This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.mft
File:                     UviDZnrJ5h_5xDCou5UJWWNNeK4.mft (raw, json)
Hash identifier:          POnjjQXumKgCtFd/HCr7C0dEhbFBTv7hH+MkHartyqc=
Subject key identifier:   F0:85:0F:0A:FF:5D:B3:EC:C2:0E:12:46:37:B7:AB:8A:21:B5:0C:B0
Authority key identifier: 52:F8:83:66:7A:C9:E6:1F:F9:C4:30:A8:BB:95:09:59:63:4D:78:AE
Certificate issuer:       /CN=A919E94C/serialNumber=52F883667AC9E61FF9C430A8BB950959634D78AE
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.mft
Manifest number:          10
Signing time:             Tue 23 Dec 2025 06:49:51 +0000
Manifest this update:     Tue 23 Dec 2025 06:49:51 +0000
Manifest next update:     Tue 30 Dec 2025 06:49:51 +0000
Files and hashes:         1: UviDZnrJ5h_5xDCou5UJWWNNeK4.crl (hash: xIMHBFiFA9EZzmNFD1z9GgA3cKvv7pVgJmice0ltq1o=)
                          2: 09564342CB4411F08B1A8717C4F9AE02.roa (hash: C6KaUYkuXw/EK14wFOYeCZS/hcPJdULPaduyGjIQCqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.crl
                          rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E94C, serialNumber=52F883667AC9E61FF9C430A8BB950959634D78AE
        Validity
            Not Before: Dec 23 06:49:51 2025 GMT
            Not After : Dec 30 06:49:51 2025 GMT
        Subject: CN=694a3b8f-f4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:1e:59:ba:a0:25:60:57:de:01:2d:b9:0a:
                    3e:e5:bd:56:f1:a1:1e:66:b6:dd:d3:24:8d:41:b1:
                    a5:12:fb:a2:20:40:82:6f:4b:49:5c:63:2a:57:57:
                    d4:1f:79:86:ec:b4:47:21:59:43:6b:eb:96:8d:5b:
                    f6:02:70:5d:ae:48:86:3a:77:ea:c7:2a:0f:c9:fc:
                    29:5d:57:cf:35:23:1a:18:24:30:83:d1:b8:b2:c1:
                    44:0d:34:b0:37:27:c2:d3:86:39:d5:c1:84:55:f8:
                    e6:48:5a:59:1a:0e:0b:32:9e:94:7a:ca:0e:d2:3b:
                    e6:09:9a:b8:5b:e2:cc:c7:50:f2:7b:5d:d7:20:aa:
                    fe:be:96:c6:45:bc:e6:43:e5:c7:58:0c:c6:87:98:
                    b7:38:ac:96:21:83:3a:62:26:f6:40:8a:52:17:12:
                    f4:42:8c:ec:24:af:9c:04:c4:d5:23:3d:57:ac:d0:
                    7f:05:b4:f5:c2:4c:a7:f7:a6:63:21:6f:b5:4c:81:
                    4d:d2:8a:dd:37:da:0d:da:b1:f6:88:7a:ce:4e:ee:
                    68:93:20:08:42:a0:52:56:aa:bd:11:e2:c1:40:4e:
                    2f:e1:ba:28:07:3c:1d:f2:30:cf:2a:f4:4b:02:60:
                    70:fe:77:66:53:34:da:3c:f5:62:c6:24:38:0f:65:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:85:0F:0A:FF:5D:B3:EC:C2:0E:12:46:37:B7:AB:8A:21:B5:0C:B0
            X509v3 Authority Key Identifier:
                keyid:52:F8:83:66:7A:C9:E6:1F:F9:C4:30:A8:BB:95:09:59:63:4D:78:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UviDZnrJ5h_5xDCou5UJWWNNeK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E94C/BD43A78ECAA711F0A2AB6768C4F9AE02/UviDZnrJ5h_5xDCou5UJWWNNeK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fd:a1:31:a7:97:d3:c4:7e:8a:b9:a9:08:8a:a2:f5:24:7f:
         39:e2:2a:ef:0e:2c:c6:88:96:09:63:4a:43:70:69:92:f8:3f:
         ef:36:6b:b7:9b:24:65:b0:71:8e:b4:b7:70:05:29:d6:9d:b2:
         42:f0:ed:1a:de:34:e6:c2:82:a5:db:ca:71:62:1f:85:c6:2f:
         c8:17:4a:6e:93:84:87:5f:f1:51:13:e3:cf:84:51:02:e1:91:
         fe:b8:a4:65:70:56:ce:89:58:01:44:be:68:19:96:53:78:e3:
         0c:cb:00:58:6b:e9:d6:0e:9d:8a:4e:31:71:ae:3a:81:41:b2:
         13:b4:b0:61:9a:87:2a:a6:e7:33:83:ec:f4:20:a0:93:96:b0:
         fb:a3:7f:07:36:60:ed:27:52:9e:70:52:e4:fd:c2:44:6d:0e:
         0e:ad:ff:db:88:45:1e:8d:26:67:07:2c:31:b2:49:82:95:c1:
         10:27:34:c5:2a:93:a7:55:ae:ec:22:0f:aa:46:62:cc:bc:47:
         3f:10:d4:3e:e6:12:c7:3d:ac:8d:f8:d8:02:13:d9:dd:ae:6a:
         89:06:9e:a6:26:39:21:b8:2a:92:fe:e6:c3:5d:b4:08:20:7f:
         65:17:16:ca:8b:5f:7a:f0:b5:2a:66:ad:d7:66:60:75:b2:3a:
         13:4a:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:27 2025 by rpki-client