This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
File:                     UAxgp_acBL6E_PPGVyPAeXDloSg.mft (raw, json)
Hash identifier:          NQufhNS7EJ60LiwS1ySzKhmJ/4lfpKkWZ4YaVUBj240=
Subject key identifier:   D3:3D:DD:6C:3F:23:65:20:BD:97:0B:46:E4:79:2F:35:B4:35:25:C9
Authority key identifier: 50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28
Certificate issuer:       /CN=A91A7978/serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
Manifest number:          A4
Signing time:             Tue 23 Dec 2025 05:15:27 +0000
Manifest this update:     Tue 23 Dec 2025 05:15:27 +0000
Manifest next update:     Tue 30 Dec 2025 05:15:27 +0000
Files and hashes:         1: UAxgp_acBL6E_PPGVyPAeXDloSg.crl (hash: EWGaHCkAuKdr0evIwZLukCFsEZOw0g6VYdgAMt2gdiI=)
                          2: 1EF560BEEA6911EF9AE7CD14C4F9AE02.roa (hash: lILeGFy8FkS3op8pqtEQAN5f/QrMhRlzhtxTRP45JV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7978, serialNumber=500C60A7F69C04BE84FCF3C65723C07970E5A128
        Validity
            Not Before: Dec 23 05:15:27 2025 GMT
            Not After : Dec 30 05:15:27 2025 GMT
        Subject: CN=694a256f-999f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:e6:db:7d:d3:2f:52:a5:18:0c:f2:2d:71:
                    46:fe:5f:1b:f1:a7:45:b1:23:82:18:4a:db:20:05:
                    6e:4e:e4:2b:12:23:7a:2a:11:bc:58:11:3c:09:43:
                    c2:e7:63:c0:64:fa:4d:70:f9:86:05:11:b0:38:b7:
                    a9:70:1c:66:48:13:ab:75:7e:3f:3a:e6:e9:fb:87:
                    e4:5b:bd:b3:5c:6f:98:17:e0:b4:0e:25:73:7c:b1:
                    64:80:8d:7b:de:dc:f9:1d:ae:e0:5f:2d:c2:62:97:
                    46:8c:6f:ec:ec:e4:89:a9:48:32:6f:2f:9b:bd:47:
                    15:56:d8:bc:1b:87:a9:a2:33:15:15:bc:ba:1b:ec:
                    67:69:c7:b7:dc:49:b2:ba:18:df:f7:ab:40:f3:5a:
                    74:b4:0e:fb:dc:24:e5:6c:c3:72:65:2a:0f:47:af:
                    0b:fa:51:ad:2b:97:b9:0b:1c:37:21:61:58:fd:46:
                    1c:26:45:2f:9a:34:9b:6e:e6:9b:06:4e:1a:da:fe:
                    7a:f4:d1:b9:a9:e5:26:bf:4f:69:4e:21:15:ae:65:
                    33:f3:07:be:e1:8e:32:af:ee:07:b4:25:16:f8:74:
                    55:e4:02:41:a9:3e:78:b7:3e:40:a2:26:50:e5:95:
                    2f:3f:d2:63:2f:7f:a4:bb:46:3f:f5:6b:5b:17:a0:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:DD:6C:3F:23:65:20:BD:97:0B:46:E4:79:2F:35:B4:35:25:C9
            X509v3 Authority Key Identifier:
                keyid:50:0C:60:A7:F6:9C:04:BE:84:FC:F3:C6:57:23:C0:79:70:E5:A1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAxgp_acBL6E_PPGVyPAeXDloSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7978/562BDB22EA6811EFB4135C60C4F9AE02/UAxgp_acBL6E_PPGVyPAeXDloSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:03:31:c6:7b:8d:d0:75:68:81:80:d2:d9:61:3c:9b:c9:
         54:81:47:9b:61:c2:eb:85:7e:70:e7:15:a5:ac:f4:1c:50:c6:
         78:29:cc:24:63:36:41:de:e4:c7:cb:cb:f1:03:fb:51:e1:55:
         95:24:02:bc:be:f5:de:4f:7a:57:14:a2:cd:34:d5:31:63:84:
         dd:b5:4f:49:a8:33:a9:7d:50:ec:cb:25:10:de:8d:15:10:41:
         50:60:bd:e0:3f:df:48:0e:68:49:17:a0:29:c7:be:3f:c7:87:
         e5:16:26:96:b9:29:f7:5c:b2:a6:ae:ca:05:3b:f7:a0:20:ba:
         d3:c6:6e:12:8e:d8:6e:89:02:2f:6e:32:2f:ed:48:15:64:10:
         3c:73:9f:a2:84:b8:cf:2a:3a:06:4e:1a:56:e5:5f:3b:4a:e6:
         3b:d7:af:e2:bb:44:e4:4e:f3:22:fc:06:03:3e:8b:d6:c4:7f:
         b2:15:4c:f5:86:6a:3a:7d:ad:1a:61:2e:19:34:d5:67:7d:51:
         0f:52:72:11:3f:2b:41:20:4b:5e:4a:3e:02:3c:8c:35:e3:ae:
         db:3c:93:73:9b:c3:be:54:6b:2b:c9:f9:f2:15:dc:2b:18:6d:
         e9:07:9c:ce:90:80:89:22:10:a1:6e:4e:ad:27:29:af:35:bf:
         71:4c:41:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc5NzgxMTAvBgNVBAUTKDUwMEM2MEE3RjY5QzA0QkU4NEZDRjNDNjU3MjNDMDc5
NzBFNUExMjgwHhcNMjUxMjIzMDUxNTI3WhcNMjUxMjMwMDUxNTI3WjAYMRYwFAYD
VQQDDA02OTRhMjU2Zi05OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtnTm233TL1KlGAzyLXFG/l8b8adFsSOCGErbIAVuTuQrEiN6KhG8WBE8CUPC
52PAZPpNcPmGBRGwOLepcBxmSBOrdX4/Oubp+4fkW72zXG+YF+C0DiVzfLFkgI17
3tz5Ha7gXy3CYpdGjG/s7OSJqUgyby+bvUcVVti8G4epojMVFby6G+xnace33Emy
uhjf96tA81p0tA773CTlbMNyZSoPR68L+lGtK5e5Cxw3IWFY/UYcJkUvmjSbbuab
Bk4a2v569NG5qeUmv09pTiEVrmUz8we+4Y4yr+4HtCUW+HRV5AJBqT54tz5AoiZQ
5ZUvP9JjL3+ku0Y/9WtbF6Du2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNM93Ww/
I2UgvZcLRuR5LzW0NSXJMB8GA1UdIwQYMBaAFFAMYKf2nAS+hPzzxlcjwHlw5aEo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzk3OC81NjJCREIyMkVB
NjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JMNkVfUFBHVnlQQWVYRGxv
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VBeGdwX2FjQkw2RV9QUEdWeVBBZVhEbG9TZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Nzk3OC81NjJCREIyMkVBNjgxMUVGQjQxMzVDNjBDNEY5QUUwMi9VQXhncF9hY0JM
NkVfUFBHVnlQQWVYRGxvU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsCAMxxnuN0HVogYDS2WE8m8lUgUebYcLrhX5w5xWlrPQcUMZ4Kcwk
YzZB3uTHy8vxA/tR4VWVJAK8vvXeT3pXFKLNNNUxY4TdtU9JqDOpfVDsyyUQ3o0V
EEFQYL3gP99IDmhJF6Apx74/x4flFiaWuSn3XLKmrsoFO/egILrTxm4SjthuiQIv
bjIv7UgVZBA8c5+ihLjPKjoGThpW5V87SuY716/iu0TkTvMi/AYDPovWxH+yFUz1
hmo6fa0aYS4ZNNVnfVEPUnIRPytBIEteSj4CPIw1467bPJNzm8O+VGsryfnyFdwr
GG3pB5zOkICJIhChbk6tJymvNb9xTEGa
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:40:57 2025 by rpki-client