This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File:                     CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier:          VmosEpEIg5Aak4HXS4lYfAbDQnkyKa6aYCg+7Unn6SI=
Subject key identifier:   A2:43:C1:D0:E0:17:03:8E:5B:95:43:40:47:0F:E6:03:B8:CF:5E:C3
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number:          01F2
Signing time:             Fri 05 Dec 2025 01:32:29 +0000
Manifest this update:     Fri 05 Dec 2025 01:32:28 +0000
Manifest next update:     Fri 12 Dec 2025 01:32:28 +0000
Files and hashes:         1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: hEt8LazxSEiEdhUbWu6EnFjBGxyMqD31iNLqIKcnZig=)
                          2: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: tUG8yJiHn55iF+p5xuktjgNqO57AMcBScipLCgmp+AU=)
                          3: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: HvV48I109s9+Qsv4Wno42zSr43P6rFtI4uz1VW60NvA=)
                          4: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: t1t5ERQK21Czu6UgrAaBph2clA23SD9Ihs9VsoqVI8k=)
                          5: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: edUlYrUcw9nemw/UT7S46VmgpUXLu0gAESR1RTk4AOI=)
                          6: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: G2el60zyW5DLxxUiqRoxyHbxi0YhTWGIRCSb/KhXW78=)
                          7: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: eTquNld5nLEFKYyMHLG1VzJGsnFO7+pijIq3z1S1zVg=)
                          8: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: 7OyWzhEYc1OoBkrdP9NnWA0PjS6KslbL/GgGS4z8wV0=)
                          9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: KXiWnH7RLdD8k1bKnrw/NL0MoMgP+K3mZfrXszKRO+k=)
                          10: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: yAhldKSbT9eXvW5YXq5JzADs625rpn5nRswKYZ3uyDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Dec  5 01:32:28 2025 GMT
            Not After : Dec 12 01:32:28 2025 GMT
        Subject: CN=6932362d-4ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:dc:21:ce:15:33:87:5c:5d:be:97:ec:fa:
                    d3:50:01:7b:9d:e6:f7:29:eb:fb:40:65:7d:9b:03:
                    6b:79:8a:95:47:3e:e5:20:8a:c0:b9:d9:52:bd:28:
                    df:1b:78:94:63:4e:07:e3:05:47:b6:e1:eb:73:11:
                    38:38:29:48:6f:eb:9d:e3:dc:e5:8a:b0:31:2c:21:
                    2d:64:d2:7b:ff:97:1f:d8:d7:c8:37:9f:a8:1e:cc:
                    c1:47:9c:a4:a7:d5:4a:af:18:66:2f:55:76:73:4c:
                    5f:b7:90:20:dd:e0:08:ca:f9:f2:69:33:0f:47:3a:
                    dc:3e:a0:4b:2f:01:30:bb:7a:eb:78:b9:2a:4b:85:
                    9f:ef:19:60:98:d9:fa:c5:8a:6c:e8:e1:9d:ba:34:
                    38:dc:66:26:7d:ac:22:1d:86:a1:e6:60:02:2c:17:
                    60:7c:df:ea:b1:99:af:22:b0:10:1c:42:15:a6:e3:
                    56:95:5e:9c:9c:cc:98:d9:01:84:d3:ff:64:3d:8a:
                    43:b5:29:51:15:90:a9:4f:46:37:4d:6d:fd:bd:0d:
                    6e:36:a4:ec:64:fa:7c:29:c4:93:97:0a:51:c5:f3:
                    02:24:6f:6f:d9:31:e2:26:9e:9f:53:fc:26:51:88:
                    b1:cd:97:a9:38:05:ec:54:65:26:81:bd:74:e3:61:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:43:C1:D0:E0:17:03:8E:5B:95:43:40:47:0F:E6:03:B8:CF:5E:C3
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:13:26:f2:5f:73:77:31:45:fd:8f:bd:0d:5a:f8:18:98:e7:
         4f:2e:da:0a:22:26:2b:dd:a2:00:06:5b:6a:6f:1b:2e:cf:a5:
         e3:07:33:ce:e3:e9:b2:18:2c:9d:38:24:e5:43:87:b2:5f:6a:
         3e:a0:b3:24:4b:3d:33:0d:04:55:d4:f4:18:ef:58:f5:36:4e:
         9d:dd:0a:86:e5:2b:cb:04:25:a0:dd:04:7d:4a:a2:cc:3e:c5:
         39:5c:f5:a8:c9:4d:bb:84:1b:be:6e:23:f8:fd:f1:46:27:2c:
         4e:cb:c3:75:64:79:18:4d:6d:ed:30:6b:e9:50:13:b9:23:11:
         eb:d0:0b:1b:06:fd:e3:89:e3:68:d8:53:63:73:0e:d2:5d:92:
         b1:b5:1a:35:0e:80:38:04:a8:a5:75:0b:99:4e:fa:1c:9b:99:
         ab:59:73:36:41:c2:d2:56:4b:6f:dd:97:cc:b1:28:91:27:cd:
         2e:13:01:eb:c7:35:84:44:ae:1d:c2:ca:e2:a5:a5:7d:d2:f2:
         f9:5c:6b:57:5b:09:3b:90:33:62:fa:37:99:28:a0:ac:e5:14:
         dc:56:ae:a7:56:7c:c0:87:69:f3:d8:5d:73:37:65:6e:26:73:
         31:da:4e:9f:c4:df:30:0c:0d:81:ab:ac:ca:42:26:e8:1e:01:
         49:97:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:56:14 2025 by rpki-client