This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File:                     UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier:          xbsz6NJZAPIviOVsCYePtDPWwF/8NwMQNjhZK3imMWI=
Subject key identifier:   2B:B5:3B:0A:FD:D6:C5:1B:A4:18:0C:E5:A7:3E:3B:0F:71:62:2C:F5
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer:       /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number:          6D
Signing time:             Wed 31 Dec 2025 05:55:18 +0000
Manifest this update:     Wed 31 Dec 2025 05:55:17 +0000
Manifest next update:     Wed 07 Jan 2026 05:55:17 +0000
Files and hashes:         1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: FGomb9QvM7jwT6oS6SnLMcMxotXaOiUc5zu2NTG2mUQ=)
                          2: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=)
                          3: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
                          rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 05:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
        Validity
            Not Before: Dec 31 05:55:17 2025 GMT
            Not After : Jan  7 05:55:17 2026 GMT
        Subject: CN=6954bac6-8ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:71:cb:d8:4a:c8:62:55:bb:31:83:7e:d7:
                    12:52:fd:9b:ec:9f:02:54:5b:8a:87:90:4b:a1:b3:
                    a8:3c:94:7d:b9:93:94:9c:05:ed:c3:e4:4e:d3:3c:
                    d0:c4:6a:e7:a9:db:9d:6a:c0:47:f5:1b:e3:b6:ee:
                    b6:15:94:f5:13:12:0b:31:42:72:70:ae:af:6a:28:
                    f6:91:fc:ec:ef:5f:ce:49:1b:83:a2:87:82:86:76:
                    c7:52:95:2c:fb:8e:af:30:f2:e9:aa:8e:87:39:20:
                    3f:c0:8c:40:e3:ea:a8:09:2f:e3:d1:37:9f:4f:83:
                    4c:6e:d5:76:f1:98:d2:e1:e9:81:93:d4:01:74:b3:
                    4b:01:09:45:89:07:a6:18:96:cd:3a:66:e3:1d:84:
                    82:2e:23:77:2c:e0:d4:a1:8d:a1:4e:4e:c7:76:c6:
                    39:cc:12:bd:e0:f9:04:90:03:a1:f6:e3:7d:c1:80:
                    e9:0a:7c:c1:4f:d4:a6:41:6f:16:98:f0:54:55:ef:
                    d2:a2:28:74:17:0a:6a:ab:e0:34:dd:b5:5f:65:11:
                    5d:24:0e:4d:a1:94:8c:89:c4:72:b9:f2:e1:31:fb:
                    9e:df:f0:15:8e:a1:01:d4:9e:d2:86:50:64:f8:52:
                    23:16:b2:7d:4e:fc:d6:32:06:dc:8d:57:9a:fd:e8:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:3B:0A:FD:D6:C5:1B:A4:18:0C:E5:A7:3E:3B:0F:71:62:2C:F5
            X509v3 Authority Key Identifier:
                keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:77:6b:c8:a5:f4:8f:0c:fa:51:14:99:36:bf:24:5d:88:
         dc:6f:77:dd:d2:56:2b:69:50:18:cd:52:37:bf:a2:7a:43:9b:
         be:02:0f:8b:aa:32:f2:81:16:d4:49:3a:92:67:aa:11:f3:62:
         5c:78:66:86:b3:d0:c8:f7:16:c4:cc:91:05:77:54:57:58:32:
         bc:58:14:ce:19:74:0e:03:f5:20:21:c8:a9:e4:61:4c:17:8f:
         88:8e:2b:74:1c:4b:e6:77:ba:2c:6c:af:b4:dd:62:85:7c:dc:
         92:f4:6d:6f:59:49:2c:53:d2:90:fd:f1:c9:6a:01:a1:d5:06:
         81:cd:5f:ab:aa:ae:f0:d8:3c:77:a3:0a:4a:8b:4a:11:02:d6:
         d2:52:d6:89:23:ca:33:8a:1b:bd:3d:56:80:5a:31:f1:af:08:
         19:96:c9:cd:48:9d:82:2c:71:08:60:1e:ff:17:db:68:62:60:
         7c:79:4b:09:8b:1b:df:a6:64:6d:17:64:b0:21:55:9a:9f:84:
         2a:2a:d9:16:90:8d:2f:fa:fd:37:29:2f:fb:f2:7a:7f:54:5a:
         20:8e:51:5c:6a:56:18:3d:c9:04:88:f4:3b:7d:8c:77:1b:12:
         21:a0:f9:37:0a:a0:5c:60:ed:32:1b:7c:25:1e:12:87:28:72:
         ce:5e:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 10:29:09 2025 by rpki-client