This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
File:                     UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft (raw, json)
Hash identifier:          kqgDb/2MwNtShQnRJ5zWPtr8ClzxsH/OWKOYXWjG8EQ=
Subject key identifier:   DC:81:75:97:51:6F:C1:C8:94:4A:1C:A4:09:B8:C1:9C:B1:AF:A9:2F
Authority key identifier: 52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64
Certificate issuer:       /CN=A91A3277/serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64
Certificate serial:       039A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
Manifest number:          0395
Signing time:             Mon 22 Dec 2025 23:48:29 +0000
Manifest this update:     Mon 22 Dec 2025 23:48:28 +0000
Manifest next update:     Mon 29 Dec 2025 23:48:28 +0000
Files and hashes:         1: UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl (hash: Jlfq0wncrWHEAq3NnjuZU3fJWMzpXg9q0AXsAXu7g0M=)
                          2: F52D264EC6C211EC87251528C4F9AE02.roa (hash: o082/qE7KnRTR5fE6jGL87EK8Un5n2KKqzOv1p2PmKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3277, serialNumber=52F3E7FB5ED85337F7E19E10733D490C2B1C0B64
        Validity
            Not Before: Dec 22 23:48:28 2025 GMT
            Not After : Dec 29 23:48:28 2025 GMT
        Subject: CN=6949d8cd-ae84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:cc:ab:24:fa:14:51:d8:e6:2c:84:fe:79:
                    c6:ca:e7:36:c7:77:65:2e:55:d3:04:ba:f3:d8:3f:
                    03:66:89:20:a7:3f:ea:1e:35:0b:eb:a2:0a:f4:d2:
                    b7:98:eb:d2:52:7a:e8:71:d0:af:2c:81:fa:e9:64:
                    39:b2:f0:99:44:6b:10:99:a7:e9:30:4c:87:37:01:
                    a5:d5:03:11:f5:1d:a9:e4:8f:ec:69:47:d6:c7:41:
                    76:64:ad:8d:90:c6:37:2d:06:9d:59:4b:ed:ab:34:
                    d3:1c:8d:9f:e1:8a:4d:db:64:dc:fb:27:24:0f:c0:
                    de:36:e8:fb:ad:8e:f2:e4:fa:6d:bb:44:15:ed:3c:
                    0b:23:65:84:37:72:70:79:27:73:a4:57:b6:ad:e9:
                    c0:1b:59:eb:ef:3c:94:60:06:4a:6d:93:4a:30:2a:
                    25:f3:39:45:97:c9:a9:15:13:c1:32:a5:ed:6d:3f:
                    be:e4:a5:8e:02:a2:eb:36:25:dd:d4:18:06:13:70:
                    c4:4d:cd:1e:e4:3b:18:b7:c5:13:64:53:d3:b5:b1:
                    4c:e0:98:7a:40:d7:cb:3e:42:1c:ee:22:96:5e:98:
                    d2:2b:03:71:d9:68:14:f4:57:73:56:32:14:ec:18:
                    64:22:c5:42:a6:fe:48:95:c9:29:98:56:5f:7b:80:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:75:97:51:6F:C1:C8:94:4A:1C:A4:09:B8:C1:9C:B1:AF:A9:2F
            X509v3 Authority Key Identifier:
                keyid:52:F3:E7:FB:5E:D8:53:37:F7:E1:9E:10:73:3D:49:0C:2B:1C:0B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UvPn-17YUzf34Z4Qcz1JDCscC2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3277/C1B02296C6C011ECA854D627C4F9AE02/UvPn-17YUzf34Z4Qcz1JDCscC2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:44:2d:71:af:bf:57:26:a6:bc:c8:ab:f1:25:ff:16:b0:
         b4:06:30:1a:e4:0f:c2:2a:51:58:02:2b:c0:cf:cc:15:db:0c:
         cb:5a:bd:08:0b:64:54:82:89:3b:72:29:67:8b:e8:49:77:ee:
         d1:25:f9:42:79:01:79:02:80:3f:cd:04:7c:d6:a2:44:9f:86:
         89:0f:65:c4:13:3f:84:15:03:8d:b3:25:50:1a:16:7f:0f:1a:
         30:a3:49:09:09:6c:f7:36:21:c9:2d:20:eb:a5:16:17:ff:df:
         22:bc:9f:46:a2:ac:30:74:df:69:14:12:03:65:46:fd:12:c5:
         25:15:32:06:21:8d:c6:8b:7e:c7:d8:8b:5f:cb:9d:3e:3f:5f:
         75:65:e9:2e:73:4f:1f:05:a8:e3:a6:17:ef:bc:7b:6e:88:a2:
         c3:b9:c5:b6:3c:7c:24:c8:31:a0:01:79:eb:40:83:6d:9a:36:
         20:47:8d:c0:3d:10:02:0f:a0:9a:44:a8:cb:96:54:19:12:c5:
         3c:53:61:70:07:23:5d:82:7e:89:1d:f1:01:de:98:f5:20:51:
         ee:71:df:40:6b:ef:17:cf:a6:4b:b2:d7:fa:e7:55:31:57:79:
         37:a2:d3:04:36:d3:cb:0e:f2:31:8c:2f:0b:8c:68:bd:5a:00:
         05:03:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:36 2025 by rpki-client