This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
File:                     uRM0fmudd6kbsHSCrkXNdBFrAi0.mft (raw, json)
Hash identifier:          MBoYd3CPpw9R25odClAtM3olUBsSrYQhO7aQptLibaQ=
Subject key identifier:   F3:2B:A1:93:B8:26:18:77:63:DF:05:04:25:EE:60:FB:CC:51:DD:F1
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
Manifest number:          09
Signing time:             Tue 23 Dec 2025 06:55:32 +0000
Manifest this update:     Tue 23 Dec 2025 06:55:32 +0000
Manifest next update:     Tue 30 Dec 2025 06:55:32 +0000
Files and hashes:         1: uRM0fmudd6kbsHSCrkXNdBFrAi0.crl (hash: Zh6Z8SYs21HDPGm9Z6Jvfs8tZDhowbxxXaEiPyazQNw=)
                          2: 8F11CB5CDF1511F0B37EABD4606F56BC.roa (hash: mtRIoYq1TghK3Obl1u1V/U7DJkwyXifTYmMfwAlIC/w=)
                          3: 8F8FBABCDF1511F0B37EABD4606F56BC.roa (hash: u/OLPGMElabZPW4UyiGfUDoV0QmUcfwqYaVveMP9c7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Dec 23 06:55:32 2025 GMT
            Not After : Dec 30 06:55:32 2025 GMT
        Subject: CN=694a3ce4-a2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:bc:2a:19:b6:e7:0e:85:33:5d:26:a4:40:
                    2f:b6:fc:60:2d:0c:cb:12:8d:c3:19:00:62:c1:20:
                    76:42:89:5d:68:5b:90:9c:e7:dc:ad:31:23:e2:57:
                    9a:5b:36:30:ff:74:a2:a6:d4:a1:54:29:70:6a:50:
                    eb:c7:da:8a:e5:e1:f7:a5:a6:77:a3:24:83:ac:4d:
                    f8:7c:ea:97:ad:64:43:a3:c4:b4:0b:57:a1:34:6a:
                    09:1b:df:1e:8b:34:11:ef:39:3c:62:bd:61:f9:0a:
                    e0:00:12:e6:ab:cb:cb:ff:95:35:a8:81:73:30:95:
                    59:15:b7:0a:87:c8:8e:77:a0:7e:40:2e:f5:b1:72:
                    d1:64:a7:fd:c8:d6:37:3a:3f:28:b1:82:f4:94:bd:
                    cb:3a:b9:51:8c:17:ea:b9:b4:8f:60:0d:3f:dc:01:
                    2b:f9:79:98:ba:1a:3e:ba:35:09:85:c6:79:3b:39:
                    8b:e7:9b:39:34:57:06:cd:a8:7b:70:34:ec:78:82:
                    9d:7a:2a:c9:b7:9b:16:74:bc:e3:40:fc:4f:b5:9b:
                    dc:ec:fa:40:c4:29:bc:aa:0c:9e:83:ab:e0:60:8f:
                    e5:c0:2c:06:46:a1:50:f9:d6:41:06:8e:e5:56:3f:
                    1d:de:2f:92:07:6d:77:42:1b:89:73:a8:9f:33:4c:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2B:A1:93:B8:26:18:77:63:DF:05:04:25:EE:60:FB:CC:51:DD:F1
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:20:ba:78:71:25:b2:0a:22:f7:cf:45:a4:64:b7:cf:3c:
         61:b8:1f:b5:65:bc:5d:07:98:09:a0:4d:1a:d3:2f:ad:2a:1d:
         71:c5:81:2d:ba:df:77:dc:e7:d5:ad:f3:0d:93:3e:06:ae:2d:
         12:b0:35:29:b9:04:f8:26:fc:02:88:15:3a:68:f3:b4:93:b7:
         d3:17:79:1e:2a:ed:54:94:8b:cb:08:3d:83:f9:08:7e:22:d5:
         4c:f7:51:93:e8:00:bc:6f:3c:e5:27:77:ce:99:d1:ba:8c:47:
         d4:ef:c3:2b:44:b4:13:7e:46:7f:b7:8e:15:78:18:e0:12:e5:
         c1:5c:e0:04:a2:cc:76:b6:f5:d5:04:6c:5a:1f:49:d9:63:58:
         ff:4a:5a:47:37:09:ef:84:37:52:a1:00:ce:c5:e3:5c:5e:e3:
         a6:6d:8d:3e:c9:ed:dd:ce:9b:1a:f1:88:a1:73:cb:b0:8d:d4:
         ab:7e:b9:19:48:c4:44:b6:60:7a:17:ca:5f:db:56:41:42:15:
         f8:4e:e5:38:ae:a9:3c:62:b0:3b:bb:28:b3:1d:36:93:1b:fe:
         98:5e:7c:5b:62:a4:0a:10:6d:1f:04:b7:a8:45:1c:7a:b0:83:
         e3:8d:40:e7:39:89:d3:de:43:8c:79:df:03:16:a5:2a:4c:5d:
         8a:85:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:07 2025 by rpki-client