This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
File:                     UIni3IEtNN89TbWDVc_xSweu3rk.mft (raw, json)
Hash identifier:          aviUB+Wehpxvghs6zjtwg9wDS7+ODo77KzqXeWyRmH8=
Subject key identifier:   CC:95:05:12:15:21:2C:4D:0C:67:C0:9D:77:08:78:91:06:FC:C7:5A
Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9
Certificate issuer:       /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
Certificate serial:       0466
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
Manifest number:          0460
Signing time:             Sat 20 Dec 2025 23:24:55 +0000
Manifest this update:     Sat 20 Dec 2025 23:24:55 +0000
Manifest next update:     Sat 27 Dec 2025 23:24:55 +0000
Files and hashes:         1: UIni3IEtNN89TbWDVc_xSweu3rk.crl (hash: 7iOylHiM4JG49P8Lib34NkM3TR95RW4fQNggq9HeJEc=)
                          2: 30BF89A0785C11ECB03F8929C4F9AE02.roa (hash: H9nphXBM2UQLDK+SIH34DtvP2nYEfoPht4rovKpVhh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl
                          rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
        Validity
            Not Before: Dec 20 23:24:55 2025 GMT
            Not After : Dec 27 23:24:55 2025 GMT
        Subject: CN=69473047-a4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:76:7c:4f:84:6d:57:7a:1c:5a:bd:3f:d0:
                    af:eb:69:64:1e:6c:59:2e:f3:b7:b8:2d:e2:0f:6d:
                    20:69:e6:27:fa:e9:59:f8:5a:ed:32:54:30:96:08:
                    b6:a3:9b:7f:1b:bc:a9:99:e0:84:7b:b1:2a:31:1f:
                    f5:7d:36:cd:6b:24:b5:7b:a8:f8:66:75:bc:56:b3:
                    55:16:17:4a:0f:b8:d2:ec:2c:38:7e:84:30:6b:53:
                    69:3e:1c:79:e9:b7:43:66:95:14:18:71:4d:6a:d2:
                    19:b0:66:bb:4b:1c:d3:ac:c4:aa:18:3a:ac:09:3e:
                    1f:dd:6e:34:eb:89:98:8b:44:88:fc:a4:c3:64:e5:
                    0e:48:7c:be:f3:15:d3:a5:9c:4d:20:67:1c:1c:a2:
                    b8:97:a5:f3:ed:94:8d:97:27:e8:d5:06:db:43:c1:
                    49:c7:0f:22:bc:e9:98:c7:ba:80:68:2f:86:2c:0b:
                    23:77:46:e3:3a:9b:db:d4:02:62:f7:c8:97:85:f7:
                    4b:43:1d:31:c6:71:60:66:a6:df:23:e4:dc:dc:81:
                    82:a2:3b:f5:34:ee:ea:87:4c:ca:09:7f:14:13:13:
                    bd:dd:7e:69:92:76:9d:7d:5e:72:7e:92:13:f7:7e:
                    38:72:3c:0a:89:71:c9:f2:6c:04:cf:7b:4d:03:61:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:05:12:15:21:2C:4D:0C:67:C0:9D:77:08:78:91:06:FC:C7:5A
            X509v3 Authority Key Identifier:
                keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:f2:f4:e2:53:7a:05:55:02:0b:35:fd:9a:28:3e:89:a9:
         0f:8d:6e:d0:f4:b6:52:9c:14:80:49:49:3f:86:39:06:8b:c7:
         85:6e:46:0d:e4:7b:97:0d:97:29:ca:4c:19:87:cd:61:39:bc:
         f4:16:df:87:64:00:fe:ef:49:d3:86:8f:25:e3:fe:cd:f7:c1:
         13:24:31:e4:89:70:23:f4:63:9e:23:fe:a2:87:cd:7b:d9:b9:
         86:ee:f9:f3:c8:ea:3d:5a:a7:bb:4a:25:fe:ad:27:7a:ce:a3:
         e1:a5:df:d8:32:b0:ee:9f:1d:e0:c3:1b:e7:93:45:c2:14:34:
         09:e2:6a:98:5f:1d:bf:93:d0:d6:87:e7:32:e3:e1:92:a7:28:
         16:c8:92:99:13:9d:9d:0f:53:cc:84:f8:5e:80:f3:fa:40:2d:
         55:06:3c:2c:b8:e0:b1:45:42:7f:07:25:3f:4f:de:a2:dd:4d:
         db:62:41:dd:b2:ee:0f:bc:ea:79:b3:0c:2d:c3:f5:39:5d:70:
         c7:59:c0:6c:fe:67:5a:f0:41:ae:5d:59:f4:3e:ef:ce:83:11:
         b0:87:8a:7d:9a:b0:a5:02:ce:52:8e:78:09:22:12:39:51:1b:
         de:4f:10:50:0f:ae:85:8d:08:8d:14:9b:85:00:ee:5f:1b:85:
         6b:e1:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:26:25 2025 by rpki-client