This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File:                     cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier:          hVPkagu4pFk1HeQ+zI01pSQeNsqte/Jp9tEfhIuzliQ=
Subject key identifier:   E4:F7:E4:AB:B3:68:D0:18:E4:B5:96:90:F4:1B:1C:5B:FD:01:C7:57
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer:       /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number:          0181
Signing time:             Mon 29 Dec 2025 02:57:09 +0000
Manifest this update:     Mon 29 Dec 2025 02:57:08 +0000
Manifest next update:     Mon 05 Jan 2026 02:57:08 +0000
Files and hashes:         1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: iMQAN33FUMQBWBg9VlxDDFG84SIgLNZSsF2MS8iXV28=)
                          2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: /r8zkPpv2X5SfBxbvGoAdJxHIR9dMbvXa2kBS0bQC9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
                          rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 02:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
        Validity
            Not Before: Dec 29 02:57:08 2025 GMT
            Not After : Jan  5 02:57:08 2026 GMT
        Subject: CN=6951ee05-cef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:b1:e3:e7:35:f4:11:c4:67:2c:35:a7:e4:
                    21:09:9b:c8:55:f5:22:51:7b:8c:66:ae:b5:58:f5:
                    1d:fc:a0:cc:f5:da:c1:92:54:c3:9e:49:c5:b7:ba:
                    2a:4b:60:d6:4d:c1:5b:e5:af:12:d2:85:21:fe:ed:
                    eb:e9:5a:f8:f1:ee:5f:d4:09:c2:3e:97:9c:ce:16:
                    cf:aa:a5:b4:6f:f9:52:a2:93:f0:6e:ab:a2:ac:b9:
                    8d:16:ec:1e:7b:c3:c7:93:3a:1f:40:13:97:47:81:
                    b4:43:c5:02:c4:90:ce:36:52:3c:aa:c7:31:d0:1b:
                    77:f5:a7:9c:ce:2c:44:ce:0c:62:ba:bb:8a:9f:09:
                    75:5f:4b:2d:ea:5d:b5:1b:64:71:10:d9:fa:17:1b:
                    7c:b3:8c:3a:63:52:79:f9:28:58:dc:b8:29:e8:39:
                    7c:64:78:bb:a0:55:4d:f7:a5:78:c2:fd:7a:a9:5f:
                    cd:db:7f:f5:e4:1a:f6:7f:7f:17:5d:95:31:56:be:
                    67:8f:b5:bc:f5:9e:bf:ed:91:db:ed:aa:9a:89:0c:
                    d3:18:64:52:53:2f:2c:7f:af:e0:5d:ff:96:c7:75:
                    78:e4:e1:ab:19:12:d3:85:39:cd:29:e7:aa:4c:e4:
                    fe:b3:e7:a3:ae:a1:06:24:8d:32:bc:ef:9f:fb:e5:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:E4:AB:B3:68:D0:18:E4:B5:96:90:F4:1B:1C:5B:FD:01:C7:57
            X509v3 Authority Key Identifier:
                keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b9:93:dd:75:17:e1:85:5e:97:e5:a6:79:4d:eb:4d:18:92:
         94:c0:6f:99:b8:dc:43:d9:31:e6:b7:b1:16:29:52:82:ee:af:
         86:a1:cd:4a:f5:65:e7:38:b3:41:c6:37:cb:94:14:82:67:c4:
         f6:97:df:86:43:40:20:48:0a:43:b8:bc:78:d5:59:a1:73:59:
         aa:95:40:35:57:fa:03:cd:c0:49:5e:9f:84:31:62:e9:d4:f2:
         e2:f4:35:1b:d6:43:47:82:5e:80:24:44:44:8a:d1:7c:9a:64:
         98:86:4b:9c:d7:04:58:7e:60:b3:92:09:e9:b7:a7:c8:56:d6:
         2f:4f:6a:e4:d4:62:8a:51:61:7f:d8:0a:a5:3d:5d:7f:b2:39:
         e3:36:0b:85:fe:71:63:33:ff:fe:05:5b:f6:f2:0d:02:a5:8f:
         b6:82:62:8a:c5:5b:3b:11:fc:30:3e:68:57:ae:f2:f0:2c:23:
         16:02:f7:30:ba:26:11:54:d8:74:2a:76:cd:88:50:2e:ef:fc:
         e7:06:3b:66:1e:86:0d:af:aa:97:90:65:cf:f1:bb:a4:bf:39:
         c5:04:e4:82:0b:82:43:ce:ef:2f:1f:18:c8:19:0f:ab:38:b5:
         a0:53:0c:12:fc:94:ee:33:d6:82:f3:a0:cf:ac:e4:e8:e7:a0:
         65:e0:8a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 15:02:12 2025 by rpki-client