This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
File:                     U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json)
Hash identifier:          3v8rxH/97xZCtFz7glAYKefimRNUEjR170qtqfNzGuQ=
Subject key identifier:   63:C4:0C:91:E1:84:ED:31:73:01:F1:2B:CF:9E:74:BD:93:E9:8B:62
Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95
Certificate issuer:       /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
Manifest number:          C8
Signing time:             Fri 05 Dec 2025 03:52:42 +0000
Manifest this update:     Fri 05 Dec 2025 03:52:42 +0000
Manifest next update:     Fri 12 Dec 2025 03:52:42 +0000
Files and hashes:         1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: 0FMv8O2gBlex/k+GhdlHSZpndp/j+MKlqVLpvBGV3Ms=)
                          2: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (hash: R1ZRqn0ylt//iP3Dpq4PDjSTmlLC/ZvrxfTWyncyjuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl
                          rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95
        Validity
            Not Before: Dec  5 03:52:42 2025 GMT
            Not After : Dec 12 03:52:42 2025 GMT
        Subject: CN=6932570a-cb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:cc:eb:fb:52:e5:92:ce:17:98:2a:75:13:
                    15:a1:09:42:bc:ab:2b:2d:34:b2:1f:c1:ce:1b:1c:
                    49:cd:aa:c4:8c:98:95:05:18:01:30:c5:45:d3:a5:
                    03:17:b5:8e:f6:55:ed:67:1a:4e:18:d4:5b:3f:d4:
                    e8:f1:e7:ac:94:06:1a:8d:72:fd:61:dd:82:55:96:
                    19:97:f0:ae:c7:2c:47:df:d3:2c:26:dd:63:c9:63:
                    b3:fc:83:c5:88:a0:c2:d8:45:9f:b0:b0:a3:c9:5f:
                    68:fe:47:85:81:15:f4:f9:86:97:14:e7:f9:87:c0:
                    90:11:e2:4b:71:fd:26:04:b3:2f:ee:d6:fe:4e:76:
                    e1:a7:91:42:62:68:c0:f9:be:e3:0d:b2:1d:0a:af:
                    63:fe:2a:88:16:2a:4a:ff:26:35:71:b6:d8:44:92:
                    48:9f:e8:ce:a5:7a:30:50:8e:ce:c7:2e:2d:ca:2c:
                    e3:0b:95:70:c9:f7:69:15:e5:5d:7c:ea:a8:ca:25:
                    cc:1d:4d:97:c6:c8:d5:7e:2b:62:e5:00:90:5f:36:
                    7d:0c:10:1e:6c:ed:d6:6a:9a:8a:0f:45:e8:e1:6c:
                    d4:30:56:2e:a6:85:69:ce:ce:c3:8b:03:a9:0c:4a:
                    ca:c2:78:b9:76:3d:04:de:5c:5c:4f:fc:0f:24:b6:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:0C:91:E1:84:ED:31:73:01:F1:2B:CF:9E:74:BD:93:E9:8B:62
            X509v3 Authority Key Identifier:
                keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:7c:9a:1c:79:5e:59:37:f2:26:d5:48:50:08:47:29:79:
         44:ed:67:0b:96:50:df:30:e0:12:7b:a8:d0:a6:68:6d:11:0c:
         98:b9:bb:74:19:59:f0:d4:2d:6b:86:5d:4e:95:1c:1f:55:cd:
         11:72:70:3b:bd:cb:8e:96:1e:eb:86:1f:04:68:5d:75:61:3a:
         22:e4:c6:8b:9d:ac:48:b4:24:ec:c9:a2:8d:8d:51:4c:51:16:
         99:91:d5:6a:6c:78:82:1f:88:8b:b7:37:79:71:14:76:70:94:
         6f:55:49:f5:f1:74:33:34:bc:d6:17:96:e3:33:c5:5c:69:3c:
         dc:85:75:7d:83:dc:6c:7a:4c:5f:3d:7f:44:9f:c6:f4:4b:71:
         f2:6c:18:4e:22:87:c0:19:9a:0a:d5:5f:89:db:18:d0:f3:3f:
         c0:6e:6a:a6:c4:48:c1:a8:f6:7f:7e:f1:08:a4:db:4d:20:44:
         22:be:1a:f6:fa:13:03:48:25:b8:96:32:5d:b4:17:72:fb:1c:
         6b:70:79:03:24:ef:ec:e8:6e:01:79:ef:47:c7:52:d6:0b:fb:
         64:ce:61:e3:d1:40:0b:d3:96:56:c2:11:ee:24:9e:22:9f:97:
         e5:29:5b:f7:c9:2d:90:33:07:35:02:57:7f:23:3c:25:ab:82:
         31:92:8d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:30 2025 by rpki-client