This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
File:                     c-uK0qOl84q_4a4oB08oMcJzG6k.mft (raw, json)
Hash identifier:          Du+hvoYP4NZZY09/9ROxi+xxeNDV4ceaaezuYsWAs2c=
Subject key identifier:   79:F9:86:57:47:EF:34:1F:12:36:35:57:9D:4D:EF:6B:7D:68:EA:F8
Authority key identifier: 73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9
Certificate issuer:       /CN=A91E42AA/serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
Manifest number:          EF
Signing time:             Sun 21 Dec 2025 04:28:58 +0000
Manifest this update:     Sun 21 Dec 2025 04:28:58 +0000
Manifest next update:     Sun 28 Dec 2025 04:28:58 +0000
Files and hashes:         1: c-uK0qOl84q_4a4oB08oMcJzG6k.crl (hash: nI6N7a5+Zt7CMojMdKJxrO96bp8LQLXmzM3Xs1BUTHw=)
                          2: 8B7BD7CC700211EF9FEC365AC4F9AE02.roa (hash: tWu30mK1rtW914jLoVkC7fN3rjLvGIdCamq6YbBhF8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl
                          rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 04:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E42AA, serialNumber=73EB8AD2A3A5F38ABFE1AE28074F2831C2731BA9
        Validity
            Not Before: Dec 21 04:28:58 2025 GMT
            Not After : Dec 28 04:28:58 2025 GMT
        Subject: CN=6947778a-06d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0d:6b:67:0c:d9:23:93:50:73:ac:53:0b:68:
                    5d:f8:e4:bb:c6:2e:25:8d:4f:63:c1:b0:aa:78:85:
                    ad:27:49:2a:1a:a2:94:3a:22:d9:3d:da:f4:5e:f4:
                    07:b1:8a:7f:bb:7c:4d:f7:33:b8:33:6d:13:89:8c:
                    3a:cf:e0:6e:8b:02:17:c6:34:25:1e:70:9c:47:31:
                    90:47:cf:f8:26:c1:24:90:ef:da:79:89:17:25:01:
                    6a:de:ba:15:a8:81:f5:f0:14:a8:c3:f0:72:d1:ad:
                    8a:d4:bc:72:a7:17:ca:d1:12:0d:c2:98:f7:cd:69:
                    6b:e5:c8:b5:45:32:27:de:95:3b:dd:05:94:ce:56:
                    e5:7f:f5:2a:24:38:ab:69:dc:4d:6f:2e:7f:e4:ab:
                    f2:6a:bb:b5:ef:ca:d1:f6:7d:55:a1:20:0d:fa:61:
                    cb:f6:c0:eb:b7:85:c6:90:22:12:4c:3d:7e:51:f9:
                    4d:ef:21:17:d9:79:9b:49:7a:54:c1:d3:8c:c5:b4:
                    23:fb:60:27:f5:ab:d0:ff:a6:0c:d2:b0:77:26:16:
                    3a:89:ab:ea:e3:eb:0d:a2:5c:25:4b:8f:8c:88:ca:
                    03:f9:e7:16:8b:87:5d:ce:9c:26:97:b0:2f:d5:67:
                    ba:34:bc:e3:59:61:88:a5:1b:a9:e7:f9:c3:23:c9:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F9:86:57:47:EF:34:1F:12:36:35:57:9D:4D:EF:6B:7D:68:EA:F8
            X509v3 Authority Key Identifier:
                keyid:73:EB:8A:D2:A3:A5:F3:8A:BF:E1:AE:28:07:4F:28:31:C2:73:1B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c-uK0qOl84q_4a4oB08oMcJzG6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E42AA/E407B330700111EFBBE8A158C4F9AE02/c-uK0qOl84q_4a4oB08oMcJzG6k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:c7:e8:f3:5b:4f:5b:b4:ad:0f:d4:44:61:48:ce:32:0e:
         7b:55:31:aa:a1:6e:8e:ce:fd:da:a5:6a:05:d3:98:b8:8b:7b:
         f9:05:3f:a8:74:3f:ba:77:de:2e:c8:8b:13:0d:5a:7f:d3:1a:
         14:6f:c9:97:f0:ac:51:da:a4:8a:7d:c8:49:ff:cc:32:08:5b:
         00:6f:d6:46:be:2c:58:49:16:59:25:d9:98:0c:bd:5e:c3:bc:
         f2:32:18:77:dd:99:f8:ce:ea:27:8d:6e:d1:a1:28:3e:cf:fd:
         d5:34:b2:c5:53:63:bc:58:64:e9:0a:b9:8f:59:dc:e3:e9:8a:
         4d:fc:48:59:e8:48:54:a5:af:be:3c:4b:e5:09:b2:ad:2a:52:
         fe:e6:b5:16:59:4f:92:c9:87:bc:09:c3:78:29:37:6f:f0:54:
         c8:38:62:8a:63:d9:dc:73:20:b1:bc:a3:43:27:c1:a9:00:05:
         1b:46:2f:1d:d8:2d:b9:bb:f9:ef:47:4f:d9:37:de:ee:e4:2b:
         b1:9c:81:60:fc:c3:0e:b5:f3:fd:e0:20:a9:20:cc:8c:05:fd:
         9e:f4:60:af:52:e9:24:d6:8d:a0:0c:f0:b2:bd:b6:d4:0a:72:
         98:2a:ec:9d:fb:6a:9e:df:6f:d2:81:f5:e9:c5:a4:f6:b4:e4:
         a5:9a:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:33:49 2025 by rpki-client