This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
File:                     aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json)
Hash identifier:          uvqeXi7fvJnG9eulFbRlZovwL2wQCMBEArnzoh/WPZg=
Subject key identifier:   8B:3E:1C:58:2E:3B:C1:54:FF:B1:56:B0:BB:89:C0:94:29:4C:8F:73
Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC
Certificate issuer:       /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
Certificate serial:       34ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
Manifest number:          34ED
Signing time:             Mon 22 Dec 2025 14:59:57 +0000
Manifest this update:     Mon 22 Dec 2025 14:59:57 +0000
Manifest next update:     Mon 29 Dec 2025 14:59:57 +0000
Files and hashes:         1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: QNxHB2nZmtApJYtpVq1rJq8rmjJ/rEfclID1q1uAiW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl
                          rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 14:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13549 (0x34ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7426, serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
        Validity
            Not Before: Dec 22 14:59:57 2025 GMT
            Not After : Dec 29 14:59:57 2025 GMT
        Subject: CN=69495ced-49b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:78:a3:45:ab:d4:90:86:99:47:8e:e4:c9:
                    71:30:57:80:66:2b:ba:71:da:d9:0f:36:da:68:65:
                    9a:86:86:d8:2a:f0:ca:12:1f:13:78:2f:2a:84:fb:
                    2e:be:8d:26:40:e1:ea:09:1d:c7:b6:c2:06:cc:90:
                    b1:b7:f4:eb:31:85:fd:c6:96:cf:f9:95:8b:6b:34:
                    37:a3:78:92:9b:b7:3d:4a:2f:ae:2b:90:8c:db:4c:
                    eb:fe:be:44:af:45:45:82:83:aa:4e:0a:86:24:a7:
                    d4:d5:7c:10:96:bd:46:3b:f1:a4:2d:2f:7f:e8:97:
                    2a:33:3a:de:b0:47:d7:d8:c6:71:ef:f0:b8:b5:a4:
                    6f:65:fc:33:72:9c:c6:cc:ab:2e:21:2a:47:96:8a:
                    47:b6:8d:25:4f:fc:d0:5e:10:f6:33:37:9b:ac:e1:
                    2a:9c:72:82:29:4e:ca:aa:bd:3f:44:4d:46:3d:d5:
                    43:e1:94:c9:5d:b4:79:4d:07:3f:91:db:b3:f1:8b:
                    19:a8:82:1d:11:e5:d9:05:ab:ab:c1:fa:c2:11:c4:
                    d2:e3:cf:89:8b:1c:e4:30:98:10:9c:3a:3e:4a:51:
                    e2:96:7a:76:e5:66:cc:71:e2:e9:af:f2:e4:82:3d:
                    3b:06:92:01:05:36:1f:5c:fb:8d:d6:51:bf:f8:15:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:1C:58:2E:3B:C1:54:FF:B1:56:B0:BB:89:C0:94:29:4C:8F:73
            X509v3 Authority Key Identifier:
                keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:9a:48:71:7c:8f:52:6f:d0:7f:cf:b6:16:e2:51:0b:67:
         af:43:5d:1d:2d:cd:76:1b:a2:1a:db:2f:ff:24:1a:99:8b:b1:
         ec:9e:4b:54:56:c2:fa:2b:ca:a4:d0:ef:f1:55:d8:4a:ac:aa:
         31:55:72:45:73:2f:ac:28:54:46:7a:2e:ae:5d:d5:5d:95:da:
         4d:6d:97:c3:f9:72:be:08:f5:14:b9:2f:99:09:a6:66:2b:13:
         23:93:a2:6f:15:5e:1d:2c:00:f4:16:de:35:ce:e8:87:c5:f0:
         35:72:0d:1e:e7:88:74:1d:d4:3e:06:1a:30:db:37:f6:a8:9b:
         38:4f:8a:a5:29:2a:f1:aa:63:b6:7b:d3:33:96:35:34:f9:1c:
         25:cc:ab:44:eb:36:87:e6:2a:4e:62:e3:5e:6d:15:61:86:c4:
         c6:63:69:f8:42:b1:32:5e:b0:ff:ef:28:d0:47:e2:57:13:68:
         24:06:2a:2e:b4:93:29:9c:07:e1:ff:3b:c4:4b:21:f4:9c:d9:
         b1:b4:f8:5b:8f:f6:81:e6:56:43:90:1b:2c:5f:c5:eb:61:94:
         8d:b1:0f:4c:73:1b:9f:61:5a:8c:1f:3b:20:e1:41:33:a0:63:
         8e:eb:0c:ee:63:9d:25:9f:e9:2e:c4:69:0e:81:74:c7:01:07:
         07:8c:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:06:53 2025 by rpki-client