This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
File:                     UZO9WZSe-bfaEnIPfUbufEvKMOw.mft (raw, json)
Hash identifier:          6DYyAdZFTjoqJkGfG63kqL7LmeAT6iFnCug0V6n720I=
Subject key identifier:   76:99:83:C0:39:00:90:17:A6:99:0D:20:1D:02:82:D3:83:99:83:3D
Authority key identifier: 51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
Manifest number:          04
Signing time:             Sun 07 Dec 2025 06:06:19 +0000
Manifest this update:     Sun 07 Dec 2025 06:06:19 +0000
Manifest next update:     Sun 14 Dec 2025 06:06:19 +0000
Files and hashes:         1: UZO9WZSe-bfaEnIPfUbufEvKMOw.crl (hash: KNSaZbGALJoq2yWpEy6SrdSTlUZ+pHrWuC93BJGB48k=)
                          2: DF3F877ED01D11F09BB99C37C4F9AE02.roa (hash: qoXhCBWfjxGFnBTOb18uIzLQOhy+m8WFebelHqCpVmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 06:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=5193BD59949EF9B7DA12720F7D46EE7C4BCA30EC
        Validity
            Not Before: Dec  7 06:06:19 2025 GMT
            Not After : Dec 14 06:06:19 2025 GMT
        Subject: CN=6935195b-5391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:8e:d8:f7:fd:e0:77:ef:4a:e6:06:c8:7a:
                    2b:63:76:19:cf:52:29:3d:74:5f:eb:59:2a:5b:2c:
                    5d:36:aa:76:dd:15:fb:2e:cb:6a:a5:81:e4:af:c3:
                    14:04:5b:c6:d2:17:e5:ba:43:d2:57:eb:8f:10:58:
                    a1:07:ca:55:af:32:07:39:da:35:10:e3:f1:7a:4a:
                    08:73:55:1f:e7:42:15:c3:a2:cd:b7:ac:9a:01:7f:
                    e3:64:dd:74:b5:a6:1b:2b:e1:9b:30:6c:86:d5:9a:
                    11:5a:d4:bc:7d:65:12:bc:7a:b8:2c:3b:0d:bd:ec:
                    e7:ce:87:34:d8:49:47:e6:00:97:3a:85:f1:d3:4c:
                    b0:9b:e3:e3:eb:69:1d:2a:3f:21:7e:52:37:83:78:
                    39:e1:41:88:1a:d9:88:78:c6:f5:e4:a9:fe:b6:bb:
                    6d:73:a2:cd:a5:47:d4:70:88:80:cd:7b:3e:a6:1b:
                    c4:92:b8:e7:3e:e9:44:8e:40:98:18:92:75:94:30:
                    27:93:8f:68:12:64:20:c5:a8:14:fc:30:a6:d3:2a:
                    43:4b:e4:49:34:f4:55:5b:16:91:8a:fa:8f:64:52:
                    44:14:e6:46:21:fa:3d:4f:9b:17:01:ef:2d:f5:bb:
                    3b:92:8b:62:1e:66:be:46:cc:64:02:c2:f6:c2:25:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:99:83:C0:39:00:90:17:A6:99:0D:20:1D:02:82:D3:83:99:83:3D
            X509v3 Authority Key Identifier:
                keyid:51:93:BD:59:94:9E:F9:B7:DA:12:72:0F:7D:46:EE:7C:4B:CA:30:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZO9WZSe-bfaEnIPfUbufEvKMOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/A0819934D01611F0AD497A7EC4F9AE02/UZO9WZSe-bfaEnIPfUbufEvKMOw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cc:27:0b:d2:3b:ea:16:21:d6:8b:22:65:7b:72:48:c2:3f:
         2a:2a:ad:10:dd:90:a9:40:1d:b7:e2:76:13:dc:44:63:2f:ad:
         bc:0e:ca:85:57:e1:9a:b3:8b:cf:e5:d4:8c:31:8f:68:2e:c7:
         e5:cb:f3:a4:59:05:08:fb:9c:2e:ce:02:1c:27:db:7e:2a:dd:
         06:f6:9d:b1:0a:50:ab:d8:f8:81:4e:14:28:87:a4:4d:e2:db:
         f4:85:4d:18:c9:66:45:51:07:2e:02:0c:20:f0:ad:28:37:5c:
         f7:84:ac:86:99:98:20:14:1d:92:65:63:c0:cf:97:a0:ee:a7:
         15:5b:42:9a:16:1a:30:d0:b4:a2:ca:28:ad:0f:65:62:e9:6c:
         95:1a:d7:4a:49:59:f7:6c:08:2c:49:3a:fe:f2:e7:d9:03:5b:
         c0:94:6a:a9:cc:ee:e0:0b:6b:c7:95:d7:94:85:f3:b8:cc:06:
         b5:5e:33:43:ae:a8:1d:a8:d2:00:13:3e:12:39:17:0e:a4:62:
         4d:34:ec:f2:ea:89:2d:5c:1d:0d:cb:0a:43:75:c1:c6:80:0a:
         12:14:56:c4:08:4b:d3:81:89:49:62:3a:af:54:32:9d:c4:2c:
         b5:cc:79:f3:ea:e5:63:b7:85:a5:fe:bf:67:eb:b6:85:41:bb:
         47:b7:ad:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 04:05:15 2025 by rpki-client