This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
File:                     uvgLngYKGXeZFoErAACdd3OoSwA.mft (raw, json)
Hash identifier:          Whj+8LxqD7pAB2v+S9gOFuN2FmZdXMIPFj5EvP1cdJA=
Subject key identifier:   63:2D:B4:14:B3:12:0B:8F:6B:5D:FC:02:D1:12:22:42:2E:AB:58:AA
Authority key identifier: BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00
Certificate issuer:       /CN=A91D73BB/serialNumber=BAF80B9E060A19779916812B00009D7773A84B00
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
Manifest number:          0147
Signing time:             Tue 23 Dec 2025 03:15:54 +0000
Manifest this update:     Tue 23 Dec 2025 03:15:54 +0000
Manifest next update:     Tue 30 Dec 2025 03:15:54 +0000
Files and hashes:         1: uvgLngYKGXeZFoErAACdd3OoSwA.crl (hash: 6TPWIr/dFILD9+K0xd90zoswmaTuwvFZGHxnU8Hso0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=BAF80B9E060A19779916812B00009D7773A84B00
        Validity
            Not Before: Dec 23 03:15:54 2025 GMT
            Not After : Dec 30 03:15:54 2025 GMT
        Subject: CN=694a096a-b364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:7a:e7:c9:14:d3:27:96:60:17:d7:31:f9:
                    fd:ae:c4:75:31:95:c7:d4:cf:b5:4e:14:ec:2f:f6:
                    71:81:ab:d5:a3:aa:8e:fa:0b:6d:98:2b:86:6a:98:
                    4c:b9:03:dc:fc:17:9c:6e:2f:e0:7a:bc:11:70:7f:
                    5f:43:53:85:dd:c1:3f:0d:ab:8c:25:38:5a:0d:8f:
                    e7:fe:88:76:2f:d3:db:5a:da:60:68:ab:50:21:de:
                    75:99:af:e9:53:00:22:89:f0:12:6c:4e:c8:47:b9:
                    26:cf:f9:1d:cf:c7:2d:c7:f0:93:4c:76:5c:5e:e4:
                    4f:25:7e:66:31:62:df:66:a4:67:74:bd:c7:46:82:
                    54:64:f8:f7:44:de:7b:88:f1:89:6c:e0:56:88:63:
                    29:3b:8a:4c:54:fa:7d:8b:ca:6c:94:7f:ba:46:37:
                    b4:7b:20:fc:74:e2:77:16:c8:ad:30:04:a5:32:dc:
                    03:de:61:8e:1d:c0:6e:17:a9:33:6f:22:49:51:b2:
                    90:2d:0a:28:12:35:19:9a:a8:fb:b7:a5:11:3b:88:
                    de:c0:ba:b8:14:7d:de:c5:a5:b9:6b:2d:40:a0:36:
                    9d:81:e2:d6:b9:9f:24:d7:18:55:e2:03:93:ab:7b:
                    82:44:28:d1:3e:45:49:80:a2:92:d7:ad:bd:34:26:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2D:B4:14:B3:12:0B:8F:6B:5D:FC:02:D1:12:22:42:2E:AB:58:AA
            X509v3 Authority Key Identifier:
                keyid:BA:F8:0B:9E:06:0A:19:77:99:16:81:2B:00:00:9D:77:73:A8:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvgLngYKGXeZFoErAACdd3OoSwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/97CF0966E65211EEBEE9A787C4F9AE02/uvgLngYKGXeZFoErAACdd3OoSwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:ba:8f:2d:09:95:e8:ba:bc:1c:48:6e:30:c9:fb:8d:e2:
         35:9f:54:39:8a:ae:4f:91:03:01:9a:b1:57:bb:e0:2e:d2:6f:
         ac:c2:f1:a3:db:ea:ff:a0:d9:98:1e:59:52:bf:51:7f:58:5a:
         fe:cc:58:a6:19:7b:36:ed:ec:61:28:da:64:2f:a3:21:ef:69:
         3d:88:9d:3d:b4:35:f5:bf:1c:22:76:31:a9:fa:79:95:f7:06:
         4b:5e:fe:36:26:27:1e:23:ea:62:58:27:ff:06:7c:24:13:eb:
         02:cd:42:73:34:72:7b:aa:05:ae:39:bd:88:eb:b8:27:53:27:
         86:b2:3f:71:a2:84:ba:40:74:81:9d:df:c6:f0:6a:93:4e:86:
         2e:cf:75:f3:66:f8:f3:b0:b3:46:32:a5:3f:0b:b1:81:b6:63:
         a1:84:c3:53:69:f5:2d:45:c3:68:f3:09:1e:3b:09:f9:74:80:
         d9:59:4f:33:0b:a9:39:de:f7:97:a0:09:33:1a:a2:b4:49:cc:
         75:78:00:64:2b:02:b5:97:4d:fa:14:39:eb:96:e6:86:e6:d6:
         f1:a1:c6:6d:f2:3c:1d:9d:1b:2a:aa:57:9a:a8:af:8d:35:d5:
         9d:1a:c0:31:a0:81:4a:97:e6:e9:e0:a4:a8:ed:6f:e0:08:9f:
         c1:20:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:19 2025 by rpki-client