This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File:                     HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier:          SrkE7H+1KJ4tsktDv3A/ZpP/OkeJynxFDXtaYWDVmaI=
Subject key identifier:   FA:B3:BF:E2:19:92:46:65:03:08:9D:9F:BB:1D:BE:06:B4:C7:C6:36
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number:          0238
Signing time:             Tue 23 Dec 2025 00:58:12 +0000
Manifest this update:     Tue 23 Dec 2025 00:58:12 +0000
Manifest next update:     Tue 30 Dec 2025 00:58:12 +0000
Files and hashes:         1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: TDf3vyC8GCeFKthTGFuPAkhi05lRNTd6kt/EUtst/6M=)
                          2: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=)
                          3: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
                          rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 00:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: Dec 23 00:58:12 2025 GMT
            Not After : Dec 30 00:58:12 2025 GMT
        Subject: CN=6949e924-1991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:5b:c5:6d:4f:e7:d5:d0:9c:95:9e:91:3b:
                    94:4a:f1:75:25:27:8e:71:d6:ac:9f:7b:db:8b:f3:
                    1a:8a:61:2c:08:ab:26:19:e0:2c:6d:07:80:a8:41:
                    19:ef:10:be:0e:a6:f7:cf:03:8a:0b:0c:a4:7d:68:
                    73:45:7b:bf:35:c0:ec:79:53:55:d7:12:66:46:6f:
                    db:d8:70:5e:78:2b:b5:8b:48:5c:5b:d4:54:27:b8:
                    3b:41:2e:2b:27:ac:e9:2a:0b:c8:21:a1:64:45:5a:
                    44:1a:f7:79:1b:08:ee:0e:34:af:b6:dc:e8:2d:11:
                    c7:49:3a:4e:12:17:84:34:27:7e:5f:86:0d:55:f0:
                    11:ca:78:89:b8:11:2d:30:f5:cd:c9:73:69:f7:94:
                    d1:76:01:8b:6c:17:7b:bf:a7:e6:40:67:5f:b6:d7:
                    c6:28:e8:0a:b2:ec:a7:32:82:9c:b9:8e:fa:51:ca:
                    36:d6:9b:ed:c1:15:8a:b3:c6:b7:b9:fa:27:4b:18:
                    38:ed:e3:45:7c:1e:0c:43:a3:35:db:fc:a7:c4:31:
                    d4:0a:77:f5:bf:66:63:6a:7b:a3:05:5b:14:e5:10:
                    95:ab:2a:50:7d:47:92:a0:37:af:dd:7e:d3:d3:4b:
                    08:51:36:64:4b:5d:b6:4f:2f:0b:c1:c5:c2:f4:a8:
                    9e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:BF:E2:19:92:46:65:03:08:9D:9F:BB:1D:BE:06:B4:C7:C6:36
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:90:17:5f:2f:0d:71:87:a3:b5:8b:c6:be:89:8c:bc:3f:c4:
         5f:4b:78:cc:65:f9:eb:42:1e:fd:07:55:7b:f2:93:ac:80:6a:
         43:92:0d:bf:7a:3d:c3:cf:5b:c0:80:3e:0c:45:39:ed:43:dc:
         0f:56:76:bd:67:85:fb:0b:91:61:30:22:5b:85:59:f3:ed:bd:
         32:42:2a:ae:99:62:bf:c7:b8:dc:81:1e:54:19:62:94:24:1b:
         60:de:d8:08:48:bd:7e:b8:b0:da:b4:7d:9a:d1:e1:e0:fb:4c:
         9c:61:7c:27:33:d7:bd:74:e6:6b:eb:b6:0c:d2:45:cc:06:ff:
         a3:3d:b2:b3:79:2d:c8:68:18:be:70:af:72:42:c7:be:a2:79:
         c8:60:d4:17:c0:a5:b1:28:d5:99:83:66:66:0b:3c:62:33:5a:
         b7:70:f5:06:8e:b0:93:1e:36:92:67:01:bc:89:01:a0:38:c1:
         59:0f:ca:af:c1:a2:e8:ea:9d:ef:ac:c2:f1:3a:26:37:d2:e1:
         1c:34:d8:8e:07:6c:4b:32:8f:d4:b3:c4:ab:cd:c7:87:d9:33:
         ac:ae:9a:f3:cd:30:d2:81:b7:2d:dc:ef:09:bd:1c:ab:22:b9:
         c9:0b:24:65:27:45:11:76:52:51:83:ff:a9:62:f1:9f:82:85:
         e8:79:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:41:32 2025 by rpki-client