This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
File:                     UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json)
Hash identifier:          MHVYx6F0oo6XEg7QHW9nsHCGpHDVdpun4LZ1pTXU2xY=
Subject key identifier:   2E:30:6C:4C:4A:A5:FF:4F:00:2C:1E:F6:F0:A5:92:F5:4A:E5:4B:BE
Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A
Certificate issuer:       /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
Certificate serial:       1996
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
Manifest number:          1996
Signing time:             Sun 28 Dec 2025 16:10:19 +0000
Manifest this update:     Sun 28 Dec 2025 16:10:19 +0000
Manifest next update:     Sun 04 Jan 2026 16:10:19 +0000
Files and hashes:         1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: f/WPwjgcPgGVU8p1hHSm/NS0C0Z4jCkIez+W1qXZ8LA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 15:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6550 (0x1996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A
        Validity
            Not Before: Dec 28 16:10:19 2025 GMT
            Not After : Jan  4 16:10:19 2026 GMT
        Subject: CN=6951566b-00a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:a6:44:6c:64:9f:f8:2e:e2:e9:3f:b2:b6:
                    ec:6d:cc:4e:5c:63:98:96:87:f2:a1:62:04:54:15:
                    33:0b:de:59:93:2d:8e:34:af:d6:eb:4e:be:0e:10:
                    bd:3a:cc:a6:92:e2:84:0e:80:34:eb:c9:f8:a9:d5:
                    db:0c:a2:94:bb:a2:63:38:3c:98:7a:71:a3:a3:52:
                    9d:f0:7e:a4:77:1c:ab:55:b3:78:4e:bc:c5:1e:be:
                    05:29:58:b4:23:d3:7b:ff:d7:39:b4:01:e3:53:0c:
                    b2:fa:21:4f:25:f0:af:df:3d:d3:cd:51:ab:37:b7:
                    93:29:71:42:4f:0b:3e:f7:e9:73:a5:6a:3a:9a:57:
                    5e:82:c3:79:46:c0:36:34:8e:f2:1c:0f:61:4f:93:
                    24:b3:ce:54:3e:c5:8e:6e:4d:aa:da:a3:02:44:30:
                    90:e2:e9:5e:03:4b:34:9b:99:0f:2c:ae:a6:23:d5:
                    87:f6:47:4d:1f:52:8e:17:96:3c:af:b6:e6:70:c4:
                    a3:96:2d:0c:b7:73:17:b7:3f:21:f4:65:53:6d:d8:
                    e4:1a:a0:74:1a:2d:bd:5e:88:6b:9a:5d:df:ec:ff:
                    b0:18:fd:63:b1:4e:60:ba:d1:b1:75:0d:af:fb:5f:
                    ae:96:b2:26:7f:bf:d5:84:de:45:25:90:83:39:34:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:30:6C:4C:4A:A5:FF:4F:00:2C:1E:F6:F0:A5:92:F5:4A:E5:4B:BE
            X509v3 Authority Key Identifier:
                keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:37:23:95:48:4f:70:4a:71:93:7a:6d:9d:e5:e7:6f:61:6c:
         1d:4d:a0:d3:24:ed:c9:60:7b:e1:c0:e1:14:5f:a9:78:ae:7b:
         91:3e:19:d1:26:27:4c:6c:92:70:78:37:b0:4c:d2:24:c0:58:
         69:b8:e6:96:c9:cd:cb:6c:aa:32:0b:b6:76:36:e3:51:0a:72:
         21:bd:39:4e:c8:5e:1c:ea:de:74:8b:b5:d7:5d:91:66:e9:c3:
         63:09:71:e6:e2:5c:c6:b2:67:b2:78:a2:b7:de:28:8b:57:a1:
         cd:4a:2e:00:71:f0:c9:46:89:bd:18:b8:32:ca:7c:1e:5c:85:
         05:5e:e9:44:ba:cc:98:8d:0c:62:8e:c2:ae:bf:86:c1:98:44:
         18:60:a1:8b:78:c0:4f:d0:32:a4:50:6c:c3:79:e1:05:7c:fa:
         6f:4f:27:9f:d4:48:67:4e:b6:63:26:c9:8c:99:01:a3:81:04:
         03:16:40:bf:a0:a0:e2:13:0f:1c:3e:8d:bb:aa:d1:61:c2:32:
         b6:75:2c:92:1c:94:e4:f0:c2:11:fd:e7:b8:5e:52:4f:76:db:
         a6:05:06:46:75:ef:17:dd:fc:16:38:5c:52:5c:83:23:40:a8:
         01:a2:f2:59:82:00:c9:1b:99:ad:ae:55:97:33:ed:b4:e8:60:
         3a:25:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:12:54 2025 by rpki-client