This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          Xd3Bd5JPo49YQtNI8jkeDJK1UiLBLYUA04iJIVuJ9jg=
Subject key identifier:   CD:FF:B1:51:52:4D:A8:56:6A:AE:32:7A:3B:CC:9E:95:B8:A9:7F:6E
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          E2
Signing time:             Tue 23 Dec 2025 04:32:56 +0000
Manifest this update:     Tue 23 Dec 2025 04:32:55 +0000
Manifest next update:     Tue 30 Dec 2025 04:32:55 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: 157PjM4Wfskh+mieXnGr3remofa0/a97VS1RuXZIUMI=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: ++LVGRxofYEX6I3wU8GpWTit5dMqqug/RxXZrZLIN/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Dec 23 04:32:55 2025 GMT
            Not After : Dec 30 04:32:55 2025 GMT
        Subject: CN=694a1b78-bbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:7e:6f:8b:03:55:17:ce:c1:cc:34:37:5d:
                    ed:e6:98:48:e0:60:27:b3:bf:04:35:05:4c:c9:c4:
                    94:c0:5c:7d:73:24:15:7d:1b:2c:3b:17:f7:07:a2:
                    87:7a:29:24:6a:03:35:9b:fb:4b:f0:54:bc:fc:aa:
                    dc:f2:97:c1:93:08:d3:3f:59:48:b7:da:1b:b2:d2:
                    a2:ab:11:d9:d0:73:14:e3:e5:19:27:64:1d:eb:1c:
                    86:35:4c:3e:97:a7:03:8c:d5:83:a9:06:86:b2:10:
                    a2:eb:5f:a8:4d:0f:e0:09:a7:1c:7a:2f:ef:82:11:
                    8b:78:00:c9:f1:21:66:37:ad:1f:aa:7d:41:7a:e1:
                    3a:e3:b7:2d:2d:ac:b4:fd:c7:a0:2f:4b:33:dc:1d:
                    95:0e:92:05:4c:f3:49:dd:8f:e4:75:3e:39:dd:67:
                    9e:aa:59:b7:91:65:47:b9:68:7c:38:35:ca:fd:50:
                    71:03:98:ee:db:85:14:e7:25:a2:7c:16:53:fd:c3:
                    a5:7b:e5:f2:37:be:21:90:47:63:67:2c:06:e5:7d:
                    e7:f7:f8:e1:34:b1:bd:ea:7b:92:21:e3:c8:92:4a:
                    e1:f5:b4:fc:91:32:cf:0c:cc:84:11:dd:67:3b:dd:
                    bd:b3:8a:01:bc:bb:08:90:50:06:7e:de:43:ed:fc:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FF:B1:51:52:4D:A8:56:6A:AE:32:7A:3B:CC:9E:95:B8:A9:7F:6E
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:23:e0:1b:2d:4d:1b:b8:85:39:f8:80:b1:f4:5c:0b:7a:9e:
         2f:64:03:ff:e8:c6:6c:3c:c3:1f:4a:20:31:0b:bc:f6:10:7c:
         02:db:65:47:2d:29:3a:6b:0f:2e:3c:98:44:14:5c:d7:e1:c2:
         33:51:1b:74:0d:15:7c:94:18:75:30:ec:8e:b5:81:91:ba:ae:
         aa:3a:1a:f2:0b:25:54:2e:13:ce:9d:95:f4:f1:b3:d9:7f:51:
         30:0d:c6:90:49:e2:66:2a:fb:08:c7:7e:ba:11:77:25:b9:79:
         57:19:0e:02:18:3f:85:3c:a1:11:ea:08:28:ee:71:c0:93:9a:
         29:57:6e:d6:48:06:1c:f1:c0:49:2f:c1:d7:dd:54:26:e7:8c:
         4a:07:83:d7:16:23:34:fd:8d:f7:5d:db:19:fe:a9:5d:bd:42:
         e3:95:4f:8f:77:9c:d3:47:05:66:ac:86:16:f2:c2:f2:4e:a5:
         fb:d4:7a:91:cd:ac:7b:9a:15:49:f8:7c:01:fa:09:89:fa:af:
         df:cf:7d:91:2f:ea:ba:fd:6d:f9:4d:e2:3f:68:7c:c7:63:52:
         96:fc:1b:cc:f2:fe:0b:07:6a:96:50:6e:75:af:8d:49:5b:57:
         54:86:be:4b:50:5f:c6:7e:4c:79:5a:3a:4b:97:c5:5a:ee:91:
         da:91:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:33:00 2025 by rpki-client