This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
File:                     UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json)
Hash identifier:          07nRVVXIXyi4oN7SfomLVicUuPs9GJLi10PESxmqxcc=
Subject key identifier:   91:B5:DD:CD:B5:FE:59:67:01:9F:16:97:E0:89:D7:2D:3B:12:77:88
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
Manifest number:          07D8
Signing time:             Thu 18 Dec 2025 20:44:05 +0000
Manifest this update:     Thu 18 Dec 2025 20:44:05 +0000
Manifest next update:     Thu 25 Dec 2025 20:44:05 +0000
Files and hashes:         1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: CMMvtpONyKqMRW80TkPoar/PrjYLdQZlKtyGPxztwCo=)
                          2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: L4y/BSdD8jixu1gcFYl1/VYG0pr8T2e5WODxblJYDOg=)
                          3: B3C29AE8D3C711F09E46353CC4F9AE02.roa (hash: Jb/Harc2a3koeaaZ6I7bDftucuee7kjp7yofjbYSiJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 20:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Dec 18 20:44:05 2025 GMT
            Not After : Dec 25 20:44:05 2025 GMT
        Subject: CN=69446795-ab49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:5a:03:5a:bd:79:d2:f6:dd:6a:a7:4c:d1:
                    5a:fe:57:02:dd:fc:2c:32:d4:c6:69:ac:1c:03:19:
                    e4:df:d7:8d:a0:41:bd:75:f0:1f:13:5d:2d:c0:38:
                    7e:54:c1:8f:a2:8d:75:d4:52:31:95:38:0b:a7:1c:
                    69:31:d4:12:17:97:5a:b9:09:60:ef:72:73:a3:67:
                    7e:eb:06:34:97:5f:b7:7e:84:8d:8f:d8:47:47:6c:
                    87:4e:ba:cb:e1:a0:0e:76:b6:c1:06:98:2c:de:6a:
                    21:d8:fe:b6:4b:53:5e:cf:0b:01:a3:59:6a:1c:72:
                    97:e4:5f:29:a7:ca:e4:23:25:88:26:ee:f5:20:d4:
                    20:b9:29:2d:9d:98:5f:aa:34:d6:a5:c2:d1:d4:f0:
                    1a:17:fe:40:d3:21:70:ec:e3:ca:06:42:d8:65:32:
                    4b:54:8f:78:70:e7:2b:74:e1:65:5a:87:4e:73:d1:
                    89:6c:e0:8b:8e:13:35:93:e3:92:ae:1a:8c:5f:5c:
                    cb:31:35:14:8d:61:1f:2c:95:97:10:0f:08:8e:73:
                    4d:66:68:ed:7f:85:a1:c7:af:dc:3f:3e:e0:d7:ee:
                    4b:af:a8:10:7e:ec:e8:44:18:f1:e9:2c:08:42:33:
                    f6:c5:59:f7:a3:81:e7:9c:95:f4:83:59:59:a5:5b:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B5:DD:CD:B5:FE:59:67:01:9F:16:97:E0:89:D7:2D:3B:12:77:88
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:99:b5:cf:78:ac:b5:4f:15:07:93:69:2e:37:2b:3b:40:
         4f:0b:6b:fd:7b:87:60:2d:3f:d4:96:58:a4:a0:13:bb:80:b9:
         f2:0a:6d:9a:e5:44:a4:2a:ca:39:bf:ca:a4:c1:a2:a0:89:69:
         0e:dd:a0:52:3f:65:ba:20:57:26:ff:33:40:52:77:22:3c:88:
         28:e0:9c:16:eb:f0:ba:00:b5:52:e7:cc:72:7b:19:90:ab:5b:
         05:ba:8c:e3:c5:b7:bf:0d:c7:f7:70:2e:58:d9:ef:d5:c4:5a:
         9c:a7:96:1b:e9:d8:bb:e1:d6:4d:c4:d1:93:c5:c7:14:55:f8:
         7b:5c:3b:f9:a1:17:bb:a1:bd:53:81:f8:e4:51:7d:14:4e:4f:
         31:62:b4:b6:91:2b:25:3e:39:42:6d:b2:27:c3:82:6b:a0:03:
         e3:d3:68:55:b6:d7:7e:68:e3:aa:7a:b5:12:8b:b9:b1:38:31:
         c0:4e:81:14:f9:e3:3d:d1:0f:3f:a2:29:65:f4:d2:03:ae:54:
         79:c6:ff:44:e8:ca:28:26:44:91:47:13:c5:96:6d:c9:3b:37:
         91:d4:7b:d1:31:a1:97:75:a2:c9:1b:d7:0c:ac:9a:7b:3e:be:
         98:53:26:83:ea:25:b9:b9:b9:45:84:aa:ba:a7:cb:4d:6e:d3:
         74:2a:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:55:02 2025 by rpki-client