This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
File:                     uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json)
Hash identifier:          +GFwexCugM53pHZSSlfqxrDMISbcsyMkF1yTSvGlxlk=
Subject key identifier:   49:98:F0:B7:12:6C:4B:DB:20:8D:23:23:02:76:1F:7C:14:6C:B9:AE
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Certificate issuer:       /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial:       2723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
Manifest number:          2703
Signing time:             Sat 20 Dec 2025 15:32:44 +0000
Manifest this update:     Sat 20 Dec 2025 15:32:44 +0000
Manifest next update:     Sat 27 Dec 2025 15:32:44 +0000
Files and hashes:         1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 97IBJWpdfOBoXTXgE8Pvfc/3aMkViPpqTnsaLQbEEuo=)
                          2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: YuV1/atgnEaFCqu1mP7hP8CBn8yEYyO/tgyELx2LMIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10019 (0x2723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
        Validity
            Not Before: Dec 20 15:32:44 2025 GMT
            Not After : Dec 27 15:32:44 2025 GMT
        Subject: CN=6946c19c-ae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:be:0c:0f:ba:d4:9d:7c:d8:79:88:80:7b:
                    2b:21:4f:67:80:26:b1:35:c8:bd:9a:d3:a4:d5:dc:
                    ee:77:bf:d4:c0:4f:1e:a4:e5:09:b2:62:99:2f:07:
                    9a:e9:38:3f:f9:2f:a3:e5:aa:76:47:92:cd:7c:b3:
                    de:c8:22:50:82:61:ab:95:30:17:5b:c9:6b:27:e0:
                    fd:f9:91:10:31:b5:2e:2d:41:61:64:b4:7c:88:8f:
                    75:79:ec:c0:0e:6b:aa:f2:bf:fe:0c:7c:a1:93:42:
                    8d:6b:87:56:a5:57:6d:e4:88:be:0b:db:fe:6a:74:
                    2f:55:da:fc:aa:59:06:77:2a:de:32:8d:3c:dd:66:
                    6f:85:7b:5a:ac:58:20:a6:a1:18:a8:dc:35:69:34:
                    9d:fe:98:a1:aa:6b:25:03:8f:6b:20:53:e5:e8:d9:
                    1b:17:af:4c:eb:20:77:19:63:ef:51:2b:06:3b:e0:
                    68:81:7b:0c:be:a4:31:f5:0a:5b:ca:85:1e:d1:c8:
                    71:6e:63:69:97:de:75:49:73:53:46:08:5c:75:25:
                    86:1f:5d:d8:1d:27:9e:e3:64:a4:7f:ee:70:07:d5:
                    e3:74:d8:6f:c1:5d:3a:7e:d3:9a:f0:75:23:e4:a2:
                    0f:6f:c3:df:85:16:32:6b:5a:e7:31:67:a8:81:f1:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:F0:B7:12:6C:4B:DB:20:8D:23:23:02:76:1F:7C:14:6C:B9:AE
            X509v3 Authority Key Identifier:
                keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:96:6c:9b:9f:39:85:7c:7d:76:10:a3:77:e6:c7:ca:c8:
         bc:86:72:c4:79:62:0a:6a:c0:d3:45:eb:4b:29:de:5d:d7:d8:
         1a:7c:78:77:ef:19:0e:c3:32:30:c6:8f:b8:af:95:92:d7:38:
         ff:cc:f6:c2:49:9a:c8:ef:6f:f1:1a:19:69:55:ec:78:52:c0:
         bb:00:0b:87:8a:0b:d5:d1:66:fd:1b:f9:89:ba:af:62:5e:61:
         a7:9c:17:73:e3:df:82:75:62:d7:84:eb:a9:be:b1:44:44:4d:
         3b:50:1b:5e:76:bb:f8:43:82:0f:f9:03:86:44:18:b9:30:49:
         f1:62:83:be:4e:be:d6:76:64:ad:12:4d:d3:56:fa:c9:a9:5e:
         0d:9f:20:a0:b4:04:08:d6:e5:56:0d:8d:72:b2:6a:41:9c:6a:
         c2:e3:14:3d:e6:8a:c1:6d:22:6c:92:c3:a5:9b:ba:77:14:fa:
         5c:be:9a:46:19:f4:ad:7d:d4:5f:d5:6a:81:f7:94:81:c3:9f:
         1e:a3:50:37:3f:19:25:a7:bf:78:d7:fd:5e:f7:6e:07:ea:9d:
         54:73:65:02:e6:08:c3:6c:bf:ae:10:bf:2b:94:c3:c0:7c:af:
         87:dc:12:0c:79:df:de:b8:28:6a:d6:b7:7d:48:4e:00:1c:86:
         cf:cb:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:38:12 2025 by rpki-client