This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File:                     CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier:          lJJ8DU6vjvl8OazMvDfGX0gN07eaGV9IKtYT2fm1jWM=
Subject key identifier:   5D:97:50:02:54:F3:53:AB:FD:8C:E5:E4:17:90:38:91:8E:E9:C1:AD
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer:       /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number:          073D
Signing time:             Sat 20 Dec 2025 21:10:30 +0000
Manifest this update:     Sat 20 Dec 2025 21:10:29 +0000
Manifest next update:     Sat 27 Dec 2025 21:10:29 +0000
Files and hashes:         1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: 3SFkjDOYMRPVf2CYZmI4hU87Ddv9F4/iTIGB8RMqwgo=)
                          2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=)
                          3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: CBAyva7dqI+RQTwKgqBd2Ik2cx8Z7eAggotY6PPN4YM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
        Validity
            Not Before: Dec 20 21:10:29 2025 GMT
            Not After : Dec 27 21:10:29 2025 GMT
        Subject: CN=694710c6-29d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:6c:19:41:74:9c:69:5e:05:98:13:61:71:
                    49:b7:06:26:78:24:2a:41:39:24:a4:41:26:53:bb:
                    78:b6:05:57:86:a5:bd:a9:93:ca:20:9e:6d:7c:49:
                    03:d1:0e:0d:0f:ba:61:20:19:95:3b:ac:8f:65:a1:
                    97:6f:c8:73:6c:3d:fa:5b:fd:9f:0a:52:0b:42:49:
                    1f:7d:82:ff:5e:91:cc:a9:26:d0:ce:09:54:68:ad:
                    5a:ce:1b:86:3e:65:f0:c0:b4:dc:83:9f:78:15:1f:
                    94:bd:f0:cd:30:fb:09:3d:a5:fa:6a:e5:ac:2f:38:
                    8c:7c:d8:80:f5:f5:30:c5:4d:d1:13:ce:03:f8:fd:
                    44:71:56:91:09:f4:4f:a4:b4:31:e6:fe:4e:31:60:
                    07:da:ef:6a:ad:98:2c:0a:d8:c7:36:34:cb:31:52:
                    7d:f5:94:43:10:9e:e1:61:d2:a2:68:60:75:ed:7e:
                    c5:6e:9f:9a:f3:f5:95:92:5f:6b:b6:4f:59:89:21:
                    98:d7:df:23:b9:45:30:81:c6:8a:b8:6c:eb:e7:8f:
                    60:ce:dc:d6:a8:3e:ba:32:a8:10:4f:6f:67:d1:5f:
                    61:7a:dc:09:e6:4f:15:95:7b:e3:18:f5:63:f3:3c:
                    5f:ae:f8:e0:cb:26:05:1f:5e:88:08:59:4e:63:3a:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:50:02:54:F3:53:AB:FD:8C:E5:E4:17:90:38:91:8E:E9:C1:AD
            X509v3 Authority Key Identifier:
                keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e4:2c:db:86:55:67:5f:d4:a3:28:71:81:e2:b8:95:75:fa:
         1a:7d:04:b2:0a:77:ff:d8:4e:a5:f1:d9:07:e4:dc:2b:93:1f:
         63:50:51:6b:b4:ea:0e:d2:b5:ef:b0:44:25:39:a4:08:dd:fc:
         fa:96:34:c4:37:69:cd:97:57:68:ba:42:6c:42:0e:4c:ed:b7:
         90:b5:c1:ef:78:50:c4:6d:c1:f4:01:cb:18:52:82:a3:45:ef:
         4a:98:b2:0b:2e:12:b8:c0:c9:b0:96:87:f6:c2:85:4d:08:e1:
         7d:d4:43:0d:06:5a:88:4c:ef:42:e0:e9:cf:05:e6:3f:28:6e:
         77:27:ad:76:6a:34:94:61:ef:f4:3e:bf:7f:89:78:1d:c4:1c:
         e3:ef:55:73:b8:f8:d8:97:6b:e3:62:74:2b:0f:7f:af:11:9e:
         72:2c:0b:db:5f:b6:97:4a:05:b7:fe:1d:ee:a8:8b:fc:73:e0:
         82:72:fe:3a:74:ff:f6:24:88:ca:4a:6b:57:00:69:77:9a:c4:
         bf:9e:0a:2a:63:3b:89:91:5b:c1:66:1b:43:2a:51:73:f7:b3:
         66:73:2d:72:e1:bb:9e:f4:de:8f:ff:50:47:e8:2c:2b:1b:1e:
         0c:b8:b1:15:93:59:79:62:c6:4f:d5:33:c4:cd:1e:9c:1f:a0:
         30:b8:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:21:11 2025 by rpki-client