This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
File:                     UEMacUvIutzoUZ5LmRR-FR7fd5c.mft (raw, json)
Hash identifier:          /f+peyikUOsFNlTV6j4v861/su7G+kYqb+sd9o6WhLQ=
Subject key identifier:   57:05:E6:BF:DF:13:82:D2:D4:DB:99:D0:E3:1C:40:51:5C:53:51:08
Authority key identifier: 50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97
Certificate issuer:       /CN=A91DA289/serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
Manifest number:          0688
Signing time:             Thu 18 Dec 2025 21:51:48 +0000
Manifest this update:     Thu 18 Dec 2025 21:51:47 +0000
Manifest next update:     Thu 25 Dec 2025 21:51:47 +0000
Files and hashes:         1: UEMacUvIutzoUZ5LmRR-FR7fd5c.crl (hash: PQsfQp8rYKY0DNSRZRM38sYGeFwN/f0KcbpuWtPnQIg=)
                          2: 0BE0F63C9CBB11EBA4731E19C4F9AE02.roa (hash: ln0lvafoMsf2mDlhqtsb54uvMwde1qgk9VtDAAnL3YY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl
                          rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA289, serialNumber=50431A714BC8BADCE8519E4B99147E151EDF7797
        Validity
            Not Before: Dec 18 21:51:47 2025 GMT
            Not After : Dec 25 21:51:47 2025 GMT
        Subject: CN=69447773-d905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:b3:4c:a4:c6:da:c6:81:aa:fa:ce:ac:39:
                    2a:bc:bb:89:d8:e1:a5:e6:16:0a:fd:c5:59:fc:7f:
                    b0:ef:28:3f:58:c3:0c:b1:0f:ac:85:ca:11:16:f9:
                    c6:e4:71:45:da:4e:0e:78:4c:be:85:22:7e:02:78:
                    11:c2:a2:ae:d8:7d:32:02:4b:44:03:b2:05:43:99:
                    49:f6:e8:67:37:b0:59:70:87:8d:3b:2f:89:11:56:
                    dd:31:50:bb:91:fc:43:a8:f0:18:bc:60:7b:1a:b5:
                    39:d4:e1:b6:6d:ab:0c:33:ca:13:a2:cc:43:4c:5a:
                    28:cc:17:f0:92:8e:2e:32:c0:d2:71:6b:a2:b1:99:
                    d1:19:0a:33:aa:59:92:40:c2:78:e6:ec:9c:43:39:
                    05:9c:d6:b8:75:28:75:dc:55:6d:04:94:77:db:18:
                    05:42:31:f8:b2:48:3c:50:ae:51:56:2f:7f:88:ff:
                    6f:16:89:34:93:77:a5:df:f1:db:54:38:a6:22:29:
                    60:7f:5c:b2:6b:e0:37:76:c2:37:24:60:b4:f9:1d:
                    39:90:fd:63:a1:25:8a:0b:55:94:1a:b5:a4:b3:ab:
                    d3:b3:79:c9:38:8e:54:08:f3:52:52:f9:fe:16:71:
                    84:cd:86:00:40:18:d6:73:43:fc:bb:b4:a4:5b:d1:
                    12:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:E6:BF:DF:13:82:D2:D4:DB:99:D0:E3:1C:40:51:5C:53:51:08
            X509v3 Authority Key Identifier:
                keyid:50:43:1A:71:4B:C8:BA:DC:E8:51:9E:4B:99:14:7E:15:1E:DF:77:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UEMacUvIutzoUZ5LmRR-FR7fd5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA289/E01B05449CB811EBAF1BA315C4F9AE02/UEMacUvIutzoUZ5LmRR-FR7fd5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:15:73:41:0e:a0:c0:c7:21:df:c6:19:15:7e:70:70:6c:
         98:87:70:c5:37:9f:e9:9b:fc:50:80:f9:a2:ea:cf:3c:d0:53:
         ee:5a:73:73:d5:25:43:e1:6d:04:66:27:ed:43:ed:80:96:e2:
         d5:04:04:4e:b8:7c:c5:c4:eb:72:dd:94:75:80:3e:8b:13:4c:
         79:17:1d:92:e9:f1:6b:75:85:92:e7:b8:4e:1d:f1:2b:61:2e:
         9c:7a:24:32:f5:24:82:19:55:3f:0c:bc:2a:38:f8:eb:a9:7d:
         65:c2:73:a0:72:2f:c1:dd:b7:60:f8:5b:16:2a:6a:91:e6:77:
         74:b8:58:3b:7c:c6:90:42:8f:12:f5:3a:88:e0:66:9c:47:3b:
         a7:23:b7:44:7c:d2:3a:e2:9b:46:a0:0a:2a:23:72:e8:98:36:
         ab:50:e8:61:cf:50:e8:1f:8b:84:f7:53:9d:05:8d:1d:bb:c8:
         1d:fb:12:e9:3d:88:cf:af:49:d5:58:79:f7:da:a2:15:c9:b5:
         78:55:a6:bd:63:4e:65:07:9b:ba:73:db:a6:c8:2b:c0:fe:5b:
         c9:f9:af:3d:14:bc:85:d4:d4:6e:a4:9c:10:cf:41:ac:d6:64:
         39:85:8a:63:39:1a:db:93:5a:28:15:c6:e8:f7:f0:24:73:c4:
         2d:db:15:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyODkxMTAvBgNVBAUTKDUwNDMxQTcxNEJDOEJBRENFODUxOUU0Qjk5MTQ3RTE1
MUVERjc3OTcwHhcNMjUxMjE4MjE1MTQ3WhcNMjUxMjI1MjE1MTQ3WjAYMRYwFAYD
VQQDDA02OTQ0Nzc3My1kOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoRuzTKTG2saBqvrOrDkqvLuJ2OGl5hYK/cVZ/H+w7yg/WMMMsQ+shcoRFvnG
5HFF2k4OeEy+hSJ+AngRwqKu2H0yAktEA7IFQ5lJ9uhnN7BZcIeNOy+JEVbdMVC7
kfxDqPAYvGB7GrU51OG2basMM8oTosxDTFoozBfwko4uMsDScWuisZnRGQozqlmS
QMJ45uycQzkFnNa4dSh13FVtBJR32xgFQjH4skg8UK5RVi9/iP9vFok0k3el3/Hb
VDimIilgf1yya+A3dsI3JGC0+R05kP1joSWKC1WUGrWks6vTs3nJOI5UCPNSUvn+
FnGEzYYAQBjWc0P8u7SkW9ESaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcF5r/f
E4LS1NuZ0OMcQFFcU1EIMB8GA1UdIwQYMBaAFFBDGnFLyLrc6FGeS5kUfhUe33eX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI4OS9FMDFCMDU0NDlD
QjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0em9VWjVMbVJSLUZSN2Zk
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VFTWFjVXZJdXR6b1VaNUxtUlItRlI3ZmQ1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTI4OS9FMDFCMDU0NDlDQjgxMUVCQUYxQkEzMTVDNEY5QUUwMi9VRU1hY1V2SXV0
em9VWjVMbVJSLUZSN2ZkNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCehRVzQQ6gwMch38YZFX5wcGyYh3DFN5/pm/xQgPmi6s880FPuWnNz
1SVD4W0EZiftQ+2AluLVBAROuHzFxOty3ZR1gD6LE0x5Fx2S6fFrdYWS57hOHfEr
YS6ceiQy9SSCGVU/DLwqOPjrqX1lwnOgci/B3bdg+FsWKmqR5nd0uFg7fMaQQo8S
9TqI4GacRzunI7dEfNI64ptGoAoqI3LomDarUOhhz1DoH4uE91OdBY0du8gd+xLp
PYjPr0nVWHn32qIVybV4Vaa9Y05lB5u6c9umyCvA/lvJ+a89FLyF1NRupJwQz0Gs
1mQ5hYpjORrbk1ooFcbo9/Akc8Qt2xWh
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:43:43 2025 by rpki-client