This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
File:                     u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft (raw, json)
Hash identifier:          JuQMkYDc6IUiVibIJDJvFRyKLzmSZiue/O4TOZUzSjc=
Subject key identifier:   A7:31:4A:16:FA:04:F3:8D:43:15:B9:34:B0:87:F6:91:FB:14:1B:A8
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Certificate issuer:       /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
Manifest number:          0218
Signing time:             Sat 27 Dec 2025 01:15:12 +0000
Manifest this update:     Sat 27 Dec 2025 01:15:12 +0000
Manifest next update:     Sat 03 Jan 2026 01:15:12 +0000
Files and hashes:         1: u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl (hash: TaOvKSOlii9utC2LKmhv7cFG1ozEut7w1t11Y9+YM1o=)
                          2: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (hash: ztxAi6NVLvlOVRaY5LiA8lZVY+4GBUWq8sHQO2NcSn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
                          rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 01:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
        Validity
            Not Before: Dec 27 01:15:12 2025 GMT
            Not After : Jan  3 01:15:12 2026 GMT
        Subject: CN=694f3320-6a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:7e:30:e1:41:4a:1c:37:4c:36:48:ba:40:
                    0b:db:01:12:d2:8c:bb:89:8e:c4:bd:80:f4:71:3d:
                    24:80:18:d8:fd:61:04:cc:30:25:67:65:58:db:6b:
                    eb:5f:cb:6d:73:b1:ff:62:7f:5a:cf:20:79:04:f7:
                    11:f8:b1:3b:be:32:70:4e:51:d1:85:e6:3f:7e:78:
                    6b:f2:84:48:90:ec:8c:ea:da:02:1d:be:0e:21:b5:
                    7b:fc:f0:c9:52:7e:67:7e:c1:55:f0:25:97:44:db:
                    74:7a:ca:f2:05:5f:56:3f:94:64:33:a3:fd:4b:62:
                    46:41:80:1e:71:79:a0:bd:82:55:cf:9e:2f:43:d1:
                    f1:52:3a:19:54:b1:0e:db:ae:2d:d6:94:a1:b7:b4:
                    9d:0d:91:93:df:a8:09:b2:e5:cd:99:96:a0:56:3e:
                    81:df:2d:62:93:df:56:8d:73:1a:be:1e:a5:00:af:
                    88:2d:b8:3b:c0:a0:14:f1:4f:6b:95:8e:ff:06:6f:
                    4f:d4:7a:63:83:ce:63:0e:2f:59:21:ed:e1:e3:5d:
                    f6:fa:6a:e7:30:8c:f9:63:7a:79:27:d0:97:40:53:
                    ce:1c:24:89:ec:92:a1:1c:22:41:b7:a1:c4:6f:5b:
                    7c:8c:34:d9:06:af:e9:c0:46:ff:26:58:c7:b2:16:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:31:4A:16:FA:04:F3:8D:43:15:B9:34:B0:87:F6:91:FB:14:1B:A8
            X509v3 Authority Key Identifier:
                keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:5e:61:5b:c0:7c:6a:59:e9:e1:55:f4:2a:82:b9:f5:26:
         75:9a:3c:6e:42:0c:dc:44:62:5b:3e:f9:4f:b5:bf:c5:e0:7f:
         be:0e:b4:0e:26:56:db:19:e2:ee:05:57:19:7d:71:8d:2e:c6:
         df:d7:df:90:d4:1a:b8:40:f8:50:d2:27:d3:7f:0e:f7:ba:af:
         70:b6:4d:8d:07:02:ec:b3:d4:6c:56:96:43:0b:76:83:e1:6f:
         be:a2:d3:75:99:cc:50:3c:73:39:91:37:94:7a:f7:b2:39:34:
         91:b6:6e:74:c3:0b:f4:08:4d:75:e3:29:fe:09:6e:69:80:15:
         f1:c5:7f:ba:2b:fb:89:52:85:49:b9:94:f6:ab:b2:19:8b:a6:
         d5:a7:d7:47:29:9b:a6:85:5c:65:f2:89:00:c0:6c:8a:e3:40:
         40:00:ff:67:76:65:af:2d:f8:4e:e4:9c:ab:ce:fa:55:ed:98:
         34:53:a5:c0:af:d2:65:3b:8a:b5:fc:7a:a7:85:1e:96:9e:90:
         0f:c9:89:1e:de:a5:3d:43:c9:7b:37:61:3b:bf:2d:3b:02:da:
         b9:a7:a6:5a:3d:30:93:df:ec:68:8c:0c:38:6a:3a:dd:17:85:
         50:dc:e4:1b:6e:11:9b:09:84:ba:09:32:bf:2a:05:07:1b:54:
         49:c8:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 00:47:33 2025 by rpki-client