This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File:                     CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier:          teGkZWMjXiMq9UOMu9XfUheyQNbdpkei6IMAm0wgUjk=
Subject key identifier:   49:07:AE:F3:01:BA:24:74:F0:5F:90:1D:9F:B0:08:E5:8B:BA:F2:27
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number:          0188
Signing time:             Sun 25 Jan 2026 02:55:03 +0000
Manifest this update:     Sun 25 Jan 2026 02:55:02 +0000
Manifest next update:     Sun 01 Feb 2026 02:55:02 +0000
Files and hashes:         1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: z44p9+vjetRrIO0uXDRGWCmppUmf3vFPALL3AfqakNc=)
                          2: AB501A702CDE11EFBC062E74C4F9AE02.roa (hash: oNFEmYACURX8AL5CKdRsG7Ba4gG8bP0+lhNlBuOmVKY=)
                          3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: lEc4QJGwk5bvYmoYAomdEIkxOdB1PEJOkUqud1Iy0CI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Jan 25 02:55:02 2026 GMT
            Not After : Feb  1 02:55:02 2026 GMT
        Subject: CN=69758606-28c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:65:dc:8f:fb:ec:8b:e8:80:da:cb:6e:f2:
                    93:4f:e6:80:cc:3c:e4:7c:8f:0f:53:c0:0a:81:cb:
                    10:43:a6:ca:4a:85:44:69:04:ea:c7:e7:b1:e6:22:
                    7b:e0:0a:5c:30:e4:4c:b5:2e:7e:e6:28:89:9e:b7:
                    45:d0:6b:54:e7:3f:3a:9b:2d:f7:7d:ee:72:49:ea:
                    2a:76:1f:7f:88:4a:ee:c2:29:86:84:c8:14:42:a9:
                    e8:c6:ff:a7:da:73:1d:97:c2:93:20:24:f9:74:20:
                    49:76:73:db:8f:30:a0:01:fc:0c:eb:28:fa:28:55:
                    bb:f5:65:c0:ce:16:64:8d:d2:dd:78:ba:d9:fb:a4:
                    92:4e:e1:d5:5a:9c:7a:d9:11:dc:8b:1e:1d:6e:71:
                    8f:9a:d6:fe:bc:ae:73:6d:c9:35:06:ad:92:43:a6:
                    a9:3f:fd:ac:9a:0f:d8:97:2a:45:03:a2:89:59:02:
                    e6:34:56:8f:cc:6d:36:d4:85:08:88:ec:9b:13:53:
                    ee:0c:4d:dd:66:26:ef:25:0f:eb:c3:3f:c4:ce:b1:
                    6d:80:a4:5a:8e:41:99:df:f0:30:ad:9d:18:bf:ce:
                    4f:75:7e:67:53:f1:df:52:c7:23:4b:90:ed:02:a3:
                    5d:85:94:89:a2:c8:4c:f7:91:8e:b3:22:94:ab:5c:
                    e6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:07:AE:F3:01:BA:24:74:F0:5F:90:1D:9F:B0:08:E5:8B:BA:F2:27
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e1:b2:b7:ce:52:d0:1b:e1:0a:06:9c:e9:98:44:41:3f:47:
         38:da:f4:cb:74:c0:e7:f7:68:6c:81:fe:40:ad:1a:82:20:f3:
         d4:a6:d9:03:10:24:aa:fc:7a:de:ef:ca:27:a6:93:71:1c:6c:
         bf:22:3c:85:2c:2d:b5:c6:74:24:e0:a0:37:bd:9e:5d:0e:63:
         92:ab:c6:61:48:70:73:3b:85:0b:28:9c:56:35:47:3b:f6:9a:
         38:1e:8d:f5:35:57:8a:6e:a8:b8:e6:43:61:b4:a4:44:b2:e4:
         e4:c5:83:2b:96:a7:28:ab:58:f7:3e:5a:ad:f9:ff:4b:ce:3e:
         56:22:ef:b8:af:b2:47:a4:9c:17:47:50:9f:90:78:b5:89:84:
         af:89:b6:93:05:2a:d9:e8:20:30:43:67:a0:bc:86:5d:b5:fb:
         37:5b:4f:25:f2:bd:22:7f:7e:a6:48:64:ad:15:8c:67:e0:1d:
         9c:00:e8:35:8a:86:73:cd:c8:59:c9:28:ab:62:0c:24:25:ab:
         b0:c6:eb:31:32:04:2f:b4:ee:4d:7c:7c:e5:5a:9f:4d:84:eb:
         17:4b:a2:5a:b6:b6:16:17:4c:c9:ac:5b:82:f0:7b:34:c8:ed:
         65:7f:49:d1:a3:69:f2:30:67:3a:f2:6a:64:5f:f4:82:45:d7:
         25:35:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:20 2026 by rpki-client