This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          864ZLrOWTW7J66Djm0VBfMANqDPueG9+1/mn6LVXPzA=
Subject key identifier:   5D:C6:64:45:90:F1:3A:98:55:53:9F:08:A3:4E:1D:1A:AD:F1:B6:62
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0B88
Signing time:             Sat 20 Dec 2025 18:35:25 +0000
Manifest this update:     Sat 20 Dec 2025 18:35:25 +0000
Manifest next update:     Sat 27 Dec 2025 18:35:25 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: 3UN3s3vlDF20KqtM5P8SlXA5xnu1yUhMc4CE3SB1f94=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: K8liO7Xk31uaDD5yrLQ/2bkKZExCc4ANVhaCHC181Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Dec 20 18:35:25 2025 GMT
            Not After : Dec 27 18:35:25 2025 GMT
        Subject: CN=6946ec6d-2124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:3f:30:39:44:62:40:06:32:23:2e:ae:d6:
                    b7:dd:4d:ed:06:a5:21:91:67:b3:e3:ec:20:d7:0e:
                    f2:a8:15:8f:b7:df:7b:36:97:96:98:37:a9:dc:91:
                    d2:01:4b:5c:c8:81:0b:a1:52:17:a6:73:a4:0e:6b:
                    b5:6b:b4:3a:b5:50:cf:6a:a6:35:48:63:0d:30:c1:
                    77:c5:22:b3:fe:b7:3a:40:20:a2:92:43:c2:21:2f:
                    35:bc:b1:f2:69:f5:70:7d:b3:89:09:9e:fb:fe:bc:
                    df:48:56:e9:73:bc:7c:f4:11:ac:da:7e:df:92:8b:
                    4a:22:72:94:87:3b:45:5a:76:b7:32:c4:0b:6e:3e:
                    61:f1:bc:c7:47:3c:a6:b7:ff:b5:6a:09:e7:3f:ac:
                    e5:f6:88:64:fd:df:8d:82:91:b8:6c:30:4f:94:f6:
                    31:58:73:24:88:d8:7e:64:a0:6b:dd:7d:52:72:16:
                    44:cd:82:66:f2:e7:ff:c2:8d:12:4e:99:3f:78:2c:
                    f8:5f:a9:4e:8b:79:ea:dd:02:16:d3:0f:30:f6:6d:
                    b1:36:4f:85:95:64:e3:0d:49:1d:03:ee:fe:70:c7:
                    e7:db:d6:1a:8f:ba:b9:65:5c:08:58:34:77:72:8e:
                    be:4b:ba:2b:80:be:01:88:f2:83:fb:90:87:d8:4f:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:64:45:90:F1:3A:98:55:53:9F:08:A3:4E:1D:1A:AD:F1:B6:62
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4e:4d:c8:37:c8:38:59:29:75:a3:f7:3a:f8:db:83:05:6a:
         c1:f1:2b:9a:ba:0b:66:14:1c:da:35:0c:6e:e7:d6:5e:f4:26:
         31:fe:b0:24:57:bb:70:14:9b:3d:13:9a:f6:cb:77:57:8d:09:
         53:7c:86:53:f5:df:64:a3:b3:6e:a7:a2:29:3b:39:d9:08:be:
         0d:ce:0c:3d:26:f6:84:8e:20:69:93:fc:0e:a3:49:31:da:47:
         45:b7:b9:9a:21:6c:de:a9:b0:df:a5:fa:19:1e:1c:77:48:66:
         33:51:f8:dc:ef:5f:d5:26:09:2c:ec:77:b5:7e:d4:68:f2:11:
         05:ef:68:ac:c5:c2:e0:ce:bc:15:a2:f0:73:b6:00:3a:90:71:
         d3:51:8d:ad:52:00:b5:8c:41:59:89:02:cd:36:3f:4e:d5:bc:
         91:b3:90:b1:0a:98:09:ca:02:00:d3:84:d9:a8:a3:7b:ca:89:
         a9:8e:64:d3:26:59:73:51:f6:88:60:af:07:56:e1:5a:62:11:
         20:de:fa:96:f4:75:81:20:fe:34:7b:80:99:3b:a6:dd:82:0a:
         90:76:76:c1:45:9d:43:25:63:af:9b:9a:3b:36:0c:1a:03:a6:
         83:5f:47:6e:c2:42:ba:22:2d:86:32:d7:0f:83:69:c5:e2:ed:
         25:18:e2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:11:40 2025 by rpki-client