This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
File:                     uK3V-E0RutdH--lY1GutO6kTGQM.mft (raw, json)
Hash identifier:          ga5C7+0J9OTcnNmbZYnuKHGd56XoakBhWy3IK1GHtBg=
Subject key identifier:   EA:B8:4A:B5:81:33:7F:95:09:8E:7E:3B:51:E5:89:EE:71:A5:4D:BF
Authority key identifier: B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03
Certificate issuer:       /CN=A91F86D2/serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
Manifest number:          03EA
Signing time:             Mon 22 Dec 2025 23:36:25 +0000
Manifest this update:     Mon 22 Dec 2025 23:36:24 +0000
Manifest next update:     Mon 29 Dec 2025 23:36:24 +0000
Files and hashes:         1: uK3V-E0RutdH--lY1GutO6kTGQM.crl (hash: ibrYaI6xsZ/w3p8xaNbrOHQ6UTeDfwQX7XbAvvVBLFg=)
                          2: 1A377B907A7811EF9D5ED47CC4F9AE02.roa (hash: 2FKrneZIYdwek2LQDep+qpyFwMcW7v1PTDAdjyafS0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl
                          rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F86D2, serialNumber=B8ADD5F84D11BAD747FBE958D46BAD3BA9131903
        Validity
            Not Before: Dec 22 23:36:24 2025 GMT
            Not After : Dec 29 23:36:24 2025 GMT
        Subject: CN=6949d5f9-a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:2a:bd:8c:a1:81:8f:b1:06:d7:d3:5a:45:
                    da:ef:cf:5e:66:0b:bb:1e:82:aa:9b:45:73:5d:c4:
                    a7:0f:93:0a:6a:1d:0b:c5:69:e2:33:41:f7:27:0a:
                    00:9b:ba:53:8c:da:be:af:8f:eb:d4:b7:ee:66:6a:
                    59:6e:09:6b:89:74:e2:73:40:29:e8:5e:2e:af:d2:
                    91:82:f4:39:d4:19:17:55:c2:28:d1:80:5c:53:34:
                    a1:de:36:8a:c2:05:cb:dc:a3:78:0c:47:d9:4c:28:
                    4d:ef:a9:8f:4f:2e:1d:ff:e8:3a:3d:26:50:e1:91:
                    b2:99:3c:cf:09:41:0b:12:2f:cf:b5:db:8e:e6:5d:
                    36:10:4a:94:8e:5b:bb:68:52:1a:ae:8f:ee:61:ae:
                    44:fa:45:79:92:2b:4e:35:f9:0b:82:a6:3c:6b:37:
                    6c:70:0d:c5:f7:40:20:5b:6a:88:c0:7d:82:09:8c:
                    ff:c7:ec:ac:bf:3e:0c:e1:b1:57:9d:e8:6f:2b:c6:
                    bc:cf:05:10:d5:4b:25:3e:1e:b1:b4:b2:3a:b0:92:
                    7b:a7:6e:77:3b:36:f7:8f:31:77:11:79:1b:7b:f0:
                    d2:4f:46:f4:f0:ad:90:e4:ce:5f:4d:3a:a4:d5:ec:
                    41:76:54:63:10:5a:23:9b:26:24:25:25:52:64:c7:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B8:4A:B5:81:33:7F:95:09:8E:7E:3B:51:E5:89:EE:71:A5:4D:BF
            X509v3 Authority Key Identifier:
                keyid:B8:AD:D5:F8:4D:11:BA:D7:47:FB:E9:58:D4:6B:AD:3B:A9:13:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uK3V-E0RutdH--lY1GutO6kTGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F86D2/39DDCCDCA97511ECBA5BDC33C4F9AE02/uK3V-E0RutdH--lY1GutO6kTGQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:66:f0:68:f0:bc:80:b1:3c:fc:6e:bf:80:ea:3e:78:f6:3b:
         fd:45:7a:4e:8c:a1:fe:a2:aa:8f:23:f8:d4:0c:96:44:3f:d2:
         b8:cc:3f:34:ef:67:f6:04:23:92:96:ad:0e:15:b7:c9:76:82:
         d6:fb:59:15:fc:b4:4f:7f:48:e2:23:ec:2f:7c:7a:6a:0d:bd:
         09:41:fa:10:6c:f8:76:bf:90:9c:9e:7c:b8:05:bf:df:11:88:
         46:40:01:b5:2f:4c:f0:bb:2a:fe:22:db:e9:51:d5:b4:c8:61:
         a6:d8:8e:71:2f:f8:38:07:5e:fd:22:fc:92:4f:e1:ef:57:01:
         fa:2d:82:ae:86:af:40:c0:3f:5c:b0:99:08:fc:fb:ee:92:d5:
         b0:5e:c7:40:28:39:08:46:30:cd:83:e2:7c:02:25:cb:fc:ad:
         62:71:d3:36:75:87:9a:c7:18:09:2c:bb:c0:91:a1:ba:75:89:
         7f:bf:da:26:4b:3f:f4:82:11:e0:f6:3b:b0:23:89:76:d9:5e:
         4a:2a:b0:bc:02:18:99:eb:4a:8c:c0:85:84:24:80:3b:20:77:
         7e:6d:0f:f7:2e:d2:51:9b:5d:32:06:b1:50:78:70:30:1d:91:
         82:8b:ae:11:6a:23:8b:6f:f2:91:22:93:28:77:49:c9:48:fb:
         ec:23:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:44:11 2025 by rpki-client