This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
File:                     uOVJaYlT9l5x-4S20zjAisF4Glo.mft (raw, json)
Hash identifier:          BK/aIUfMsR0JeC7w2ehgBU6NMNO76mttCIegLlqFEiA=
Subject key identifier:   C5:63:0E:CF:D9:4A:8F:BF:57:4A:8B:A2:B9:2B:4B:39:72:9C:43:99
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       0A06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
Manifest number:          09EB
Signing time:             Thu 18 Dec 2025 19:30:10 +0000
Manifest this update:     Thu 18 Dec 2025 19:30:10 +0000
Manifest next update:     Thu 25 Dec 2025 19:30:10 +0000
Files and hashes:         1: uOVJaYlT9l5x-4S20zjAisF4Glo.crl (hash: So1bP8P7nZ2df4PCV2yeT63bnAKpieL5p6ititpZJVc=)
                          2: 49DDFE0682F511F0B6DCE147C4F9AE02.roa (hash: XUn3CIuvEXS6KPUlF+3czLodjUH67iWEKRvo5E16IQw=)
                          3: 658C5D24A76B11F0A66F9138C4F9AE02.roa (hash: S630ws9prbiv+X73lkiriOtUneLfFYuwhIIx2uOXGSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
                          rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2566 (0xa06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Dec 18 19:30:10 2025 GMT
            Not After : Dec 25 19:30:10 2025 GMT
        Subject: CN=69445642-b021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:e3:db:f0:69:53:a4:e9:4d:b1:88:12:b3:
                    a4:a3:0e:41:a4:1c:e4:7b:c5:8e:d9:b2:f0:88:71:
                    16:6d:d8:84:4b:4e:d8:c3:dc:8b:aa:8b:94:0f:9b:
                    df:a0:6a:05:2d:78:8e:4b:cf:22:76:4b:cd:59:27:
                    24:93:2d:c9:2d:1d:9d:7f:39:01:64:6b:14:83:4b:
                    f7:55:60:f6:32:38:c6:19:2e:06:76:73:5c:01:0b:
                    1e:ee:ef:47:07:83:78:09:c3:dc:ad:aa:48:1a:68:
                    89:6e:79:97:9c:ea:e5:50:6f:88:b4:2e:fe:18:e2:
                    a8:ae:97:c4:6a:a9:9b:13:67:b2:e3:6e:8a:39:db:
                    be:34:44:a2:0c:23:93:36:52:89:4c:5c:2c:77:21:
                    d2:dc:14:d4:b4:1b:97:32:ba:43:b5:e6:94:a6:6b:
                    3f:bd:ec:f2:82:0f:54:ca:0b:25:51:25:f8:88:e9:
                    57:62:03:b9:da:c1:12:73:1e:61:e4:99:e1:00:fa:
                    39:8d:ea:35:60:23:3b:d2:ef:01:95:d5:79:9c:2b:
                    ef:9c:c6:7b:66:2f:1d:94:59:bf:b2:d2:61:8e:06:
                    17:63:30:6c:41:1b:57:db:ad:02:b5:80:1c:e1:75:
                    fc:a4:30:91:a5:b1:d7:ba:ed:9b:ba:b3:d4:e2:48:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:0E:CF:D9:4A:8F:BF:57:4A:8B:A2:B9:2B:4B:39:72:9C:43:99
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:fa:57:93:24:7e:d8:53:7e:27:d1:05:88:b8:5b:67:72:
         39:ac:42:dd:4f:0b:09:a3:51:5f:95:33:5c:4d:6b:8c:8e:1e:
         8f:2c:71:41:52:ea:75:64:e1:d4:b7:fa:f1:24:5f:37:db:74:
         74:b8:06:3d:5c:5e:f6:44:6c:89:3f:35:6d:f4:4a:0c:e0:db:
         d2:8a:b4:09:e5:c9:65:b6:2b:e1:39:66:fe:13:97:4c:f3:d7:
         62:37:13:24:e6:e1:65:7f:62:62:1b:9f:c4:8c:04:c6:be:18:
         44:1f:b0:b4:7a:3a:e9:b1:2f:57:d4:25:85:5e:0c:5a:57:26:
         11:a0:47:f6:6c:02:33:d4:3d:96:2e:a5:54:63:d1:49:3b:a6:
         7d:76:7b:b6:1b:2a:59:70:21:28:3b:ef:a6:7b:38:29:81:27:
         70:df:ac:c8:65:ba:05:3e:18:08:9c:06:0b:6c:78:a1:ca:cf:
         de:03:4a:b4:29:19:ec:40:22:3f:71:c1:4a:56:32:83:9c:51:
         a8:bc:ce:c1:eb:fc:21:0c:74:2e:f9:ae:52:9f:67:0a:61:44:
         36:ab:72:38:1f:60:4c:91:1f:51:3e:99:79:03:25:58:e7:9d:
         22:6e:90:d5:74:de:4e:f6:d6:57:c7:81:dd:fb:d3:da:d8:77:
         a4:a3:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:12:54 2025 by rpki-client