This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
File:                     uwkZbg9n4YLXixffG0JXXCWC_70.mft (raw, json)
Hash identifier:          vbTYJb/DbJhrKGCwniYUcbiGhR9mmEGU4tVee7cu4hE=
Subject key identifier:   DE:AE:F1:C7:1F:25:EF:B0:4A:E8:A1:26:F6:DE:AC:FD:B5:69:4F:28
Authority key identifier: BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD
Certificate issuer:       /CN=A919C068/serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
Manifest number:          36
Signing time:             Tue 23 Dec 2025 06:21:53 +0000
Manifest this update:     Tue 23 Dec 2025 06:21:52 +0000
Manifest next update:     Tue 30 Dec 2025 06:21:52 +0000
Files and hashes:         1: uwkZbg9n4YLXixffG0JXXCWC_70.crl (hash: WTDR/G5XfLSIBKYbEm05qJeHlMn2KwgEmEBVK513Wj8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl
                          rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C068, serialNumber=BB09196E0F67E182D78B17DF1B42575C2582FFBD
        Validity
            Not Before: Dec 23 06:21:52 2025 GMT
            Not After : Dec 30 06:21:52 2025 GMT
        Subject: CN=694a3501-79ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:15:6d:19:eb:4b:c7:75:b0:a2:c8:e6:1f:
                    0c:33:b2:f1:05:9c:ce:ec:89:10:26:40:97:db:b3:
                    04:ea:84:d4:d1:2d:90:f8:ac:9a:5b:8f:a5:09:09:
                    ec:f2:cd:af:a9:27:8b:ef:f8:81:19:13:b6:58:31:
                    47:f8:45:c0:4c:7d:f4:ab:b3:58:e3:39:f1:37:44:
                    e9:f9:06:72:0b:47:09:84:13:83:dd:e2:66:69:a2:
                    62:be:ea:84:2f:38:cd:70:de:e0:5d:b3:e1:c0:74:
                    83:17:e3:fe:29:f5:4f:6a:e7:a2:89:d4:22:f8:99:
                    60:0f:9f:94:9c:75:78:e7:2a:0b:03:0e:b7:f4:53:
                    d2:78:dc:09:0b:a8:bd:b5:cf:0b:1d:6f:bf:69:94:
                    a1:5d:87:71:74:4d:30:4b:88:57:03:2f:b7:13:3a:
                    b3:07:cb:0c:5c:0e:4e:95:c5:35:b0:1c:9c:0f:0e:
                    85:a0:a5:83:6f:b3:65:48:20:a0:0c:10:0a:79:da:
                    fa:4e:63:8e:c5:c4:c6:50:0e:6f:e8:25:da:36:2b:
                    72:46:73:3d:b6:cd:42:c9:cb:9c:d3:5d:c1:ce:76:
                    bd:08:51:54:ca:70:16:1d:92:32:51:8f:57:80:e7:
                    e2:ef:b8:73:0a:f1:06:0f:1e:87:e1:14:09:a1:45:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AE:F1:C7:1F:25:EF:B0:4A:E8:A1:26:F6:DE:AC:FD:B5:69:4F:28
            X509v3 Authority Key Identifier:
                keyid:BB:09:19:6E:0F:67:E1:82:D7:8B:17:DF:1B:42:57:5C:25:82:FF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwkZbg9n4YLXixffG0JXXCWC_70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/B353B03E8CB811F082C92E63C4F9AE02/uwkZbg9n4YLXixffG0JXXCWC_70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:37:c2:b3:92:d3:0e:6c:17:05:a7:bf:e6:ca:86:6d:19:a2:
         df:fd:3c:32:d6:98:2a:03:07:62:fa:95:81:c0:db:09:3e:42:
         98:44:12:da:e2:44:2f:36:bf:4f:45:38:0c:64:d6:da:00:1a:
         53:8c:5f:a7:54:0f:27:bf:d3:d8:54:51:dc:18:2a:42:fd:70:
         d1:e9:f5:82:98:e8:ca:7f:0f:91:16:c8:47:e7:e4:90:4f:cd:
         4f:c7:7a:c9:c9:d9:10:cb:ed:73:db:e5:9f:39:29:99:42:83:
         3d:3a:9b:b8:f3:0c:a0:70:c8:1a:a6:77:36:1c:6c:8b:58:9a:
         c9:eb:f8:cd:5a:0c:f0:62:85:9e:af:b2:82:9e:bb:2e:f1:7e:
         89:43:c9:26:49:ff:eb:4d:9d:ee:eb:8c:21:27:e6:82:34:2b:
         34:77:26:49:22:52:50:8b:e7:fd:5f:da:be:a7:b4:a9:d7:ab:
         0d:cd:fe:2f:53:d1:26:93:08:cb:0f:6c:f4:b7:d6:b9:a9:a9:
         a3:c7:f1:6b:e1:34:3e:ce:8b:d6:58:64:ba:a2:c4:c7:6f:f5:
         1e:7c:01:e1:fd:8d:3d:e1:05:52:63:88:37:0b:36:bf:88:ba:
         ac:ea:09:a5:62:c7:72:c6:bd:89:c6:30:39:72:bd:4c:5c:07:
         d4:4d:37:a3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QzA2ODExMC8GA1UEBRMoQkIwOTE5NkUwRjY3RTE4MkQ3OEIxN0RGMUI0MjU3NUMy
NTgyRkZCRDAeFw0yNTEyMjMwNjIxNTJaFw0yNTEyMzAwNjIxNTJaMBgxFjAUBgNV
BAMMDTY5NGEzNTAxLTc5YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpQxVtGetLx3WwosjmHwwzsvEFnM7siRAmQJfbswTqhNTRLZD4rJpbj6UJCezy
za+pJ4vv+IEZE7ZYMUf4RcBMffSrs1jjOfE3ROn5BnILRwmEE4Pd4mZpomK+6oQv
OM1w3uBds+HAdIMX4/4p9U9q56KJ1CL4mWAPn5ScdXjnKgsDDrf0U9J43AkLqL21
zwsdb79plKFdh3F0TTBLiFcDL7cTOrMHywxcDk6VxTWwHJwPDoWgpYNvs2VIIKAM
EAp52vpOY47FxMZQDm/oJdo2K3JGcz22zULJy5zTXcHOdr0IUVTKcBYdkjJRj1eA
5+LvuHMK8QYPHofhFAmhRci3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3q7xxx8l
77BK6KEm9t6s/bVpTygwHwYDVR0jBBgwFoAUuwkZbg9n4YLXixffG0JXXCWC/70w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMDY4L0IzNTNCMDNFOENC
ODExRjA4MkM5MkU2M0M0RjlBRTAyL3V3a1piZzluNFlMWGl4ZmZHMEpYWENXQ183
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdXdrWmJnOW40WUxYaXhmZkcwSlhYQ1dDXzcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD
MDY4L0IzNTNCMDNFOENCODExRjA4MkM5MkU2M0M0RjlBRTAyL3V3a1piZzluNFlM
WGl4ZmZHMEpYWENXQ183MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGc3wrOS0w5sFwWnv+bKhm0Zot/9PDLWmCoDB2L6lYHA2wk+QphEEtri
RC82v09FOAxk1toAGlOMX6dUDye/09hUUdwYKkL9cNHp9YKY6Mp/D5EWyEfn5JBP
zU/HesnJ2RDL7XPb5Z85KZlCgz06m7jzDKBwyBqmdzYcbItYmsnr+M1aDPBihZ6v
soKeuy7xfolDySZJ/+tNne7rjCEn5oI0KzR3JkkiUlCL5/1f2r6ntKnXqw3N/i9T
0SaTCMsPbPS31rmpqaPH8WvhND7Oi9ZYZLqixMdv9R58AeH9jT3hBVJjiDcLNr+I
uqzqCaVix3LGvYnGMDlyvUxcB9RNN6M=
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:05 2025 by rpki-client