This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File:                     c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier:          Mi+qGrhkjV0FW6dme+a6sBC18aY5wnXubbnXPePYYTI=
Subject key identifier:   0B:8C:8D:67:1E:AA:CE:FB:2D:B1:F0:3C:37:DA:DA:21:29:EE:D9:E0
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer:       /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number:          E7
Signing time:             Fri 05 Dec 2025 03:26:56 +0000
Manifest this update:     Fri 05 Dec 2025 03:26:56 +0000
Manifest next update:     Fri 12 Dec 2025 03:26:56 +0000
Files and hashes:         1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: kfhmgixLmGydDEG6R0LWMmuw1Ck7rwT6TaN/ujkqhBU=)
                          2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
                          rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
        Validity
            Not Before: Dec  5 03:26:56 2025 GMT
            Not After : Dec 12 03:26:56 2025 GMT
        Subject: CN=69325100-63b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:bd:1e:13:01:a6:f5:ec:04:06:4f:09:b3:
                    d9:5a:dc:ed:f7:e7:cd:05:55:4b:74:91:68:71:f1:
                    fb:6f:75:d8:0b:67:26:08:b7:b9:d4:96:b5:2b:cd:
                    3d:8c:8b:a4:87:a7:12:78:69:46:04:66:3d:09:a7:
                    17:fc:9b:a4:96:fb:3d:e4:a8:2f:15:d3:8c:81:6a:
                    7b:d6:b1:75:61:9f:21:78:fb:fe:63:54:71:63:c7:
                    cd:a7:9d:bb:c6:2f:9f:4e:7c:45:52:ed:14:4d:5f:
                    f0:21:c1:8c:04:af:88:7b:27:ff:91:35:e2:d9:bf:
                    d1:c4:0f:2b:be:67:a8:f4:e3:5e:78:5f:61:14:1f:
                    9e:2a:28:20:6c:81:69:f0:a7:4c:b9:72:09:25:eb:
                    91:f7:93:3e:59:36:30:18:23:ca:2e:c6:d3:69:2c:
                    53:8c:11:98:ba:6f:33:68:ed:11:ba:0a:c2:c5:8e:
                    b3:64:d5:f6:96:6d:ac:94:b6:f2:79:0f:5a:46:c0:
                    54:fd:f9:99:11:9c:a3:1f:69:81:ad:21:41:e8:53:
                    89:10:60:18:dc:d8:e9:67:14:83:b6:0b:3b:64:4f:
                    82:f1:d4:47:de:f2:e4:ed:21:88:a1:84:d0:2f:6b:
                    44:dc:e4:82:59:3d:1b:02:e8:0f:99:d6:a3:40:c2:
                    21:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:8D:67:1E:AA:CE:FB:2D:B1:F0:3C:37:DA:DA:21:29:EE:D9:E0
            X509v3 Authority Key Identifier:
                keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:b7:08:fb:3d:11:20:b0:fe:27:1f:d7:8e:ba:a3:09:e8:
         b9:7a:a2:5c:40:ee:25:cf:fc:06:71:ea:39:bd:1c:f5:08:74:
         98:54:c5:3e:3c:c2:cb:3d:35:02:e0:fa:bd:17:a8:e7:12:d0:
         f5:d0:93:38:69:06:72:26:b8:97:91:b7:6b:66:b9:09:97:a6:
         eb:73:32:98:02:ed:4e:64:4a:e1:c3:cd:6a:b2:42:55:dd:31:
         14:96:39:10:cd:17:51:85:9b:ee:6a:e2:78:a2:f2:d9:93:97:
         10:50:af:ff:8a:1e:b7:7d:43:f3:e3:c2:de:e9:f3:60:17:52:
         c9:90:18:6a:9f:1f:2d:1a:00:18:31:fa:db:72:a6:ce:bb:ef:
         b7:e5:e2:fc:a2:08:93:bd:50:f8:d0:bd:21:af:8d:f9:42:df:
         a2:cb:73:4a:e3:3d:36:bd:38:7b:aa:78:cc:65:98:10:78:d3:
         c6:33:2c:b3:24:bb:b9:2e:b3:15:e0:b9:9e:68:e8:08:27:27:
         22:b0:bf:75:01:76:51:41:37:2c:2c:ef:03:e8:a8:02:37:01:
         c6:16:95:90:21:82:2a:26:e4:a6:8d:b4:52:bb:aa:95:ae:86:
         16:99:90:a9:34:b3:cb:be:e5:7e:4d:de:d2:30:4a:2b:c2:3d:
         29:7f:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:22 2025 by rpki-client