This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
File:                     Co-Ufpyg_6RUeOxip-utknsEGTA.mft (raw, json)
Hash identifier:          HBCr3dEaKbuFpNO89HgUhRJHXY+VRdfKhXniTkZARrs=
Subject key identifier:   2C:E1:0B:7B:40:71:34:EB:2E:FF:F2:02:67:28:77:96:8D:24:40:15
Authority key identifier: 0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30
Certificate issuer:       /CN=A91160E4/serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
Certificate serial:       050E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
Manifest number:          0505
Signing time:             Wed 31 Dec 2025 23:10:43 +0000
Manifest this update:     Wed 31 Dec 2025 23:10:43 +0000
Manifest next update:     Wed 07 Jan 2026 23:10:43 +0000
Files and hashes:         1: Co-Ufpyg_6RUeOxip-utknsEGTA.crl (hash: vFoMnANZWd73b+gPo1ph+CbBOAD/ajh08sYoJYmp8j4=)
                          2: 836F1D0AE0FB11EEB861CD40C4F9AE02.roa (hash: TZrK0Feld/Y4/iPkyFu+uGFDuJj1OCyyDAt+MgPwxHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl
                          rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Jan 2026 23:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160E4, serialNumber=0A8F947E9CA0FFA45478EC62A7EBAD927B041930
        Validity
            Not Before: Dec 31 23:10:43 2025 GMT
            Not After : Jan  7 23:10:43 2026 GMT
        Subject: CN=6955ad73-85e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:13:a6:64:03:48:33:12:5e:c6:52:5d:74:
                    fa:47:05:f0:1c:37:c8:93:78:2b:2f:2c:ca:ab:0f:
                    47:bf:00:05:7e:47:3c:4f:98:c6:5d:2d:93:4f:88:
                    7b:1f:90:a3:98:1b:05:e8:32:cc:89:88:d5:ae:7a:
                    f9:a7:14:2f:ee:ae:3f:59:03:c0:34:7b:8f:3a:c2:
                    c2:f1:32:9b:9c:1e:ef:57:f0:5f:5a:d4:a7:66:25:
                    65:3c:da:d6:9f:e8:81:45:c4:7d:00:74:db:6e:62:
                    5c:65:77:4e:78:e5:24:df:d9:2a:64:59:d2:1d:fe:
                    8e:d5:4f:e8:eb:c9:b6:60:4a:ee:2d:87:fc:f3:05:
                    f4:9a:6a:d3:3c:e5:5a:d6:38:25:50:47:60:9d:2d:
                    c3:c5:70:fd:76:be:1a:05:79:01:c4:7e:24:47:09:
                    fe:da:e8:c7:1a:08:79:6e:1d:1b:4e:60:09:33:2f:
                    02:df:e1:c1:4f:99:0b:57:97:ec:cc:99:d8:83:06:
                    9e:89:4c:c6:f0:cc:94:eb:67:c4:f9:8b:14:ee:17:
                    a3:ac:33:ab:11:f1:2a:02:83:99:a3:4b:7e:3c:08:
                    18:3c:53:bd:a3:21:9e:5d:e7:57:2c:6e:7b:4e:b2:
                    34:06:c3:5e:50:ff:91:f7:df:6c:78:35:a1:9c:66:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E1:0B:7B:40:71:34:EB:2E:FF:F2:02:67:28:77:96:8D:24:40:15
            X509v3 Authority Key Identifier:
                keyid:0A:8F:94:7E:9C:A0:FF:A4:54:78:EC:62:A7:EB:AD:92:7B:04:19:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Co-Ufpyg_6RUeOxip-utknsEGTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160E4/62D48CCE3BAD11EC9B3CEC1CC4F9AE02/Co-Ufpyg_6RUeOxip-utknsEGTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:ba:df:b1:46:6f:8b:73:63:eb:07:13:26:87:0b:ce:3a:
         53:1f:4e:1a:31:e8:e0:6e:39:a4:ff:a0:41:6a:59:a5:03:b9:
         68:ac:19:b0:fe:79:74:70:0c:a6:ef:45:be:47:3c:4a:01:59:
         66:26:b9:83:6f:fd:91:29:c8:d4:08:3d:dd:e3:15:2a:c9:02:
         7f:c9:02:c9:c8:b1:14:d1:e8:b7:39:75:25:b0:a6:74:f9:6f:
         95:98:2c:87:a9:d2:c8:89:62:ab:6a:65:db:7d:5a:c6:1b:3d:
         06:95:83:f7:05:6c:7b:cb:52:71:93:fe:2a:73:3d:a3:67:2e:
         74:08:99:29:0e:23:66:d4:dd:1b:d7:3c:8c:14:c0:1b:7d:cf:
         ad:98:9f:d9:c9:f6:fd:a7:95:7a:be:8b:4b:dc:c1:fd:09:9e:
         8d:e6:6b:ba:d2:1f:5f:2c:e1:27:56:6d:f6:6d:c2:bf:27:d5:
         a7:c9:a5:e1:8c:bf:93:e7:dd:d7:46:82:68:0e:38:bb:9e:89:
         76:13:ee:cf:4a:1a:5a:87:4d:28:df:17:ce:02:6c:39:a9:cf:
         f0:2c:cf:60:dd:62:df:74:13:48:ec:4c:76:0f:a1:8b:45:f4:
         e1:80:05:e1:e4:9d:1f:44:35:b6:42:eb:ad:51:52:7b:32:3d:
         c5:fc:99:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:51:30 2026 by rpki-client