This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
File:                     UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft (raw, json)
Hash identifier:          ex0WnIHGRRIihZKiqwfnXYzl2ZJD/8G4YKUwnbMCoR8=
Subject key identifier:   73:B1:73:44:D4:16:6C:79:27:7B:0E:31:2A:4E:BF:13:DC:39:02:63
Authority key identifier: 52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67
Certificate issuer:       /CN=A911902E/serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
Certificate serial:       06CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
Manifest number:          06C3
Signing time:             Thu 18 Dec 2025 21:35:27 +0000
Manifest this update:     Thu 18 Dec 2025 21:35:27 +0000
Manifest next update:     Thu 25 Dec 2025 21:35:27 +0000
Files and hashes:         1: UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl (hash: iX9s1sXavx9DiG+HOPDbg/c152J4kw85a4j7bDmMxw0=)
                          2: C3FEC56C855711EB871D267FC4F9AE02.roa (hash: pn41QbwI43rxSeVr0SInvG6/Q6c7Gj04UiR8iNhF0jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl
                          rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911902E, serialNumber=521B06C29110284AAAFE0875AA6186B0006D2767
        Validity
            Not Before: Dec 18 21:35:27 2025 GMT
            Not After : Dec 25 21:35:27 2025 GMT
        Subject: CN=6944739f-eca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:0c:16:25:38:8a:58:2d:35:9a:fe:33:9b:
                    8f:72:0d:be:2f:21:a4:06:a7:a2:e1:32:16:a9:8f:
                    cf:15:a8:d5:ed:b8:5d:98:4e:0d:1b:ac:8a:03:cc:
                    eb:7d:23:ae:e1:9b:15:eb:b3:c1:73:f9:e5:b1:b5:
                    08:89:de:47:37:dd:9e:13:5e:2c:72:b5:d2:32:10:
                    c3:65:69:3f:f9:66:a6:11:9f:57:2e:26:b9:12:bf:
                    e4:d1:c6:a4:ec:fb:d4:a2:3f:40:29:8e:0c:5f:35:
                    f0:01:fe:19:20:19:ec:3c:e5:ad:f1:de:30:83:64:
                    54:63:a9:51:76:d5:da:8f:9a:30:31:c9:ce:b3:73:
                    a0:62:b2:1e:47:f5:75:92:a7:be:47:f6:55:3f:9b:
                    21:4a:b0:e7:ec:e3:07:8d:19:69:3d:b2:a3:22:25:
                    87:2c:91:47:2f:90:6b:7e:e3:79:4d:95:8b:8c:31:
                    e6:bd:fb:0b:ea:e7:17:ac:1a:c1:d0:03:13:3c:0b:
                    49:b0:39:5a:ff:09:45:5a:32:b5:05:03:d5:00:39:
                    81:ce:97:75:6a:75:8b:c1:83:4e:2e:ec:bc:bd:dd:
                    73:40:97:66:58:6a:ce:dc:97:21:85:83:59:a0:3e:
                    d5:6e:ae:c3:24:52:52:ad:9c:a4:a9:9d:72:ac:fd:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B1:73:44:D4:16:6C:79:27:7B:0E:31:2A:4E:BF:13:DC:39:02:63
            X509v3 Authority Key Identifier:
                keyid:52:1B:06:C2:91:10:28:4A:AA:FE:08:75:AA:61:86:B0:00:6D:27:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhsGwpEQKEqq_gh1qmGGsABtJ2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911902E/57AFDB28855511EB94C2215FC4F9AE02/UhsGwpEQKEqq_gh1qmGGsABtJ2c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:b1:53:a9:20:eb:bc:25:0d:95:59:49:82:ad:fc:e2:65:
         7d:8c:f4:7b:d6:f8:81:8f:4d:71:6e:76:d3:82:fe:9b:6d:0c:
         a1:f7:01:26:0b:2a:2b:03:76:b6:61:1b:49:9d:c2:91:45:03:
         26:58:f8:96:6b:92:34:20:65:79:b8:21:93:0e:77:37:1c:d1:
         e2:0e:74:1c:dd:14:8c:8f:3e:f3:9a:44:b4:69:79:18:10:fd:
         25:f4:d0:91:6a:d7:9e:63:35:40:19:16:2e:62:7f:06:1f:a0:
         9c:3e:f8:f1:7d:71:de:85:24:27:95:4b:13:c4:46:aa:1e:04:
         86:bf:59:0d:48:ba:e1:37:ce:86:91:a8:de:3c:77:0f:bd:8a:
         d2:2d:ab:f2:51:c8:b5:b4:e7:d9:1f:d1:da:c6:13:08:2a:cc:
         29:a1:9e:a6:c3:11:e3:f7:f1:0a:3f:76:5a:71:e1:5f:a5:09:
         d0:de:c6:b7:00:37:f5:e9:47:19:de:b9:68:3e:0e:75:90:bc:
         15:2e:9c:5f:e7:1a:47:f9:18:4b:85:ae:95:71:a7:64:2c:b1:
         f9:72:fe:30:20:33:e8:cd:82:12:80:ec:3a:5a:79:3b:1c:50:
         a8:0c:f1:e5:3c:86:d2:e8:28:83:62:32:3c:43:15:42:dc:c1:
         ce:b0:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:31 2025 by rpki-client