This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
File:                     UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft (raw, json)
Hash identifier:          KHHrFi6Fz/Yz6S/uJiudY2ZGKB2zE+dl/mtTtQAQ4t0=
Subject key identifier:   C8:AB:A3:46:6E:15:9B:CC:EF:E2:81:D6:7B:06:E4:60:F1:C5:C3:A0
Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5
Certificate issuer:       /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
Manifest number:          03ED
Signing time:             Sat 20 Dec 2025 23:46:34 +0000
Manifest this update:     Sat 20 Dec 2025 23:46:34 +0000
Manifest next update:     Sat 27 Dec 2025 23:46:34 +0000
Files and hashes:         1: UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl (hash: aSD2t6v5otKMVRPb2Ny2Vw2iDv1S8dUAKNnzpnbADdM=)
                          2: 713001A0A35811EC88C42869C4F9AE02.roa (hash: DNm/cKBnOwMLtVf8PNiul90A2LNN5D/9x28AaUpSyDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
        Validity
            Not Before: Dec 20 23:46:34 2025 GMT
            Not After : Dec 27 23:46:34 2025 GMT
        Subject: CN=6947355a-3dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:ef:55:0a:1d:6a:fd:05:96:72:56:6b:2c:
                    67:ec:fe:78:85:de:f7:fa:a8:4f:6e:dc:25:42:50:
                    93:b6:a2:44:aa:84:bf:ff:85:13:58:3e:3b:2b:be:
                    4c:b1:5d:29:18:90:4a:45:1d:02:cf:ef:72:98:c9:
                    58:1b:1c:0f:9d:14:90:45:4a:96:3d:cf:3c:d7:1e:
                    b1:a0:73:61:2c:00:09:2e:a3:49:8c:82:2d:3f:3d:
                    c9:5a:12:72:7a:4e:ea:b8:f1:1c:45:7c:be:b8:49:
                    82:c1:11:3a:31:6b:c1:38:d9:46:80:0b:1b:d1:31:
                    ce:85:9f:c1:44:27:98:6c:52:e0:fb:8e:93:55:bf:
                    40:b7:5e:8a:20:41:aa:05:01:05:05:4d:38:62:f8:
                    87:66:7f:28:a8:44:a6:29:47:c7:1c:b6:fc:aa:70:
                    4b:be:6c:98:97:36:fd:95:0a:2a:13:50:18:81:04:
                    61:f1:53:64:8c:a5:ac:89:a6:5a:83:6b:cd:b9:72:
                    b2:4c:38:f6:50:74:24:ff:19:6f:e0:5f:3e:bd:08:
                    d6:52:24:1c:cd:f2:64:a0:04:3d:fb:a9:12:a1:de:
                    d5:7b:b6:db:dd:ec:ec:fa:a6:5f:f4:66:4e:ba:99:
                    bb:e6:18:75:58:37:94:15:8f:df:1b:c7:22:98:07:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:A3:46:6E:15:9B:CC:EF:E2:81:D6:7B:06:E4:60:F1:C5:C3:A0
            X509v3 Authority Key Identifier:
                keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:3d:ba:e5:4d:75:0a:2e:5c:58:61:df:17:7e:d9:b1:19:
         83:13:33:3e:eb:fe:55:d2:b6:4d:9c:42:5d:8b:00:b9:a2:cb:
         22:46:6e:12:d3:40:08:62:5d:f2:51:48:b9:d1:ca:03:55:b5:
         d4:30:f8:ae:d7:36:ad:29:54:34:9f:48:b6:3a:37:d2:1a:f5:
         bf:80:56:6e:55:f7:81:94:28:d9:4f:9b:ab:d8:ad:d8:5f:16:
         16:80:3a:4d:3a:4e:51:14:63:00:bb:4d:a6:ee:c3:76:36:fc:
         80:d5:e2:75:5d:c9:df:06:ba:0f:f4:db:57:8b:0e:c0:cb:1d:
         fe:fc:fa:79:c0:75:f5:cf:5b:32:8b:0c:7a:4c:ab:8b:cd:52:
         f1:0b:e9:20:f7:8d:a3:ab:87:76:c9:02:29:36:fe:04:33:28:
         a3:60:07:fd:8e:df:57:ea:0e:f0:d2:37:79:82:f3:3b:51:85:
         94:ba:59:6b:01:73:41:4a:da:a1:94:33:c9:c9:33:4b:69:ca:
         18:48:1b:01:7e:e1:55:20:9e:12:65:6e:21:bf:d2:8d:bf:ae:
         ed:54:cf:ee:da:9b:bc:2e:66:d2:98:1f:90:40:8f:64:10:24:
         5f:8f:df:1f:f0:e5:e2:d7:ee:b9:1a:a8:83:82:18:4b:cd:18:
         b3:98:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:49:26 2025 by rpki-client