This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
File:                     u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft (raw, json)
Hash identifier:          Ug07casAYBrpQALfDwYMsXruvHdtxI/GZbzL7f8ddSo=
Subject key identifier:   B4:3B:99:90:E4:78:62:6A:7B:A0:B0:70:85:E0:5F:80:C4:4B:56:06
Authority key identifier: BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7
Certificate issuer:       /CN=A919E3E3/serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
Manifest number:          06F8
Signing time:             Thu 18 Dec 2025 21:21:00 +0000
Manifest this update:     Thu 18 Dec 2025 21:20:59 +0000
Manifest next update:     Thu 25 Dec 2025 21:20:59 +0000
Files and hashes:         1: u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl (hash: CDm+oay5MpZjSETCvpKVSv/pXR8T0pIlsaIFnvjTPuA=)
                          2: 58B04DD46F3C11EB924C4E2AC4F9AE02.roa (hash: hyfMZHqHSYXqXmUoPBYl5C2bAAKrO9L6ZCwOSgIJA4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl
                          rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E3E3, serialNumber=BBCC760AFE3E9F0A9B88C8EC7A49ED7CDD0396F7
        Validity
            Not Before: Dec 18 21:20:59 2025 GMT
            Not After : Dec 25 21:20:59 2025 GMT
        Subject: CN=6944703c-8436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:23:dd:42:9a:42:31:10:6b:b3:d9:3e:e6:
                    9b:21:bc:df:52:74:70:1a:4a:eb:74:6e:51:9d:41:
                    83:bc:4d:83:7c:f1:9c:14:00:97:82:16:64:f5:fb:
                    ca:cb:c8:9a:9e:2f:16:33:93:24:66:3b:e4:fb:bd:
                    79:df:3e:a9:da:88:9e:3a:8e:c7:70:8a:6f:b5:c0:
                    64:d5:c7:49:ef:3f:44:4d:64:2c:4e:cf:07:94:35:
                    80:dc:9d:6b:26:a5:3f:33:71:fc:35:d0:38:e2:66:
                    26:91:69:16:23:7d:ce:84:9a:2b:08:d1:7b:c4:70:
                    39:c2:5c:67:17:e9:f7:da:99:7c:3a:6c:a5:ef:cd:
                    56:05:66:4c:dc:03:40:f0:5a:5e:ae:5b:74:86:67:
                    1e:de:8c:3b:62:95:84:5e:f6:eb:e4:79:9f:b5:3d:
                    33:ee:01:b9:f0:48:82:6a:25:d6:60:bc:07:f2:ad:
                    ec:23:89:79:c1:31:50:20:97:0b:53:fa:19:af:9a:
                    26:81:e5:8e:22:6d:2b:ed:91:34:99:19:23:84:92:
                    58:77:a5:ff:d0:1b:87:2e:b1:d2:fb:20:de:1c:e2:
                    67:65:4e:56:26:f2:68:d4:48:79:4e:ac:40:9c:e6:
                    89:1d:21:5a:af:34:0e:22:15:82:66:ce:51:bd:29:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3B:99:90:E4:78:62:6A:7B:A0:B0:70:85:E0:5F:80:C4:4B:56:06
            X509v3 Authority Key Identifier:
                keyid:BB:CC:76:0A:FE:3E:9F:0A:9B:88:C8:EC:7A:49:ED:7C:DD:03:96:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u8x2Cv4-nwqbiMjsekntfN0Dlvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3E3/08B8D0D26F3A11EBB113397EC4F9AE02/u8x2Cv4-nwqbiMjsekntfN0Dlvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c2:5b:c9:d6:71:de:2b:f2:6a:43:99:67:78:1d:37:6c:04:
         72:0b:95:8d:35:8f:76:39:aa:e7:1d:d1:ee:bc:38:9b:dd:2a:
         2a:ce:39:d8:1f:f5:cc:04:6f:25:01:28:98:e0:79:06:c7:5c:
         bd:7a:86:b2:9d:0f:c3:e5:e0:a3:be:51:ea:40:10:07:64:0a:
         78:c6:25:21:af:6c:cf:00:d4:01:d1:68:cc:4c:da:d2:da:54:
         11:bc:4e:e4:65:cd:47:30:b9:b4:c3:75:84:dd:25:6e:e6:61:
         8a:80:9c:10:1b:aa:d9:66:f7:df:1d:7e:7f:71:24:64:44:73:
         87:3f:20:1a:9b:81:71:ca:a1:20:9c:5e:82:6e:ad:78:0c:c3:
         fe:a7:e2:d3:a3:a0:f5:39:fa:d1:12:d2:f6:44:61:31:0c:8f:
         e3:a2:a9:35:33:c0:e3:7d:74:3e:8f:d2:28:b2:c6:f3:62:30:
         f3:e6:50:91:dd:3c:d3:fb:03:9b:59:6a:cd:22:21:26:63:96:
         45:2f:de:6a:5d:d3:e2:ed:fe:64:d4:21:d1:58:6f:90:67:6c:
         7a:2b:61:db:c0:d3:f4:76:5d:d5:7d:00:91:a2:17:a6:01:28:
         44:e9:64:76:13:8c:35:bf:e3:30:b1:4e:e1:3a:01:7c:08:04:
         8d:17:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:11 2025 by rpki-client