This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
File:                     ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft (raw, json)
Hash identifier:          tgYI0rf5kCywJRRjRdVN95R/j0WIahRIS+G38fsevlM=
Subject key identifier:   42:E9:CE:2E:C1:F9:F9:30:B0:AB:5B:5E:A8:01:A8:3A:C8:ED:2F:5E
Authority key identifier: BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3
Certificate issuer:       /CN=A91F731E/serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
Manifest number:          0144
Signing time:             Wed 24 Dec 2025 15:51:14 +0000
Manifest this update:     Wed 24 Dec 2025 15:51:14 +0000
Manifest next update:     Wed 31 Dec 2025 15:51:13 +0000
Files and hashes:         1: ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl (hash: wqsmuGhBAp4ypnuSAzTMudovvJHrbbtastglpzKsYFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=BA3946B013D547D0E9CBA4BB11B58AC9001C57E3
        Validity
            Not Before: Dec 24 15:51:14 2025 GMT
            Not After : Dec 31 15:51:13 2025 GMT
        Subject: CN=694c0bf2-3188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f6:92:88:7f:6b:e0:b2:6e:cf:20:2a:53:d5:
                    6e:f5:b2:99:19:b9:80:c2:b5:57:20:db:2a:47:81:
                    70:3f:be:77:eb:4e:0e:17:bc:7f:95:e1:a4:ba:4f:
                    39:ca:8a:98:3f:8a:dd:4e:f2:9a:07:c5:d6:20:46:
                    d8:b1:7d:f5:df:71:5d:58:dc:d2:ab:b2:c4:e1:3d:
                    ad:78:cd:28:06:9f:2e:82:3f:d7:be:09:5f:46:53:
                    0b:bd:2c:06:34:4c:0e:48:f5:3d:5d:61:92:7a:33:
                    da:19:9e:4c:9c:a2:7d:80:72:fc:d9:d1:bc:c1:bd:
                    44:56:fe:7d:88:84:5a:cf:c0:9c:be:e8:99:3b:be:
                    43:c7:79:c5:79:86:6d:3d:f5:7a:72:1e:e4:c6:f8:
                    2b:32:bb:e9:66:d2:6f:3c:6d:a6:e7:97:4a:2b:66:
                    c3:9e:44:81:33:34:86:6c:9f:27:5e:f4:fc:99:a7:
                    3a:e3:aa:6c:dd:d9:43:e4:36:ef:44:e8:ed:68:72:
                    0e:03:ed:f3:9f:39:8a:f5:b5:cd:96:8b:09:97:0f:
                    94:a2:08:fc:28:72:f6:8b:b3:b6:81:78:9b:4d:fb:
                    44:81:77:a2:14:80:c2:0a:e7:43:d8:d6:9e:4b:a2:
                    67:1e:10:e7:4a:46:57:df:92:da:14:e9:24:29:60:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E9:CE:2E:C1:F9:F9:30:B0:AB:5B:5E:A8:01:A8:3A:C8:ED:2F:5E
            X509v3 Authority Key Identifier:
                keyid:BA:39:46:B0:13:D5:47:D0:E9:CB:A4:BB:11:B5:8A:C9:00:1C:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/566F347CF2A111EEA8A44F1AC4F9AE02/ujlGsBPVR9Dpy6S7EbWKyQAcV-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1e:5d:2e:9f:81:cb:7d:b2:bc:f1:3c:69:93:d3:06:7d:25:
         53:a4:7a:d9:2d:4f:2b:63:ef:56:0a:83:56:32:cc:f3:bc:70:
         ee:d2:51:a4:2b:f1:07:1f:43:a7:ac:df:76:38:3c:b9:ad:6a:
         f6:9a:5d:d1:bb:6a:54:9b:9b:f0:85:4e:38:dc:32:db:18:10:
         d2:32:d3:c0:f8:95:85:d3:9b:43:22:c8:18:cc:5d:17:35:ab:
         08:1f:78:8b:41:79:62:66:6b:38:1c:82:71:1c:26:79:5e:c6:
         68:3c:48:b3:1e:dc:a2:43:4e:61:19:5a:4b:ac:aa:76:07:75:
         45:76:03:4c:bb:9e:3a:4b:1d:92:46:d2:41:ad:7e:75:78:73:
         b7:a5:99:30:75:71:f2:6d:9f:bb:ea:4d:21:06:da:c4:2c:7e:
         b7:61:c5:92:47:10:4d:f1:58:56:57:12:4a:d3:6f:74:b6:3e:
         03:6d:9e:13:4c:7c:57:5c:38:06:f6:b7:31:f0:4c:20:c0:83:
         bd:05:18:0c:d6:e8:10:50:74:8a:28:29:9c:72:ad:eb:c3:2f:
         5e:e0:13:18:a2:c2:a6:1c:db:ab:18:4c:34:e2:6a:bd:ae:8c:
         ba:55:68:f3:e4:df:2f:17:35:af:cf:fe:ed:a8:b0:af:2c:ea:
         e1:be:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:29:01 2025 by rpki-client