This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
File:                     CUyLxdrczZwvs89F0UZN7s86HGA.mft (raw, json)
Hash identifier:          jv08eR3sN/ICB+CR1z+nmWiaUffiAH/KpwWDqOZXI7I=
Subject key identifier:   87:60:82:0A:D1:1F:F3:4E:02:2A:BA:07:B9:9D:55:95:4E:04:8F:C0
Authority key identifier: 09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60
Certificate issuer:       /CN=A9164164/serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
Manifest number:          C5
Signing time:             Fri 05 Dec 2025 03:49:13 +0000
Manifest this update:     Fri 05 Dec 2025 03:49:12 +0000
Manifest next update:     Fri 12 Dec 2025 03:49:12 +0000
Files and hashes:         1: CUyLxdrczZwvs89F0UZN7s86HGA.crl (hash: Qd5r96iAoyRd/JCqGq7ZGNHdfebXVNB+V+/x4vVMcZ4=)
                          2: F1B3D754A18211EFA2B7E923C4F9AE02.roa (hash: ZgB4/zOUlrbnr+66F7inM4U41pNR0yS6V1N2ZkRjXXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=094C8BC5DADCCD9C2FB3CF45D1464DEECF3A1C60
        Validity
            Not Before: Dec  5 03:49:12 2025 GMT
            Not After : Dec 12 03:49:12 2025 GMT
        Subject: CN=69325639-b6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:c7:0c:30:1a:30:f0:37:82:94:74:e3:c7:
                    85:b9:e6:82:c5:1c:e0:0f:bb:fe:27:b1:0e:d7:df:
                    3a:af:eb:67:aa:3b:cd:50:3c:9c:ca:20:fa:92:d8:
                    29:a2:8b:ff:e4:cd:51:cf:bd:0f:69:69:12:28:62:
                    57:a8:69:5d:21:e8:54:42:c2:b7:4f:43:1a:81:85:
                    5c:0f:84:09:06:d8:23:07:d8:f1:d8:d7:f0:76:27:
                    3b:f2:7e:fd:01:4f:18:48:8e:b9:88:f8:24:9f:88:
                    91:4b:6e:f5:00:dd:6c:e9:ab:45:3e:35:7c:78:37:
                    eb:de:c9:8d:db:c5:49:12:93:33:30:6c:82:b5:41:
                    5a:2f:c5:bf:c2:66:64:26:de:21:cf:76:cd:6d:22:
                    e3:47:a0:51:33:30:82:6a:8d:90:2c:08:f9:c3:5d:
                    c2:72:13:33:c1:a5:17:6b:00:9d:4a:37:37:58:e6:
                    48:00:f7:15:83:0c:fc:b2:22:2f:3e:5f:91:84:54:
                    d6:02:f7:a1:d8:ef:51:46:09:a9:1c:fb:af:0d:92:
                    86:74:be:19:b3:f5:2d:e7:81:49:38:2c:ae:b2:e1:
                    b7:a4:e1:a9:34:54:49:b0:97:55:ce:dd:3e:cb:3e:
                    56:d6:f7:ff:2d:19:25:93:79:f8:b3:ee:6a:f7:99:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:60:82:0A:D1:1F:F3:4E:02:2A:BA:07:B9:9D:55:95:4E:04:8F:C0
            X509v3 Authority Key Identifier:
                keyid:09:4C:8B:C5:DA:DC:CD:9C:2F:B3:CF:45:D1:46:4D:EE:CF:3A:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUyLxdrczZwvs89F0UZN7s86HGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/AE72289CA18211EF8F4E1623C4F9AE02/CUyLxdrczZwvs89F0UZN7s86HGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:ef:8c:6d:b7:49:5e:cd:c7:da:10:b3:2a:a7:65:b4:e9:
         2c:f8:48:21:43:04:99:7d:af:53:be:aa:a7:d8:a7:c5:90:cf:
         3b:92:0f:c6:eb:79:b0:b4:de:04:f5:39:4a:cc:d6:53:d6:02:
         f8:a0:02:ee:d6:c7:28:e6:c5:48:e8:5b:af:aa:1d:d6:42:1a:
         99:b0:0f:56:90:00:15:36:9a:0d:5d:9d:2e:a6:db:c7:85:74:
         ef:85:ef:f3:47:cc:b0:0e:7e:1b:4c:0e:d5:a1:21:24:ea:f9:
         7b:44:d4:62:a6:7c:a6:44:08:51:93:9d:35:6f:b6:51:79:39:
         c2:31:ba:d8:cf:bf:ea:77:27:2f:01:54:78:3e:66:ae:1a:73:
         04:f4:03:a4:d4:82:a0:33:28:2b:21:b0:57:22:05:39:ed:63:
         72:4f:76:57:30:3b:07:22:94:dc:b6:83:b3:6d:e8:4d:11:f6:
         6b:0d:ba:fd:c8:4f:8a:a3:34:83:e2:d7:e6:4c:22:9f:dc:89:
         85:97:03:34:63:26:81:df:3e:30:f1:63:95:c6:54:b1:fa:1b:
         76:57:00:5d:bc:f8:f1:14:d7:4c:6c:34:ef:ac:8b:05:a6:1d:
         aa:59:8e:24:42:ec:28:c2:a0:ba:d5:a6:d0:9a:b8:a6:9e:bc:
         da:06:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:57 2025 by rpki-client