef:fd:03:f5:86:41:
         6e:94:44:8c:ec:a2:f9:c2:e1:1c:8c:59:fc:f0:e6:4d:ac:62:
         ab:ab:d3:ef:f2:3e:bc:80:83:b2:33:2b:6d:4e:0b:c6:86:7e:
         2e:3d:3e:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUwMjMxMTAvBgNVBAUTKEI5Q0Q1N0UyRkY0RjU4QkI5NTlBOTU0MUEzMUNGREY2
Njk3NjE4QjIwHhcNMjUxMjIzMDUzMzI3WhcNMjUxMjMwMDUzMzI3WjAYMRYwFAYD
VQQDDA02OTRhMjlhOC1lMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhkuQY9DXzy4MA1OxCepUKmo3TOkn02/EYgKOWRor6DweFHVm6WHLCBLF9I0
4yziW5QuN5zQzfNW1/Z52ZhqkYGA8UgnIzS29C4eEW6qPmhVHTD3PcrGOFdcUfxt
ZceUyoAcUdG+07V3s/gT16kSWmOoR9neVkBLGxl39rpTYa/FnVjQRrrIXPOri4qh
kcW7JLPRfDSZo29XPpe/eGgDi0wtMzwhR40Bi0SU+PV7D6ciZvVlTGxd0P2saCcd
77XQJah8W1jfeLj8QZCYZ38P7ZZiEe2tp9IrHFc2HBWuS4xzACdSnxTPfS0Nd36w
dEej93fmocuqeRMxKWsUdfGvnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTT3r1m
OUFekDYJAMGvSHzNgKW+MB8GA1UdIwQYMBaAFLnNV+L/T1i7lZqVQaMc/fZpdhiy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTAyMy9BNjU0RkVGMDEx
MUMxMUYwQjE1QUY5NzBDNEY5QUUwMi91YzFYNHY5UFdMdVZtcFZCb3h6OTltbDJH
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VjMVg0djlQV0x1Vm1wVkJveHo5OW1sMkdMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTAyMy9BNjU0RkVGMDExMUMxMUYwQjE1QUY5NzBDNEY5QUUwMi91YzFYNHY5UFdM
dVZtcFZCb3h6OTltbDJHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBp9V+VYeUtYE7IYl68hD1X1wIA+xhEVx5uIrd++02PDhtVX8+skQi
1uBzgU/ukyF+Mej8GcOcgk1yFlaqHbHv2X9Rp5PSx18kkAmjbhCOpJBSzkOEs/pv
vWJ0E4RoxpO5yFT9Djjnxlu08IVyWTPa2gZxA0OuXelfAXTs1rz1L7REGiBWxuI3
Bhfz5hLC5jjvgEYoZFYY7zPpz5Ig1T0liDxrb/LOwXWUx3+lc7fqMPCgKRa4XJN6
YHq2D2DtsejLLHvCyvmtCjMuXGgwVkxqarnv/QP1hkFulESM7KL5wuEcjFn88OZN
rGKrq9Pv8j68gIOyMyttTgvGhn4uPT6J
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:01 2025 by rpki-client