This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
File:                     UyaKJzal_1VLlAcD83T8NXkijDA.mft (raw, json)
Hash identifier:          T1lkFnav3aNjGA7kY7/wTgii3ApDRmXtv3QOwcDgi/k=
Subject key identifier:   89:D4:02:96:D0:6A:D8:DA:F5:61:D9:55:1D:87:13:29:B2:A7:23:9B
Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30
Certificate issuer:       /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30
Certificate serial:       0A99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
Manifest number:          0A90
Signing time:             Mon 22 Dec 2025 19:01:35 +0000
Manifest this update:     Mon 22 Dec 2025 19:01:34 +0000
Manifest next update:     Mon 29 Dec 2025 19:01:34 +0000
Files and hashes:         1: UyaKJzal_1VLlAcD83T8NXkijDA.crl (hash: wP5aZQTp/OEFkQVfl1zDcLBVu6anaprsAxSnRKlI5Ok=)
                          2: CF072592709211EAB1D2FA0FC4F9AE02.roa (hash: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl
                          rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713 (0xa99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30
        Validity
            Not Before: Dec 22 19:01:34 2025 GMT
            Not After : Dec 29 19:01:34 2025 GMT
        Subject: CN=6949958f-4ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:f4:a1:52:98:66:b2:df:0c:be:04:ef:ef:
                    75:0e:0e:e0:ae:c0:90:00:d1:9f:b3:3b:b9:70:70:
                    5b:87:d4:b3:3c:e9:54:c3:dc:30:be:e5:6d:16:60:
                    e7:d1:2a:bb:8b:d6:fd:24:9e:55:cb:7b:d2:cc:d2:
                    1f:69:52:e8:10:f4:7d:60:7c:2c:6f:4f:10:d6:fb:
                    63:9b:8e:51:3f:6e:53:6c:23:ca:5e:47:28:33:c5:
                    af:49:bd:90:f4:12:cb:d6:e8:e8:89:f2:c1:29:ec:
                    8d:10:27:3d:e2:5f:cb:8c:49:5c:99:41:4f:c0:07:
                    e5:0d:a3:73:e6:6f:3d:0e:e9:4b:5a:6f:71:6e:a0:
                    97:48:a4:b3:20:86:3a:a6:60:c1:4c:0d:1e:0c:34:
                    0f:40:b1:a5:0e:0a:f1:93:29:42:3d:bc:e3:8a:c8:
                    fd:19:4b:4b:c0:14:4e:9b:a0:ed:10:47:26:d7:da:
                    49:0d:d1:1c:50:b1:37:ed:60:00:64:7b:1f:d5:e5:
                    4c:21:45:74:7f:5b:db:35:4a:b6:d5:5d:1b:47:58:
                    d3:3b:f6:ac:ab:d2:0d:cc:57:d7:51:2b:10:64:02:
                    dc:a1:43:54:64:e5:74:6f:d8:fa:da:29:49:81:19:
                    bb:ab:35:11:0b:85:02:ef:8b:9c:1d:6f:f4:0a:67:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:02:96:D0:6A:D8:DA:F5:61:D9:55:1D:87:13:29:B2:A7:23:9B
            X509v3 Authority Key Identifier:
                keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:45:a5:ae:8c:97:90:d9:7c:35:94:68:6c:8c:1d:02:ab:bc:
         6b:d2:f2:8f:94:eb:a8:1d:54:ca:0d:17:ac:a4:ff:0a:a2:f4:
         35:3f:4f:a4:c1:6f:e5:b6:5b:ea:a8:41:43:08:7e:c4:e3:c9:
         61:19:d6:3d:ac:d3:77:a5:85:67:76:ba:ba:66:a0:50:80:e9:
         be:d1:5b:0f:6b:0f:99:1c:b8:db:7e:c8:b4:e4:2e:95:2e:bf:
         3c:ef:1b:ca:e4:96:2b:5e:ad:fa:ea:c2:b9:03:0e:18:d3:d8:
         3f:e7:32:37:8a:39:9e:69:7c:4b:dd:01:f1:2e:c7:b8:cf:9a:
         2d:43:58:2a:8f:a1:ba:09:a6:5b:c0:15:05:5e:fb:2c:39:7e:
         e1:dd:f1:58:c0:01:62:de:f0:57:f4:b6:6d:58:5b:c1:79:84:
         ec:d7:07:db:b7:d2:7e:6e:f8:99:f4:2d:b4:c2:ff:b3:58:56:
         f0:ba:1e:a4:d0:99:88:5e:76:e7:db:ac:85:67:19:6d:c5:d0:
         43:2a:4a:06:ae:9a:16:55:3d:1a:7f:b7:05:fd:39:62:02:a3:
         f8:44:96:bc:0d:35:28:b8:61:1e:d3:c4:62:2c:fc:f2:2a:0a:
         e3:72:01:e8:59:f8:21:0e:3f:a0:a4:cc:83:4b:4d:a3:fd:02:
         eb:60:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:39 2025 by rpki-client