This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
File:                     uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft (raw, json)
Hash identifier:          Lm2l6WVv77F5hh9gG2PBq8WpupN4W1CpfjrDOsfOwIU=
Subject key identifier:   38:7C:84:5A:F5:FF:79:C0:26:6A:1F:7E:A6:7A:6A:74:AC:66:15:D3
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
Manifest number:          57
Signing time:             Wed 03 Dec 2025 01:33:17 +0000
Manifest this update:     Wed 03 Dec 2025 01:33:16 +0000
Manifest next update:     Wed 10 Dec 2025 01:33:16 +0000
Files and hashes:         1: uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl (hash: VKhfqJg2VfFtiw67HfiLg1/DAlWggornZo5gEVP6Z44=)
                          2: 7CC500A86DEC11F0BD1BF429C4F9AE02.roa (hash: an5FBHdExL03BomoR3qCdi2JEtigEIvsA7HXj74aq6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 01:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Dec  3 01:33:16 2025 GMT
            Not After : Dec 10 01:33:16 2025 GMT
        Subject: CN=692f935c-d173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:74:a5:be:47:ec:1b:71:34:f0:d1:fe:c0:
                    c3:0d:1e:d3:45:61:2f:e2:90:71:f6:19:6f:7c:d3:
                    37:36:38:82:5b:23:eb:8e:3f:67:55:0c:c6:14:5e:
                    d3:54:0c:61:f5:90:8b:a1:53:f0:87:e2:4b:70:59:
                    9d:f8:b3:00:ab:f8:ce:d8:f2:c9:dd:3a:de:1d:52:
                    0f:e7:82:16:bb:a8:de:b6:9a:47:43:a5:9c:d5:76:
                    31:f3:95:80:b1:1b:dc:5c:c5:74:9d:1f:04:85:b4:
                    5a:1d:bf:e6:cd:e7:ea:3f:86:80:e8:75:e7:79:fa:
                    1d:2c:1e:dd:b9:ab:6e:6c:85:04:1c:77:95:d5:83:
                    7e:ba:84:ed:d3:c4:dd:de:b3:51:b4:c1:85:89:48:
                    d8:c7:cb:68:82:4b:8b:c1:59:0d:8e:f1:7c:48:78:
                    ac:5c:13:fe:df:37:2d:f7:97:92:8c:1b:b1:02:ef:
                    9f:a4:40:13:df:15:54:e0:a3:87:5d:de:2d:c2:1d:
                    59:9f:41:e5:d4:86:14:9b:d1:88:de:11:31:1e:1e:
                    a0:14:88:55:9b:a7:be:ab:21:f2:68:b3:a1:7c:18:
                    b4:0a:38:45:d4:95:a2:dc:fe:cc:a3:e9:7a:91:76:
                    e7:0f:fc:7c:25:15:29:83:74:98:18:58:cd:40:98:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7C:84:5A:F5:FF:79:C0:26:6A:1F:7E:A6:7A:6A:74:AC:66:15:D3
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:30:d8:2f:34:72:fa:80:59:58:50:3f:10:27:3f:79:4b:
         5a:c7:5b:fa:75:82:41:cd:1d:41:c7:79:ba:6b:0c:5f:0d:2c:
         d7:66:fd:af:16:ea:24:bc:b6:1c:cf:3a:5c:27:9e:bd:d4:3b:
         54:96:64:d3:b6:46:07:9c:73:32:10:4a:28:f0:68:e7:37:da:
         1d:2f:19:c1:80:df:4e:a8:37:a1:35:90:3d:f4:97:ea:d5:4b:
         67:05:ca:f9:d1:78:9e:82:81:9c:62:d2:b4:f4:ee:48:83:c5:
         ac:1d:79:00:d3:ff:87:26:d2:74:ac:c6:7f:40:62:c4:8f:4e:
         db:3d:e8:4b:3b:d8:4b:67:4c:d3:5e:3c:f2:52:21:af:77:02:
         c4:13:65:75:18:b0:e4:01:7c:3f:df:f1:9c:2f:fc:a5:0f:d7:
         f8:d4:98:ae:bc:f0:5e:df:54:36:eb:d3:19:81:9c:69:4d:d8:
         63:d5:45:51:ed:e1:d7:a1:8e:53:86:ac:71:94:95:37:ea:3d:
         d7:3a:5b:de:b8:1c:e9:ff:f8:b8:60:97:10:cb:4b:85:d4:bf:
         7b:5e:2e:0b:5a:c6:fc:e3:d3:87:95:e3:26:05:45:ad:5f:8c:
         c5:d8:2e:de:64:96:84:e6:99:d7:ca:25:ec:15:7e:5e:2d:46:
         64:40:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:20:36 2025 by rpki-client