This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
File:                     UK8aopMCL3bNH1G6DdWKW4lmkVo.mft (raw, json)
Hash identifier:          gY9svDsHDa4eQPDjyxy3f30baCSP3lwojZjWfmSRPaw=
Subject key identifier:   77:E8:C2:D3:53:AB:3D:51:66:04:88:C8:9A:79:CE:03:5A:D2:29:AB
Authority key identifier: 50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A
Certificate issuer:       /CN=A915AC36/serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
Manifest number:          0E
Signing time:             Fri 19 Dec 2025 06:56:15 +0000
Manifest this update:     Fri 19 Dec 2025 06:56:15 +0000
Manifest next update:     Fri 26 Dec 2025 06:56:15 +0000
Files and hashes:         1: UK8aopMCL3bNH1G6DdWKW4lmkVo.crl (hash: vvWXf3KqNWpJXkXU7URGyH3zDRlWXe6UU1GhaUhtF1A=)
                          2: BBD396F8CC1D11F09B362031C4F9AE02.roa (hash: gh8+qv3MhaUl1O19jg6tnVa+KoQIkfYNDiOkghKWIjk=)
                          3: 7D88011ACF4011F08FF1FE52C4F9AE02.roa (hash: /IHW3aHM/SUsb9kiCoK1jZIm/hDv2f3qYZbCqQZYAZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=50AF1AA293022F76CD1F51BA0DD58A5B8966915A
        Validity
            Not Before: Dec 19 06:56:15 2025 GMT
            Not After : Dec 26 06:56:15 2025 GMT
        Subject: CN=6944f70f-024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:38:22:88:8f:61:30:ea:b7:dc:f1:0f:e0:
                    a3:1d:9a:09:ef:72:86:7a:07:7e:96:3b:e2:43:27:
                    52:92:42:03:74:af:1e:58:f0:8a:b7:16:21:13:21:
                    bc:fb:a9:79:a7:3b:4d:35:db:fa:a5:4b:95:26:52:
                    da:ee:f6:a8:dd:cf:af:23:df:95:4b:e0:e2:fd:37:
                    d3:49:ce:1c:c9:45:01:5b:32:38:eb:7d:7e:a8:3e:
                    30:aa:18:c7:10:b6:68:a7:6a:59:ad:22:1f:0a:d0:
                    30:95:d9:ea:31:78:96:4f:59:63:8a:d6:02:3f:0e:
                    af:31:99:fb:69:f2:0a:d6:9f:0f:77:33:09:91:2f:
                    ce:4e:84:39:08:f8:11:99:b6:7c:ff:4d:73:9f:de:
                    e1:9b:2c:bc:35:4a:a4:85:c7:70:94:95:2b:ba:60:
                    d3:8e:c6:c9:1e:93:93:81:fe:61:d6:ee:76:a0:cb:
                    01:ae:c1:4d:b1:58:3c:14:54:a6:26:8e:65:b7:2c:
                    72:ac:23:e5:94:8e:75:38:eb:c4:ac:5d:97:19:17:
                    6f:58:16:73:2b:16:f7:a4:99:7d:c6:d3:9a:b5:fb:
                    3c:7f:69:2d:1f:92:15:04:c6:f0:03:01:20:b9:1a:
                    28:0e:d9:65:dd:fe:7a:58:d9:d4:2f:b6:aa:74:be:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E8:C2:D3:53:AB:3D:51:66:04:88:C8:9A:79:CE:03:5A:D2:29:AB
            X509v3 Authority Key Identifier:
                keyid:50:AF:1A:A2:93:02:2F:76:CD:1F:51:BA:0D:D5:8A:5B:89:66:91:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK8aopMCL3bNH1G6DdWKW4lmkVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/ED0C81A0CC1B11F09ADA8F2CC4F9AE02/UK8aopMCL3bNH1G6DdWKW4lmkVo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:84:09:cd:6c:9a:6c:45:6d:6e:aa:4d:7f:1a:e0:38:9a:e8:
         46:7c:37:be:51:f9:48:96:ec:82:dc:1a:2d:b7:51:06:31:ff:
         6b:bc:91:f9:ff:8c:d3:a4:34:4b:22:7d:97:99:60:4a:e9:b3:
         f5:09:15:42:5a:ea:b4:f0:8a:dc:ab:31:7a:d4:be:d3:e9:24:
         ec:af:94:79:7c:ad:80:fb:53:b3:0a:6f:4b:0b:3b:62:f6:ee:
         c0:0b:01:54:dd:1c:f4:a1:c2:35:ad:04:fe:d3:e3:7d:9a:c3:
         df:56:61:20:6a:13:5c:a6:21:10:cd:12:33:11:90:ce:e1:d8:
         db:96:f9:9b:96:a8:a8:f1:dc:3b:55:e9:d0:80:1e:b1:a6:5a:
         57:7f:36:bb:29:9f:b0:60:f8:0b:92:9a:81:17:58:91:23:1d:
         fe:e3:89:1d:63:0c:da:bc:4e:75:1e:38:e7:9d:60:6b:69:1f:
         36:b5:2d:e2:45:32:7e:99:0e:3e:67:b2:75:b5:dc:52:83:70:
         f1:3e:67:97:ba:2d:cd:a9:18:4f:c9:85:3a:ae:4b:6b:e4:27:
         85:7b:f4:93:31:cc:29:e0:73:65:41:95:9f:3a:34:a7:99:86:
         0e:5f:c7:8c:da:c1:3f:d9:07:7f:61:77:35:a6:d0:8d:86:d7:
         9e:6e:a4:45
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QUMzNjExMC8GA1UEBRMoNTBBRjFBQTI5MzAyMkY3NkNEMUY1MUJBMERENThBNUI4
OTY2OTE1QTAeFw0yNTEyMTkwNjU2MTVaFw0yNTEyMjYwNjU2MTVaMBgxFjAUBgNV
BAMMDTY5NDRmNzBmLTAyNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1/DgiiI9hMOq33PEP4KMdmgnvcoZ6B36WO+JDJ1KSQgN0rx5Y8Iq3FiETIbz7
qXmnO0012/qlS5UmUtru9qjdz68j35VL4OL9N9NJzhzJRQFbMjjrfX6oPjCqGMcQ
tminalmtIh8K0DCV2eoxeJZPWWOK1gI/Dq8xmftp8grWnw93MwmRL85OhDkI+BGZ
tnz/TXOf3uGbLLw1SqSFx3CUlSu6YNOOxskek5OB/mHW7nagywGuwU2xWDwUVKYm
jmW3LHKsI+WUjnU468SsXZcZF29YFnMrFvekmX3G05q1+zx/aS0fkhUExvADASC5
GigO2WXd/npY2dQvtqp0vjyXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd+jC01Or
PVFmBIjImnnOA1rSKaswHwYDVR0jBBgwFoAUUK8aopMCL3bNH1G6DdWKW4lmkVow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBQzM2L0VEMEM4MUEwQ0Mx
QjExRjA5QURBOEYyQ0M0RjlBRTAyL1VLOGFvcE1DTDNiTkgxRzZEZFdLVzRsbWtW
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVUs4YW9wTUNMM2JOSDFHNkRkV0tXNGxta1ZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
QzM2L0VEMEM4MUEwQ0MxQjExRjA5QURBOEYyQ0M0RjlBRTAyL1VLOGFvcE1DTDNi
TkgxRzZEZFdLVzRsbWtWby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJOECc1smmxFbW6qTX8a4Dia6EZ8N75R+UiW7ILcGi23UQYx/2u8kfn/
jNOkNEsifZeZYErps/UJFUJa6rTwityrMXrUvtPpJOyvlHl8rYD7U7MKb0sLO2L2
7sALAVTdHPShwjWtBP7T432aw99WYSBqE1ymIRDNEjMRkM7h2NuW+ZuWqKjx3DtV
6dCAHrGmWld/Nrspn7Bg+AuSmoEXWJEjHf7jiR1jDNq8TnUeOOedYGtpHza1LeJF
Mn6ZDj5nsnW13FKDcPE+Z5e6Lc2pGE/JhTquS2vkJ4V79JMxzCngc2VBlZ86NKeZ
hg5fx4zawT/ZB39hdzWm0I2G155upEU=
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:02:25 2025 by rpki-client