This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          skwxldknu3bP0lHsKVCagagUqoisNNsMdBZ33zqtxJ8=
Subject key identifier:   59:24:A1:37:5C:8E:63:D7:C5:74:E3:85:BE:F3:BF:39:FB:D5:8E:CC
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       062F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          0629
Signing time:             Thu 18 Dec 2025 22:08:55 +0000
Manifest this update:     Thu 18 Dec 2025 22:08:55 +0000
Manifest next update:     Thu 25 Dec 2025 22:08:55 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: iGCYKk1holJionQrK0cowC3AZLgUdrF+I19fsU1TBb4=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: ukIxpeCDJL+cHaq9Y1gYJ/+w2w9VIUdZg9SIKhaaemE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Dec 18 22:08:55 2025 GMT
            Not After : Dec 25 22:08:55 2025 GMT
        Subject: CN=69447b77-ced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:2a:6f:a8:42:60:0d:b0:50:a6:28:f5:53:
                    ce:03:d0:df:c1:4c:b6:39:34:fd:a0:be:11:fb:3d:
                    9f:9b:29:d1:44:fb:ec:9c:f4:97:33:97:2b:3e:ac:
                    97:10:7c:c9:b6:e2:4d:50:b3:dc:ef:ae:43:bb:32:
                    db:96:96:66:15:a0:4e:f8:e5:ff:dd:72:8d:92:65:
                    2c:a7:dc:fa:69:20:66:c0:fd:0d:e5:b6:f7:5f:f9:
                    3c:95:84:0d:3d:00:15:cf:50:c7:79:1e:ef:b5:dd:
                    84:41:36:5b:49:72:27:f2:49:3a:b2:b1:65:5c:18:
                    f7:46:4c:41:26:36:7e:87:c3:73:60:d7:66:16:a0:
                    21:95:3d:e1:99:e7:26:e2:54:84:fe:14:59:ff:dd:
                    3a:b8:1c:61:83:3c:6a:a7:81:d0:52:44:20:83:23:
                    68:e2:c7:b1:48:98:eb:17:3c:eb:5f:a4:e4:bb:05:
                    9a:b7:26:c1:99:bf:40:c0:11:e1:e6:c2:7b:46:cd:
                    87:d4:c0:78:2b:3d:06:15:65:58:88:e5:44:76:66:
                    e7:c1:37:42:7f:ab:5e:0b:79:61:65:6e:18:1e:2c:
                    47:ef:51:68:72:39:15:58:34:5c:78:84:72:c8:15:
                    53:3e:93:46:3a:c9:11:e5:4a:fe:b2:0e:c2:cf:42:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:A1:37:5C:8E:63:D7:C5:74:E3:85:BE:F3:BF:39:FB:D5:8E:CC
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:73:f0:e6:d9:e2:66:1a:58:84:1e:39:c2:2a:0d:af:ee:d6:
         bb:18:38:ce:0c:a9:29:00:78:53:85:b7:06:a8:b0:82:8a:ff:
         7b:05:64:f1:57:49:03:9b:84:99:32:47:56:45:a7:e3:29:27:
         1e:3f:92:ce:b1:f1:9a:6a:f2:b1:dd:66:01:6d:84:d7:76:92:
         8b:f7:8a:dc:c5:65:f5:6b:6c:ba:5b:3a:8f:33:38:bd:b4:d9:
         db:17:4f:39:29:32:fc:aa:97:50:f2:b4:df:4e:17:bb:b4:19:
         91:80:ab:08:95:55:12:1b:f3:74:24:99:66:98:fb:62:b2:cd:
         7b:0a:f7:64:15:dc:4d:8c:83:f7:47:ee:fb:79:4d:e5:01:7e:
         cf:65:07:5d:1f:59:07:c8:ea:56:04:de:5e:34:5a:f3:bb:1b:
         f7:0e:56:1a:67:7e:f0:92:71:d3:ec:32:11:e9:e2:c8:35:75:
         12:8e:5b:58:4d:4c:7e:e2:f8:33:bc:62:f2:a6:b8:a4:8e:72:
         42:26:d3:1c:5f:5a:9f:29:82:3a:dc:f7:00:06:1e:db:77:e0:
         1e:0e:7c:15:1e:f8:77:ed:55:f6:f2:69:89:51:7d:95:46:e2:
         88:0c:cb:1b:13:b6:ae:10:56:e1:4e:75:40:c5:4f:d8:a1:4e:
         47:74:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:31 2025 by rpki-client