This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File:                     fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier:          3KutKDf0uzhaFm02wzwXjOYCLSQX4AAYhx8t6+64WFo=
Subject key identifier:   1A:6E:AE:AE:9C:25:A7:89:4B:05:54:EC:1C:A5:CF:92:C9:8C:50:EE
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       1103
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number:          10D9
Signing time:             Thu 18 Dec 2025 17:10:53 +0000
Manifest this update:     Thu 18 Dec 2025 17:10:53 +0000
Manifest next update:     Thu 25 Dec 2025 17:10:53 +0000
Files and hashes:         1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: gzxa7HkOhYL2iiaPxvP/zbVzQk92YVM0XWeKrdj8nP8=)
                          2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: spf63m8gNRJTwv/m/x8ucVicuse/s8q/g6w05x87Vv0=)
                          3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: VPFgi7xq83Y2zvMgy3bHxVN+PqEvQlUQRC0gSB0nAwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4355 (0x1103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
        Validity
            Not Before: Dec 18 17:10:53 2025 GMT
            Not After : Dec 25 17:10:53 2025 GMT
        Subject: CN=6944359d-9e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:89:f3:bb:70:72:86:cd:e1:0d:85:ef:60:
                    3c:97:12:dd:18:dc:03:d1:23:72:78:10:8d:25:84:
                    0d:d7:41:06:af:10:04:63:c2:2f:4b:4c:10:53:3c:
                    87:d7:56:5a:53:b9:44:32:0e:cd:c5:da:a5:c5:77:
                    e3:8f:dc:0a:89:4d:af:f5:36:70:cb:03:9d:c3:71:
                    55:34:4b:e5:87:20:28:e9:e4:da:1e:2b:71:49:19:
                    45:29:62:e0:1d:12:1c:a8:8c:aa:20:79:4b:72:19:
                    70:62:76:6b:93:28:38:81:0c:fd:80:b7:18:98:17:
                    62:aa:5f:8a:d6:68:12:8e:81:67:bc:33:f9:aa:6f:
                    a3:10:22:95:f6:85:f3:80:34:59:56:db:8f:35:9d:
                    07:25:eb:4e:08:e2:c5:4c:37:e9:4b:23:16:c8:4d:
                    97:a7:d9:f2:fc:84:a9:67:1b:40:45:d7:18:b9:00:
                    39:67:23:35:9b:6d:58:87:58:2d:09:23:9e:46:ec:
                    95:bc:5d:5f:7b:30:c6:3c:4b:a4:9a:ba:ac:c1:9b:
                    ca:d3:ec:a2:12:62:41:de:2b:ba:cf:5b:5a:ef:4f:
                    14:1a:e3:1f:0e:c8:0f:ec:86:ce:25:16:fc:ad:48:
                    e2:34:77:aa:e5:9c:19:d5:1e:db:df:06:f9:97:e8:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:AE:AE:9C:25:A7:89:4B:05:54:EC:1C:A5:CF:92:C9:8C:50:EE
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:c5:b9:6f:cd:9a:a7:f1:f2:98:d6:0f:62:b5:10:fc:9d:
         48:5e:f6:39:2b:19:11:04:b1:c9:47:c5:49:88:1d:29:09:fa:
         6d:7b:6c:46:a5:e7:d9:0d:24:a8:07:4a:3a:53:ea:b2:43:da:
         c4:1a:98:80:e2:c2:02:28:cb:62:51:f1:73:e9:08:c7:68:7d:
         b3:05:b4:ff:f3:f6:64:3a:eb:45:a5:1d:75:ea:03:18:d0:ab:
         6d:b3:de:1b:31:9c:e9:37:56:c8:48:bb:f6:2f:0e:5c:c4:14:
         ba:ca:17:34:81:16:fc:4a:94:8a:8c:6f:18:56:29:81:0e:ce:
         19:ca:1b:f3:a6:fc:18:98:04:89:06:79:d8:ec:b2:8c:64:35:
         8c:38:e9:9c:73:c3:75:bb:90:4f:1b:be:d4:2e:20:10:bc:2d:
         14:6a:31:38:d5:17:35:ba:0c:2a:8e:7c:76:84:94:c0:01:3e:
         89:5d:34:05:69:a7:06:47:34:a9:5d:bb:ae:a2:07:45:8b:a6:
         0d:2c:39:76:ed:22:61:fe:2e:75:e3:cb:b1:99:f0:52:a9:71:
         cc:61:f4:7a:ff:fe:79:43:b5:13:f2:00:dd:22:54:86:5a:85:
         d5:15:a1:10:47:33:be:b5:e3:b8:13:11:10:8a:87:60:74:5d:
         70:c9:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:12:02 2025 by rpki-client