This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
File:                     uXgEM1AwWT1tlle8RdvRFLEpHSg.mft (raw, json)
Hash identifier:          ENj9IUqU5ulsZTRl2ix/IlBYZsag7Cc21i/edLYxHPE=
Subject key identifier:   EA:6E:B4:4C:DA:2E:21:D6:9E:31:4B:11:7D:13:63:41:C3:FC:77:C6
Authority key identifier: B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28
Certificate issuer:       /CN=A91E9310/serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
Manifest number:          04BE
Signing time:             Wed 24 Dec 2025 23:04:13 +0000
Manifest this update:     Wed 24 Dec 2025 23:04:12 +0000
Manifest next update:     Wed 31 Dec 2025 23:04:12 +0000
Files and hashes:         1: uXgEM1AwWT1tlle8RdvRFLEpHSg.crl (hash: cdbyOeDPoBIlWLItNUNmv51ADGGaOdbj688HD/k8WY0=)
                          2: E985185E773D11F0B023A932C4F9AE02.roa (hash: mISRfVX+s35IuBCQPh+4h139jbl1K2kLytqStI4mDZA=)
                          3: 785EB284773D11F0AB969921C4F9AE02.roa (hash: 8Zp/aagGSHH88DTb+DNr1X++0HtBH9A2tNVSmLSIRBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl
                          rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 23:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9310, serialNumber=B97804335030593D6D9657BC45DBD114B1291D28
        Validity
            Not Before: Dec 24 23:04:12 2025 GMT
            Not After : Dec 31 23:04:12 2025 GMT
        Subject: CN=694c716d-852c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:41:aa:3c:4e:b4:28:49:8c:4b:54:1f:fb:
                    29:45:08:27:e7:57:9b:02:be:4f:84:d9:1e:00:42:
                    e6:ef:b5:37:ea:f3:c0:7a:70:ae:53:57:72:4d:27:
                    96:31:74:e4:b2:46:b6:b3:2f:b6:20:99:de:2b:f5:
                    a8:f8:47:b2:92:08:af:42:89:c9:e8:ad:42:27:d0:
                    0e:f8:eb:89:c3:be:38:75:88:f6:07:65:36:3c:fc:
                    82:cf:5f:14:66:74:7a:0e:84:34:2e:4e:86:e0:5d:
                    fc:49:5b:b0:c3:c3:47:00:9e:c3:ec:d0:3e:1c:73:
                    a9:08:7e:6f:47:83:86:6c:89:d1:63:6b:bd:7b:16:
                    49:90:e4:49:5a:fa:40:69:67:33:02:92:06:4b:8e:
                    4b:c6:a6:d9:15:4b:8e:d4:60:00:5e:b2:46:b0:f5:
                    b4:8d:fc:98:49:45:78:3a:d4:ba:98:f3:3a:46:c0:
                    8e:8d:05:02:8c:be:f1:c7:2e:54:8c:59:b8:9c:55:
                    40:b2:b7:b7:0b:52:79:f2:32:e1:75:89:7d:ae:41:
                    46:d7:a3:1a:1d:8c:9f:e7:88:67:72:6a:cb:44:bd:
                    07:68:f7:a5:3d:06:2d:ec:b3:2a:a0:6f:af:28:d2:
                    d5:c4:79:71:be:aa:f0:4e:8f:54:51:13:ca:4a:51:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6E:B4:4C:DA:2E:21:D6:9E:31:4B:11:7D:13:63:41:C3:FC:77:C6
            X509v3 Authority Key Identifier:
                keyid:B9:78:04:33:50:30:59:3D:6D:96:57:BC:45:DB:D1:14:B1:29:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uXgEM1AwWT1tlle8RdvRFLEpHSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9310/D1B1D344546311ECA8FA496AC4F9AE02/uXgEM1AwWT1tlle8RdvRFLEpHSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:28:c0:37:76:eb:97:16:d8:16:40:18:cc:c9:6b:fb:3d:
         03:2c:aa:a5:57:2f:bd:5e:1a:06:5f:94:31:cc:42:92:91:b6:
         50:29:c6:be:9e:bd:2c:a9:47:96:bd:f4:ad:cb:fc:72:f8:6b:
         17:a9:e1:be:74:14:33:9a:ec:fd:c9:53:86:73:6c:dc:96:5e:
         5c:ae:b1:0a:d2:a6:8d:4f:61:e5:a1:6a:56:cb:68:1d:5e:7b:
         7b:3c:95:5c:88:45:ba:a8:65:07:b6:61:c5:57:3f:a4:03:0e:
         22:56:6f:e9:b3:06:ae:b0:e5:e1:ad:93:6f:59:da:9b:b1:f4:
         b3:a1:32:91:e3:fd:b0:79:3a:9b:53:29:78:40:1a:90:6d:29:
         f1:ca:1a:9b:17:7e:0f:6a:29:7c:ab:13:8f:e2:f3:c5:94:8a:
         a2:2c:0e:8e:4c:97:40:a8:20:ce:0a:40:dd:c9:f9:88:7f:44:
         e1:f8:45:9d:3f:cf:c8:ac:ac:28:9e:b5:64:88:b7:10:0d:83:
         00:cf:1c:38:a8:53:82:6a:36:59:42:a8:84:81:09:73:b8:18:
         0c:7f:54:60:ac:8c:bd:79:b7:3a:5c:00:e6:f4:ea:c2:fc:03:
         2c:50:57:ae:57:4b:c3:2d:fe:9a:38:d7:4f:3e:cc:0a:e3:8e:
         d4:16:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 21:06:47 2025 by rpki-client