This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
File:                     uDJLQvvF8hOdeQHkF94hA5slJdw.mft (raw, json)
Hash identifier:          dR8ryAccqScurEVAc5Ts8AT/hyxsYYXlroZ0Vxi6oCc=
Subject key identifier:   A6:46:DF:76:8B:FA:BE:21:1E:9F:72:C0:C3:09:8A:18:08:A2:3D:96
Authority key identifier: B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC
Certificate issuer:       /CN=A913AFD2/serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
Manifest number:          0735
Signing time:             Sat 20 Dec 2025 21:07:12 +0000
Manifest this update:     Sat 20 Dec 2025 21:07:12 +0000
Manifest next update:     Sat 27 Dec 2025 21:07:12 +0000
Files and hashes:         1: uDJLQvvF8hOdeQHkF94hA5slJdw.crl (hash: Pnh4WP05i3qgJCCfLSCyGghOGlkQ76FoiqdW+IiW940=)
                          2: A74A1698590A11EB9ECF402AC4F9AE02.roa (hash: 4eRzOG2I//7TY5ChgdSvpUtnnyrP9LtDGhTYUfmfKh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl
                          rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AFD2, serialNumber=B8324B42FBC5F2139D7901E417DE21039B2525DC
        Validity
            Not Before: Dec 20 21:07:12 2025 GMT
            Not After : Dec 27 21:07:12 2025 GMT
        Subject: CN=69471000-c106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0f:63:bd:a3:db:15:c4:5d:fe:19:4e:04:1f:
                    49:67:02:da:e7:14:6b:92:0c:9f:4f:63:a4:5a:4a:
                    25:9d:06:b3:85:ef:54:d4:04:47:5a:76:53:8f:45:
                    de:87:cf:41:24:26:b5:c9:18:26:81:30:57:a3:fb:
                    0b:e1:be:03:10:43:d8:30:2c:b8:6a:60:15:17:94:
                    9a:30:d9:2a:65:f4:a0:31:d2:e4:ba:b5:60:8f:3e:
                    f4:68:ca:c0:c2:3d:f2:af:a3:d3:be:20:56:f6:6b:
                    20:c2:07:ad:35:d4:74:c6:c7:38:a2:86:0d:89:c9:
                    af:7f:ff:d7:c5:72:ca:07:6a:25:21:48:7e:7b:2d:
                    12:c8:25:bf:3b:82:6c:8a:42:53:b7:83:fe:1d:30:
                    cc:81:a1:28:2e:d8:dd:31:74:bd:20:19:8a:a8:e5:
                    da:d4:e5:f0:09:dd:2d:a8:d2:f3:81:61:6f:49:78:
                    88:c1:6d:5e:c0:b6:0b:b3:3e:90:66:d6:6a:de:a8:
                    33:2e:6a:e9:e1:d8:ff:5d:fe:b7:22:53:59:4e:c5:
                    2d:bd:a5:28:fd:ec:52:26:61:49:01:98:56:cd:8b:
                    30:18:a1:53:21:f4:17:00:e2:a7:bc:87:0d:a1:35:
                    95:8e:e0:71:83:d2:38:d4:70:c1:5c:1c:08:1c:cf:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:46:DF:76:8B:FA:BE:21:1E:9F:72:C0:C3:09:8A:18:08:A2:3D:96
            X509v3 Authority Key Identifier:
                keyid:B8:32:4B:42:FB:C5:F2:13:9D:79:01:E4:17:DE:21:03:9B:25:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uDJLQvvF8hOdeQHkF94hA5slJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AFD2/BB01A792590911EBA69D202AC4F9AE02/uDJLQvvF8hOdeQHkF94hA5slJdw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4d:3e:b3:f7:a8:9c:7c:67:e0:77:5c:04:be:0e:58:3c:1a:
         09:29:68:80:e0:7d:7e:85:ce:f5:cd:22:86:f7:c6:b2:95:a3:
         de:cc:b6:5e:59:2a:34:4c:80:e1:3a:f9:20:ba:13:35:8a:7d:
         73:dd:0e:fa:c2:f9:d0:01:7b:5a:44:96:22:b7:bd:4c:a6:1a:
         9c:5b:a7:60:d3:9c:4d:33:26:22:f4:ba:b3:dd:d6:bf:10:b1:
         dd:fb:e8:1f:75:81:56:ca:9e:62:e8:9a:e1:41:2b:7d:8b:e2:
         69:08:dd:a6:c2:05:1a:96:06:25:93:80:df:65:8a:a4:bb:cb:
         95:ed:6e:fa:25:71:f6:45:27:ce:ca:51:4e:8c:5d:36:ad:15:
         00:82:db:3e:11:f8:ae:47:e4:d8:8f:d1:f3:d9:f6:d9:b8:78:
         fd:53:50:ff:2d:af:cd:83:d4:1b:b2:f9:16:5b:72:15:ca:95:
         42:99:f2:a0:f0:f6:a5:ca:dc:c4:79:ef:16:47:ea:12:e9:91:
         90:81:e3:e0:7e:25:76:7f:66:37:ce:49:b6:a1:bc:06:e7:d1:
         ee:31:56:e3:6e:65:0a:e4:5e:3b:04:ff:47:d9:61:db:3d:b4:
         a9:82:74:83:c8:a2:41:6b:01:6b:53:d8:d0:33:a1:a3:d0:e5:
         9a:c9:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:20:34 2025 by rpki-client