This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File:                     cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier:          XkyZ7zFTqnGyYWy6jNGrhqxN2BBSPVslbLJT/Zx/+EQ=
Subject key identifier:   F3:D2:95:B8:24:F5:FF:0D:D2:7E:F4:F3:0E:85:50:6C:AF:4A:03:A9
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer:       /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number:          0181
Signing time:             Tue 23 Dec 2025 02:40:03 +0000
Manifest this update:     Tue 23 Dec 2025 02:40:02 +0000
Manifest next update:     Tue 30 Dec 2025 02:40:02 +0000
Files and hashes:         1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: Dynx+CnbsbZaj9hDgFObLFRm3W90RUga9IKjqNfSMVU=)
                          2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: ewSndXmGK4bIjd/hEYzsemW56YoGlHl9wDoTOirwBNg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
                          rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
        Validity
            Not Before: Dec 23 02:40:02 2025 GMT
            Not After : Dec 30 02:40:02 2025 GMT
        Subject: CN=694a0102-b50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:37:40:b7:88:58:4a:45:54:c6:b7:27:85:
                    37:23:45:f5:98:01:a5:67:22:cf:b9:6b:38:45:fa:
                    ed:39:8c:f8:8b:c3:e8:4a:1d:32:b8:42:cd:c7:5e:
                    12:1e:a9:1a:82:59:64:88:64:e4:59:bf:5d:8f:81:
                    9e:76:84:c5:34:e6:cd:c0:c1:f8:ca:67:e9:96:c3:
                    58:07:5f:c8:d5:b5:40:de:eb:bb:1a:49:9b:1a:25:
                    de:74:8b:c0:b1:37:c0:2b:e8:ae:fd:f8:20:7f:58:
                    e4:00:cb:09:fb:c3:f8:0a:11:2f:cb:66:8d:09:b9:
                    b8:91:81:e1:cc:7d:70:aa:53:68:94:74:d1:0c:0f:
                    72:27:00:3f:1b:d7:98:03:d1:05:e2:38:ea:a6:75:
                    bf:7c:a4:93:45:1b:5c:49:4a:ea:8a:64:54:39:a4:
                    e2:25:fb:25:5c:40:88:8c:03:f4:0e:8d:24:90:13:
                    ba:a7:3b:91:9c:cb:d5:92:80:82:e5:e8:2d:33:c0:
                    b6:9d:6b:24:54:50:20:67:cf:be:1f:c3:d7:f4:c3:
                    48:53:fc:30:f5:58:32:fe:b8:99:a3:3c:e4:04:17:
                    9e:75:59:94:35:9c:1a:bb:67:e8:40:a4:01:df:4f:
                    2b:af:07:c5:35:27:4f:17:c2:86:ee:b2:10:9b:87:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D2:95:B8:24:F5:FF:0D:D2:7E:F4:F3:0E:85:50:6C:AF:4A:03:A9
            X509v3 Authority Key Identifier:
                keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:09:64:3f:3c:6f:38:ab:ba:ee:82:e2:5a:5c:7d:4a:ae:f4:
         8d:98:9c:3d:ab:f1:c8:09:20:0a:30:0d:f7:b5:10:ed:c2:fd:
         22:f5:ce:2a:b6:4e:ad:72:d7:5f:62:18:ed:42:42:db:71:73:
         a0:0e:21:eb:b8:3a:b4:a0:30:3f:55:7a:5f:0e:31:1c:25:1f:
         53:d9:42:93:56:57:0f:f8:3d:04:a2:81:81:c6:c9:82:83:69:
         f4:a5:fc:1d:07:eb:6f:76:67:c3:4a:9a:a6:f7:b9:e5:e5:7a:
         bd:ba:59:c4:d8:b4:76:03:e2:fa:17:60:52:f7:b6:cc:cd:85:
         40:f4:98:e2:89:b4:2d:f4:ed:26:fe:27:e6:5d:38:f7:85:b1:
         14:66:35:51:bc:fa:f0:e4:97:8a:53:f2:9d:21:45:fe:cb:ab:
         9d:87:ba:76:9f:be:44:a3:b6:6c:c0:41:22:9a:11:36:73:7e:
         61:d2:20:9e:d6:d1:40:41:40:85:8a:17:69:b1:cb:7d:b5:4a:
         c6:8a:d3:eb:e8:9a:45:7b:ba:38:62:c8:89:e4:44:f9:18:ac:
         43:6d:c7:bd:7b:71:06:9c:b9:08:cb:bd:fc:42:f0:69:26:b7:
         bc:4d:f7:07:80:f7:db:2d:36:78:7c:f8:d0:79:5f:fc:61:b8:
         21:38:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:30 2025 by rpki-client