This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          d/2sLV68Ad/7IKDSTG/nxvi5qrtNEwfHIevuZ7/0GXc=
Subject key identifier:   C5:9E:3E:A1:DB:2F:A3:D3:AD:D4:DB:DB:C0:94:06:3D:84:94:4E:E4
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          C1
Signing time:             Fri 05 Dec 2025 03:55:55 +0000
Manifest this update:     Fri 05 Dec 2025 03:55:55 +0000
Manifest next update:     Fri 12 Dec 2025 03:55:54 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: YfQ3AxZS3LWoItnYa/j4fuAy0ftcJyRQat/2iGwInrc=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: Dec  5 03:55:55 2025 GMT
            Not After : Dec 12 03:55:54 2025 GMT
        Subject: CN=693257cb-c43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a5:1b:fb:86:28:ae:07:ec:6c:8f:20:2f:5f:
                    07:48:42:da:d0:a9:10:39:74:c9:47:89:89:01:0d:
                    07:95:54:08:d6:c4:1a:69:9e:fb:57:df:14:85:dd:
                    ec:79:dd:28:d0:b0:b2:b5:46:bb:f6:15:f1:43:7b:
                    b0:03:c1:4f:7e:2e:3b:92:6a:25:ab:1d:57:92:c3:
                    01:4d:1b:f6:93:75:5d:39:66:50:6c:91:13:e8:b3:
                    43:da:7a:8a:98:2c:1d:23:8d:47:e6:31:32:9b:dc:
                    8b:61:63:8f:f5:20:00:31:96:cd:db:86:01:f3:b2:
                    79:c9:d5:71:0e:64:eb:1c:f6:ee:69:c9:a1:db:b9:
                    49:04:9a:30:3b:fc:a8:76:01:89:b2:74:fd:8e:c5:
                    21:06:6e:ca:b0:14:f5:f9:63:d5:63:f4:ea:71:b2:
                    6c:b8:7d:90:9b:04:56:ce:c2:66:d5:2e:03:44:4b:
                    9d:ac:87:dc:28:5d:e7:68:f2:79:2c:af:af:33:37:
                    39:77:0a:06:75:ec:a4:92:77:7a:15:a4:1c:e5:c4:
                    48:3d:65:4c:cf:9c:72:17:41:e2:0e:62:50:10:90:
                    11:a1:e4:5d:c2:dc:66:9b:51:6e:67:29:cb:90:b1:
                    f2:c8:5b:26:aa:39:96:d6:13:57:92:f5:9a:94:01:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:3E:A1:DB:2F:A3:D3:AD:D4:DB:DB:C0:94:06:3D:84:94:4E:E4
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:db:f7:8b:69:14:95:08:5b:3a:88:18:d3:8b:a6:7f:72:
         a9:dc:6f:0f:c0:e0:62:f3:cb:49:05:6a:1f:6f:b2:2b:11:ff:
         b3:6c:5a:2f:66:4a:2c:3d:a6:bf:54:8b:42:f0:ef:92:af:20:
         3c:49:a4:a0:56:07:9d:b0:c0:b9:7e:a8:46:7a:0c:8f:8b:91:
         b7:77:8b:f1:33:87:67:72:8b:f4:70:b6:24:41:3b:f1:9f:17:
         52:59:07:e8:b1:90:85:8f:36:f8:7e:75:54:af:21:36:83:2c:
         ff:f2:cd:89:f8:6b:12:55:c5:b0:10:f9:cf:17:02:39:e2:47:
         b9:ef:aa:ca:25:4c:ea:a1:0a:77:91:7e:0a:b0:da:20:4e:25:
         ea:53:97:b1:08:8b:0b:b5:23:00:7a:d5:2c:91:96:63:76:69:
         7d:0a:62:e8:61:7c:cc:14:19:33:9f:44:58:c1:50:52:66:aa:
         ee:42:35:3e:4c:34:94:18:fd:4f:f4:6a:80:b5:a3:e7:7d:c2:
         bc:42:4d:d6:5f:5a:b0:37:33:7e:28:60:fb:7c:4f:5e:67:a7:
         ef:5c:51:50:30:9d:6e:c8:7e:b4:24:a9:29:0f:26:bc:81:ca:
         2b:4e:15:fd:42:72:a2:15:87:cb:11:65:78:a9:9b:b1:93:b7:
         89:67:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:19 2025 by rpki-client