This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File:                     Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier:          dcMn6XUP1HP/noPS6Ffjhh3ghz+jWP4TEno1qh4onPw=
Subject key identifier:   A5:F2:41:1B:97:5A:AD:5B:FF:0A:0C:37:96:C4:45:31:FD:45:5A:EE
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number:          04F7
Signing time:             Thu 04 Dec 2025 22:17:30 +0000
Manifest this update:     Thu 04 Dec 2025 22:17:29 +0000
Manifest next update:     Thu 11 Dec 2025 22:17:29 +0000
Files and hashes:         1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: n2tWzjnFmVjePxKqqaf0HWYymH2wRyiSawYReR4sKXc=)
                          2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: Dec  4 22:17:29 2025 GMT
            Not After : Dec 11 22:17:29 2025 GMT
        Subject: CN=69320879-e269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d4:a5:f5:ad:b5:95:75:de:1e:78:6d:8b:db:
                    a5:c2:ad:78:b7:cf:70:a3:01:ac:ae:53:28:3a:e3:
                    61:c1:ce:22:00:1e:89:3e:a7:a3:91:d2:69:f2:d2:
                    7f:af:63:05:f4:5f:a1:e3:c2:b5:15:f4:b4:9f:31:
                    0a:80:07:d1:92:80:2a:cb:b8:3d:6c:ad:6c:08:4b:
                    c5:ba:ac:82:d9:39:55:81:5e:35:16:bb:7a:02:bd:
                    8a:20:34:0d:d7:ba:85:94:40:50:6e:59:a3:c8:29:
                    ef:0e:cb:e9:57:0d:bb:55:1d:89:27:0e:c5:27:5d:
                    d8:39:88:c8:8b:57:3e:be:ce:69:5b:5a:2f:09:64:
                    77:ae:3c:8f:0d:45:fc:2b:11:14:3c:bf:f3:d6:7e:
                    ca:87:74:57:84:35:d1:8b:0e:41:5b:e3:bd:46:c5:
                    c2:08:6b:a6:e3:cb:a6:d1:fc:2c:9c:53:04:e8:cf:
                    ac:9d:a0:41:14:c9:7c:59:11:05:63:cf:ab:3c:5d:
                    d2:3b:93:d7:7b:d3:3e:69:2b:28:5b:17:80:89:44:
                    b3:29:1e:b9:4c:f9:c8:a4:5f:a5:53:bd:c7:51:84:
                    3a:5b:a3:6d:e6:8d:6c:22:ab:52:97:9a:6e:81:c7:
                    4d:06:c0:7a:ca:70:1d:2e:37:67:ae:d4:84:8b:e9:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F2:41:1B:97:5A:AD:5B:FF:0A:0C:37:96:C4:45:31:FD:45:5A:EE
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:56:5e:da:32:e2:86:65:76:e5:71:c8:8e:28:0f:ab:ed:
         54:56:56:0f:81:4a:62:ab:8e:be:d8:a6:73:b2:5e:57:0a:70:
         b6:21:4a:50:06:9a:02:94:0f:cb:8c:d0:7b:3a:9f:0d:16:45:
         e4:e0:be:60:6b:e0:f7:19:81:f3:79:01:3e:24:61:3f:6d:7c:
         88:a6:12:2e:29:78:af:12:40:94:d2:78:ba:bb:71:c4:3c:2a:
         53:f9:13:a3:1d:05:48:dd:3e:ce:9e:ab:2f:48:37:78:76:0b:
         08:51:a9:68:06:d8:03:ef:c5:9f:31:5a:f8:e0:ed:1e:2d:76:
         da:1f:68:f0:fc:8c:45:0e:29:61:18:b6:1c:2c:a8:99:42:a4:
         22:ba:f0:55:80:9b:ff:49:33:60:65:93:ec:50:9a:0d:9c:6e:
         56:ce:40:58:4a:39:8b:85:23:59:c6:dc:32:a9:eb:6c:b5:67:
         81:02:74:dd:e6:3c:aa:3e:ee:91:95:68:d3:0b:ba:6e:7f:3b:
         eb:59:db:20:8d:f4:44:af:1f:6b:54:7d:14:7a:a6:61:fc:fe:
         a6:3a:60:52:73:16:30:88:11:fd:cf:4a:e7:74:31:7a:b9:93:
         52:e9:2d:fd:7e:0c:69:59:9c:c0:2b:67:19:b5:09:a3:78:d7:
         85:b6:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:32 2025 by rpki-client