This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
File:                     uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft (raw, json)
Hash identifier:          nViJF37c9ZZERv6FOJU2Y+c+2BcoftT6GJTZHBumKB0=
Subject key identifier:   21:95:F3:BE:42:E3:12:0B:36:6E:61:72:74:FF:3C:61:DB:89:F6:2C
Authority key identifier: B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B
Certificate issuer:       /CN=A919D88F/serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
Manifest number:          E0
Signing time:             Fri 19 Dec 2025 04:43:29 +0000
Manifest this update:     Fri 19 Dec 2025 04:43:28 +0000
Manifest next update:     Fri 26 Dec 2025 04:43:28 +0000
Files and hashes:         1: uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl (hash: zoQa+slnEuMsWT15UD/7tkSRU9+S6dW0kuYQRWj7L8g=)
                          2: 17613044905F11EF8B4BC46BC4F9AE02.roa (hash: ++LVGRxofYEX6I3wU8GpWTit5dMqqug/RxXZrZLIN/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=B815CF8505368BA7F97674E9BB1A140095B4FF9B
        Validity
            Not Before: Dec 19 04:43:28 2025 GMT
            Not After : Dec 26 04:43:28 2025 GMT
        Subject: CN=6944d7f1-c75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:7a:b9:e6:5b:10:a5:9f:79:3f:0e:4d:0a:
                    99:aa:ad:d9:89:5e:58:6c:65:99:1e:10:8f:7e:a7:
                    0f:ac:0b:45:d3:ba:02:42:e7:33:e3:e1:3a:be:86:
                    8c:be:90:07:f2:14:7a:b8:70:99:2a:b5:3a:39:5f:
                    7d:f4:85:49:50:e3:b0:9c:05:98:fd:7b:70:2f:7c:
                    ed:b0:49:5f:ad:c3:9c:6d:da:a1:1f:94:16:f2:66:
                    1f:40:65:5b:e4:15:64:89:4f:77:81:96:3f:20:cf:
                    d3:a0:f9:b6:9e:7b:e5:d5:25:d0:06:9d:fc:71:32:
                    5e:fa:52:10:d4:94:d2:73:3f:fe:b4:a7:0e:59:13:
                    34:56:6f:e7:65:e3:fc:8f:0e:5c:94:30:66:23:27:
                    e4:8f:31:88:c4:0d:e4:48:da:5d:89:4a:5b:76:10:
                    1f:36:fa:e0:8b:70:4d:93:6c:a4:cd:d8:70:13:5d:
                    8c:d5:5c:02:c2:3a:04:5d:c5:9d:c7:86:65:a0:e7:
                    15:4f:74:e6:d3:4b:7a:47:e0:e4:80:ee:19:0f:67:
                    0c:ae:a0:79:42:52:3a:9d:7e:60:a7:3d:82:83:5d:
                    8e:2f:2c:a3:13:26:36:cd:59:c4:a6:72:68:28:d1:
                    7d:bc:7e:c3:e1:46:d8:36:9a:90:36:04:02:98:af:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:95:F3:BE:42:E3:12:0B:36:6E:61:72:74:FF:3C:61:DB:89:F6:2C
            X509v3 Authority Key Identifier:
                keyid:B8:15:CF:85:05:36:8B:A7:F9:76:74:E9:BB:1A:14:00:95:B4:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uBXPhQU2i6f5dnTpuxoUAJW0_5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/7BB6F210905D11EFA4F31D2EC4F9AE02/uBXPhQU2i6f5dnTpuxoUAJW0_5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:6a:00:9e:45:fa:a3:8e:54:2f:5d:53:25:2d:16:96:3f:
         f9:95:e1:13:2d:37:d2:10:e0:99:c9:59:38:69:5a:cb:56:0c:
         60:88:e8:fd:d0:fd:cd:19:7c:79:53:20:0e:15:93:fe:d1:3c:
         ec:57:1d:e4:65:40:15:17:00:7b:f8:db:e1:0e:6c:b9:53:25:
         78:cc:82:e9:fd:ce:3a:ce:2b:d5:6e:97:8b:df:63:3e:df:b9:
         d6:a4:a7:0e:58:75:9b:20:c4:34:a9:d9:d8:76:e7:0a:2f:84:
         45:a4:25:a9:77:42:e4:3d:05:ae:7f:58:c1:58:76:71:02:43:
         9a:38:b9:17:1d:2d:d2:02:15:2a:12:7d:24:ba:10:bd:b4:d4:
         aa:8f:f7:26:ff:57:90:7d:bf:8f:58:a2:45:30:b1:46:fc:b2:
         e9:30:57:25:ae:f9:bc:1b:2f:f6:de:cb:87:16:51:80:c9:f3:
         92:a4:f6:9b:eb:b2:14:ee:f9:73:3d:1d:6b:c0:22:43:c7:4c:
         e1:d6:9c:07:09:49:94:71:2e:77:14:27:71:ea:c8:da:6a:6d:
         03:3d:13:27:57:20:0d:4d:d0:42:6f:77:10:2e:71:e5:c8:3f:
         f3:3d:97:b8:a0:2a:d9:e6:de:19:c8:e6:67:1c:8f:62:24:38:
         eb:0e:7d:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ4OEYxMTAvBgNVBAUTKEI4MTVDRjg1MDUzNjhCQTdGOTc2NzRFOUJCMUExNDAw
OTVCNEZGOUIwHhcNMjUxMjE5MDQ0MzI4WhcNMjUxMjI2MDQ0MzI4WjAYMRYwFAYD
VQQDDA02OTQ0ZDdmMS1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAplJ6ueZbEKWfeT8OTQqZqq3ZiV5YbGWZHhCPfqcPrAtF07oCQucz4+E6voaM
vpAH8hR6uHCZKrU6OV999IVJUOOwnAWY/XtwL3ztsElfrcOcbdqhH5QW8mYfQGVb
5BVkiU93gZY/IM/ToPm2nnvl1SXQBp38cTJe+lIQ1JTScz/+tKcOWRM0Vm/nZeP8
jw5clDBmIyfkjzGIxA3kSNpdiUpbdhAfNvrgi3BNk2ykzdhwE12M1VwCwjoEXcWd
x4ZloOcVT3Tm00t6R+DkgO4ZD2cMrqB5QlI6nX5gpz2Cg12OLyyjEyY2zVnEpnJo
KNF9vH7D4UbYNpqQNgQCmK8RKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGV875C
4xILNm5hcnT/PGHbifYsMB8GA1UdIwQYMBaAFLgVz4UFNoun+XZ06bsaFACVtP+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDg4Ri83QkI2RjIxMDkw
NUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2ZjVkblRwdXhvVUFKVzBf
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VCWFBoUVUyaTZmNWRuVHB1eG9VQUpXMF81cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDg4Ri83QkI2RjIxMDkwNUQxMUVGQTRGMzFEMkVDNEY5QUUwMi91QlhQaFFVMmk2
ZjVkblRwdXhvVUFKVzBfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9xWoAnkX6o45UL11TJS0Wlj/5leETLTfSEOCZyVk4aVrLVgxgiOj9
0P3NGXx5UyAOFZP+0TzsVx3kZUAVFwB7+NvhDmy5UyV4zILp/c46zivVbpeL32M+
37nWpKcOWHWbIMQ0qdnYducKL4RFpCWpd0LkPQWuf1jBWHZxAkOaOLkXHS3SAhUq
En0kuhC9tNSqj/cm/1eQfb+PWKJFMLFG/LLpMFclrvm8Gy/23suHFlGAyfOSpPab
67IU7vlzPR1rwCJDx0zh1pwHCUmUcS53FCdx6sjaam0DPRMnVyANTdBCb3cQLnHl
yD/zPZe4oCrZ5t4ZyOZnHI9iJDjrDn3N
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:09:24 2025 by rpki-client