This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
File:                     UKDclVimxA3c1TX7e1wL7qZuBOQ.mft (raw, json)
Hash identifier:          wy1nB05i1Ucw9gWzOGifRbcnq4uWZEguFKLj7CIVvvQ=
Subject key identifier:   E3:A0:92:8D:62:6B:CB:2C:93:D9:D7:B8:A9:4D:FE:6F:A0:5B:4B:4B
Authority key identifier: 50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4
Certificate issuer:       /CN=A91FA851/serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
Manifest number:          0171
Signing time:             Sat 27 Dec 2025 02:57:13 +0000
Manifest this update:     Sat 27 Dec 2025 02:57:13 +0000
Manifest next update:     Sat 03 Jan 2026 02:57:13 +0000
Files and hashes:         1: UKDclVimxA3c1TX7e1wL7qZuBOQ.crl (hash: 8kotcqenNe+lFBYxjhaXfs+BByPRWKcVVJIHVtgiWI0=)
                          2: E436696E02F011F0AD655B63C4F9AE02.roa (hash: Jk9RrR3gjgm3wbIBdhiQRBJ8z40sBgZjeZ2JGJJGKwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 02:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=50A0DC9558A6C40DDCD535FB7B5C0BEEA66E04E4
        Validity
            Not Before: Dec 27 02:57:13 2025 GMT
            Not After : Jan  3 02:57:13 2026 GMT
        Subject: CN=694f4b09-2c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:39:52:40:ce:94:9f:e0:16:27:a3:38:60:
                    11:68:99:4b:19:ac:02:b7:b1:05:22:a5:d0:9e:b3:
                    a6:06:a6:90:3a:75:3a:f4:c5:3c:b8:9c:9b:27:70:
                    78:df:a4:be:46:91:93:9f:6e:30:73:78:20:c6:d7:
                    26:3f:87:fc:81:fa:80:7d:3d:8c:25:2a:bd:6c:53:
                    85:a9:28:b6:a4:ff:20:8a:4d:25:6a:ad:fd:4d:90:
                    0b:16:bb:5f:06:0d:6a:85:3e:f2:73:eb:e4:0d:6d:
                    0c:3d:39:4f:72:36:6e:34:21:9f:eb:61:18:45:63:
                    9e:66:39:af:27:b6:dc:d5:9a:42:0f:50:76:82:50:
                    b1:c0:e2:05:61:74:3b:79:74:1d:9e:09:1e:59:44:
                    e6:25:14:75:1d:43:f7:48:0b:d2:f3:61:bd:45:a7:
                    07:5f:13:74:40:fe:34:61:4c:2d:e5:09:81:62:d6:
                    12:f4:cd:b7:4c:53:76:66:b5:39:0e:09:4a:dc:31:
                    0f:e7:9e:3d:87:97:66:80:71:a6:a0:4f:73:d5:ce:
                    66:11:d3:f3:61:4a:b6:f9:fb:9e:52:45:db:dd:a6:
                    d7:c1:0b:8e:2f:6c:86:ba:27:ae:42:db:b1:e8:4d:
                    98:4f:62:ac:44:af:9f:6c:50:4f:53:2a:91:cf:b9:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:92:8D:62:6B:CB:2C:93:D9:D7:B8:A9:4D:FE:6F:A0:5B:4B:4B
            X509v3 Authority Key Identifier:
                keyid:50:A0:DC:95:58:A6:C4:0D:DC:D5:35:FB:7B:5C:0B:EE:A6:6E:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKDclVimxA3c1TX7e1wL7qZuBOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/8BC5127CB9DF11EE94B4242AC4F9AE02/UKDclVimxA3c1TX7e1wL7qZuBOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:64:86:df:5f:a4:ae:d0:ff:4f:58:9d:82:ab:de:e8:18:d5:
         b2:05:f5:83:34:76:ec:68:02:88:da:2f:2e:ba:2b:f8:69:4f:
         a1:aa:05:e7:72:53:1f:3b:19:e6:58:05:e0:c6:6f:9e:ed:ab:
         08:f9:50:0a:58:80:3f:cf:9c:7b:b7:91:6a:fb:4a:df:ad:c3:
         e7:15:70:bc:6e:f0:8d:d2:cf:5a:f4:80:de:af:c3:82:37:86:
         ec:17:77:11:bd:38:59:57:5f:0c:5d:72:19:71:4b:bd:8b:a8:
         49:71:10:e0:71:9e:9a:27:2c:83:bd:7e:a0:c4:a4:57:a9:6f:
         6c:09:20:76:bd:a4:39:38:01:97:24:d5:35:2e:86:7c:cc:81:
         be:2f:9e:02:d3:ca:39:27:78:71:e8:45:91:11:61:61:09:f9:
         39:2e:41:90:6f:c4:34:e7:39:d5:e9:64:8e:67:3b:26:b7:69:
         be:68:0f:11:a4:c8:86:49:00:b5:06:3b:77:fb:36:d6:6d:9d:
         48:a6:9b:fb:ce:a5:c9:80:7e:7b:99:d1:6a:7f:3d:2d:9c:4d:
         fd:b4:82:8b:c3:fc:96:fe:a6:f4:a9:bd:a2:0e:66:06:a6:98:
         30:88:9f:e2:fb:74:ca:11:20:e9:0f:7d:bc:86:00:c5:c5:56:
         1a:ce:ce:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE4NTExMTAvBgNVBAUTKDUwQTBEQzk1NThBNkM0MEREQ0Q1MzVGQjdCNUMwQkVF
QTY2RTA0RTQwHhcNMjUxMjI3MDI1NzEzWhcNMjYwMTAzMDI1NzEzWjAYMRYwFAYD
VQQDDA02OTRmNGIwOS0yYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn+s5UkDOlJ/gFiejOGARaJlLGawCt7EFIqXQnrOmBqaQOnU69MU8uJybJ3B4
36S+RpGTn24wc3ggxtcmP4f8gfqAfT2MJSq9bFOFqSi2pP8gik0laq39TZALFrtf
Bg1qhT7yc+vkDW0MPTlPcjZuNCGf62EYRWOeZjmvJ7bc1ZpCD1B2glCxwOIFYXQ7
eXQdngkeWUTmJRR1HUP3SAvS82G9RacHXxN0QP40YUwt5QmBYtYS9M23TFN2ZrU5
DglK3DEP5549h5dmgHGmoE9z1c5mEdPzYUq2+fueUkXb3abXwQuOL2yGuieuQtux
6E2YT2KsRK+fbFBPUyqRz7kRIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOgko1i
a8ssk9nXuKlN/m+gW0tLMB8GA1UdIwQYMBaAFFCg3JVYpsQN3NU1+3tcC+6mbgTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTg1MS84QkM1MTI3Q0I5
REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhBM2MxVFg3ZTF3TDdxWnVC
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLRGNsVmlteEEzYzFUWDdlMXdMN3FadUJPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTg1MS84QkM1MTI3Q0I5REYxMUVFOTRCNDI0MkFDNEY5QUUwMi9VS0RjbFZpbXhB
M2MxVFg3ZTF3TDdxWnVCT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByZIbfX6Su0P9PWJ2Cq97oGNWyBfWDNHbsaAKI2i8uuiv4aU+hqgXn
clMfOxnmWAXgxm+e7asI+VAKWIA/z5x7t5Fq+0rfrcPnFXC8bvCN0s9a9IDer8OC
N4bsF3cRvThZV18MXXIZcUu9i6hJcRDgcZ6aJyyDvX6gxKRXqW9sCSB2vaQ5OAGX
JNU1LoZ8zIG+L54C08o5J3hx6EWREWFhCfk5LkGQb8Q05znV6WSOZzsmt2m+aA8R
pMiGSQC1Bjt3+zbWbZ1Ippv7zqXJgH57mdFqfz0tnE39tIKLw/yW/qb0qb2iDmYG
ppgwiJ/i+3TKESDpD328hgDFxVYazs6V
-----END CERTIFICATE-----
Generated at Sun Dec 28 23:40:56 2025 by rpki-client