This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
File:                     cu8y2vToP5AZKWMgh047RFAI7Dk.mft (raw, json)
Hash identifier:          awUixQVCJ5PRSdWf0rNqz+1Di1+11qKQSYmSSmVa17k=
Subject key identifier:   54:C2:1B:EF:86:70:BB:72:C7:CC:B1:EB:ED:CA:05:6E:07:E1:BF:7C
Authority key identifier: 72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39
Certificate issuer:       /CN=A919ED93/serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
Manifest number:          019B
Signing time:             Sun 07 Dec 2025 01:54:16 +0000
Manifest this update:     Sun 07 Dec 2025 01:54:16 +0000
Manifest next update:     Sun 14 Dec 2025 01:54:16 +0000
Files and hashes:         1: cu8y2vToP5AZKWMgh047RFAI7Dk.crl (hash: ZhwLYfKfyt60CMmSqZKwCIRVFvfI94dibSIUbcOVXtM=)
                          2: 9436AC3668C711EE8C53A031C4F9AE02.roa (hash: 8nvmxVIwac+Dd4D7Yv+aIk8/f+8QK2+2Gm1YJNxdKII=)
                          3: 94A6144A68C711EE8C53A031C4F9AE02.roa (hash: +fTInFBTWg679k5VOcYrApdvSBqjIbZRDI3BvDZYAvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl
                          rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 01:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ED93, serialNumber=72EF32DAF4E83F9019296320874E3B445008EC39
        Validity
            Not Before: Dec  7 01:54:16 2025 GMT
            Not After : Dec 14 01:54:16 2025 GMT
        Subject: CN=6934de48-c608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:30:41:e3:93:5d:23:1b:70:1b:ad:d2:ed:
                    43:61:a1:5b:9d:70:d3:62:18:68:62:a6:64:de:ce:
                    50:cc:f0:45:e8:4e:d4:ca:ef:25:e9:78:17:00:ab:
                    5d:ef:30:ca:40:00:84:b5:b5:d0:d0:ac:56:5f:b4:
                    67:ae:1b:98:f1:05:ea:3e:57:6f:2b:64:75:38:f4:
                    8e:42:dd:e7:49:e7:ea:ac:73:92:48:5c:4b:1f:4f:
                    7f:c8:b1:25:90:a4:9a:5d:15:15:ea:44:e9:bd:52:
                    a9:78:5a:59:c5:54:89:d1:b1:f9:52:1c:49:f0:8f:
                    37:fc:37:d3:92:fd:d8:61:b1:ed:99:da:20:1b:52:
                    61:e2:a9:35:fb:91:b2:5c:0a:3f:27:e6:a9:54:bd:
                    56:3d:54:1b:01:2a:04:22:9f:72:43:c4:ba:1a:4b:
                    97:38:9e:e8:2f:b0:a8:28:b1:2d:5f:49:9c:2d:24:
                    c6:a2:6b:5d:bb:ad:36:8b:ac:26:d3:7f:01:8b:d9:
                    8c:9e:ef:3a:8f:51:68:e7:06:00:5a:e6:02:67:dd:
                    93:b9:e9:84:b0:11:c9:cc:3e:59:a3:f0:8e:9b:2c:
                    10:aa:fe:97:31:b2:b3:9f:0a:60:16:0e:b9:31:81:
                    71:02:a6:8a:5d:19:a1:59:bd:a8:50:42:39:f2:86:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:1B:EF:86:70:BB:72:C7:CC:B1:EB:ED:CA:05:6E:07:E1:BF:7C
            X509v3 Authority Key Identifier:
                keyid:72:EF:32:DA:F4:E8:3F:90:19:29:63:20:87:4E:3B:44:50:08:EC:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cu8y2vToP5AZKWMgh047RFAI7Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ED93/A36C68F468C611EE95964F7CC4F9AE02/cu8y2vToP5AZKWMgh047RFAI7Dk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:25:5e:97:d1:8c:cd:f7:36:b8:8a:62:e1:75:48:8c:08:
         d8:10:ee:96:17:1f:9b:c2:86:a5:38:a5:76:e5:70:5c:2a:62:
         3f:ce:39:65:1f:01:85:7e:59:fd:49:7c:40:b4:5a:83:b7:d9:
         34:91:e8:42:84:b9:07:32:d2:75:57:98:dd:8b:b1:91:2e:59:
         a3:d2:61:a3:b6:30:40:c3:96:f0:af:ec:24:fe:14:32:ce:69:
         b3:e9:64:a7:41:a7:19:c6:ab:99:fc:be:d9:17:6f:c9:25:58:
         79:3a:53:22:3f:70:2c:f5:74:d4:c1:9b:7f:b2:c1:b5:51:47:
         8f:b6:75:ab:62:ec:d3:f3:14:a0:68:e2:12:76:6c:e9:a6:f5:
         e7:bb:3d:45:57:20:7b:2f:26:18:f0:b7:67:dd:b1:4f:c4:db:
         dd:8c:39:18:06:4a:c5:7e:54:d0:ad:f0:fa:a4:2b:7e:28:76:
         58:aa:fe:87:8e:da:0f:af:28:73:38:14:be:3c:48:c6:19:4e:
         fa:de:86:be:b4:e7:8a:8b:e3:3b:d4:7f:13:e8:61:7f:10:c1:
         ee:83:cf:a8:82:ae:5b:e0:5d:10:9b:0d:3e:48:c1:06:7b:73:
         e3:3c:d0:66:f9:44:2d:d4:85:56:cc:28:53:6f:73:e6:3c:73:
         5d:1c:72:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:55 2025 by rpki-client