This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          HYFqfNltQIcQo9Pbh9yaX97QHb8O2Pxzi62VUGmfVsg=
Subject key identifier:   1C:A2:91:7E:31:DD:5F:F7:20:A3:DF:86:0A:7D:03:37:80:36:84:27
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          15
Signing time:             Fri 19 Dec 2025 06:51:24 +0000
Manifest this update:     Fri 19 Dec 2025 06:51:23 +0000
Manifest next update:     Fri 26 Dec 2025 06:51:23 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: qQ2WTgPR+w/rHvadTs4cOV+WhLlUzOvwp6UXRfe3nH8=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: 5wR/vgwBsZWB9tqC4WRbv4D2H8YQRdD09PXZrJfd0zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Dec 19 06:51:23 2025 GMT
            Not After : Dec 26 06:51:23 2025 GMT
        Subject: CN=6944f5ec-2179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:e2:d6:81:5c:29:ec:64:bf:42:95:e7:f8:
                    9b:fb:fc:c1:41:14:17:6c:f3:5e:f0:79:c6:f2:47:
                    6d:4d:97:c5:b4:a7:d9:46:6b:12:68:27:d6:d1:ec:
                    0f:3c:84:10:12:16:bc:0f:f5:45:b2:e9:11:b5:6d:
                    26:92:02:97:bb:36:97:e0:9c:23:65:66:60:cf:4c:
                    85:2d:3e:12:c5:1c:a1:ec:b4:8a:78:a4:86:ac:ae:
                    24:9c:a3:34:58:44:02:47:91:1a:1d:4a:11:b2:67:
                    21:f8:b5:fb:92:b1:7e:bb:e4:1b:0e:d7:1f:fd:3d:
                    33:c4:c7:e7:a0:02:9a:fd:03:22:88:32:bf:3b:1d:
                    6f:0b:e8:ef:b4:36:07:0f:bb:c8:4a:42:d4:c1:e4:
                    72:a0:49:86:57:28:23:7b:f3:4f:eb:b3:f5:93:ec:
                    fe:5b:a1:eb:ed:a1:94:a3:31:29:57:88:42:93:75:
                    86:82:b8:0b:ae:fa:36:cf:fe:89:f8:82:8e:2b:c7:
                    cd:45:93:28:37:25:d6:30:aa:c8:e2:fb:88:c4:db:
                    10:8f:58:ad:2c:d3:8e:47:ec:70:1b:c5:37:79:2c:
                    2a:a1:b0:e6:f7:4e:ad:59:ba:e8:94:b5:fc:bb:5a:
                    82:d0:3d:fe:01:d3:fb:57:b8:dd:83:5f:16:00:8e:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A2:91:7E:31:DD:5F:F7:20:A3:DF:86:0A:7D:03:37:80:36:84:27
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9f:d2:23:8f:28:6d:5c:06:d8:f2:15:78:2d:44:d2:cf:d4:
         8f:50:ee:48:66:11:83:55:da:97:52:71:ec:69:35:a7:5f:ab:
         18:b7:13:00:b9:ea:9b:62:0d:68:23:bf:ac:0a:5e:ab:f9:8d:
         be:f4:07:12:e5:cb:a2:a9:14:52:ca:ba:7a:5a:3b:b2:c3:09:
         c6:79:bf:95:70:f6:f2:68:e5:1c:81:06:e0:e6:07:3c:eb:10:
         4d:8d:3b:19:25:ef:c6:ca:7a:6e:9b:98:ef:89:03:4e:2f:b8:
         1a:0b:1c:62:84:ec:6f:e6:23:34:c1:da:69:32:c5:da:ff:55:
         ae:38:6c:93:7e:82:18:44:6e:96:6f:c0:58:2b:ad:e0:63:01:
         c9:64:c8:ae:75:f2:ac:33:ba:e1:79:42:61:64:45:78:ff:81:
         84:fd:7a:21:25:b2:dd:09:ff:d1:7a:2b:89:d0:85:c5:d2:a1:
         4b:e9:a5:5e:d9:c3:90:c1:dd:d9:60:99:5a:9b:74:61:e2:4d:
         2c:83:51:9b:52:b6:5b:46:f3:e6:29:d0:08:c7:7c:f8:38:65:
         3b:fb:ee:b7:4b:38:13:40:31:f6:d9:d2:8a:a9:d7:d2:8f:7c:
         3a:d4:85:e0:1b:c7:da:b6:9c:e2:48:9f:51:94:ab:68:fe:46:
         b0:19:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:37:29 2025 by rpki-client