This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File:                     fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier:          vvqhMm125q1NJOqLEoFzBAckkvM8YUfef4PqAFZ1xyQ=
Subject key identifier:   B2:EC:AA:4F:F0:23:A0:F4:5A:9A:30:29:F1:74:D9:B7:E0:F9:10:81
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       1104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number:          10DA
Signing time:             Sat 20 Dec 2025 17:04:18 +0000
Manifest this update:     Sat 20 Dec 2025 17:04:17 +0000
Manifest next update:     Sat 27 Dec 2025 17:04:17 +0000
Files and hashes:         1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: mUetE1sw3Cj1Ep+7KFodrkAItPc4WySiFohDjGEkSbs=)
                          2: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: spf63m8gNRJTwv/m/x8ucVicuse/s8q/g6w05x87Vv0=)
                          3: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: VPFgi7xq83Y2zvMgy3bHxVN+PqEvQlUQRC0gSB0nAwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 14:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4356 (0x1104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
        Validity
            Not Before: Dec 20 17:04:17 2025 GMT
            Not After : Dec 27 17:04:17 2025 GMT
        Subject: CN=6946d712-ce33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:33:79:bb:cb:51:7c:52:a3:f1:98:b5:98:72:
                    82:26:2b:ad:98:9e:58:e4:4e:83:2b:bc:51:fe:14:
                    9e:af:5a:93:fd:33:f8:1c:99:de:60:d2:75:a8:3f:
                    a6:39:f7:dd:6c:2e:f1:3d:37:12:50:59:e6:7f:f2:
                    6d:55:83:bf:0a:41:2a:b0:c4:ea:09:d0:e6:a5:b9:
                    c5:bb:30:17:00:e9:84:36:d4:97:1f:e2:1a:2d:8c:
                    f3:d9:98:98:8d:f4:70:33:ea:bb:e5:19:6b:ef:a2:
                    fc:95:10:94:21:d1:80:a4:3a:74:7d:86:7f:dd:a9:
                    ed:87:48:14:48:c8:36:15:3f:74:50:e4:4e:76:65:
                    05:10:09:0a:aa:5e:2a:c7:f1:2c:e4:30:a8:28:ed:
                    e8:dd:74:11:34:34:b1:01:1b:cd:8f:96:b3:42:33:
                    b1:80:5c:bd:f6:0b:33:03:38:69:f5:50:85:22:b5:
                    71:dd:41:48:70:df:4f:2e:da:c0:d9:1e:fd:92:05:
                    fc:f9:ec:24:3a:69:3a:30:dd:6c:d1:db:5e:f7:26:
                    a9:b9:46:fb:e1:93:20:43:90:3d:fc:fe:df:7b:50:
                    7d:a6:c3:f0:ef:ae:eb:99:1a:af:e1:57:05:89:51:
                    26:6a:ec:7d:41:bc:65:6e:cf:ae:7c:bf:7e:1d:3d:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EC:AA:4F:F0:23:A0:F4:5A:9A:30:29:F1:74:D9:B7:E0:F9:10:81
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:dd:c3:8b:d6:d1:5b:c6:c2:8d:ce:20:95:a9:d7:fe:0e:dc:
         a2:48:3b:ee:f2:e9:17:f7:64:e5:33:5b:ca:95:69:71:d8:0c:
         f9:f6:d2:36:29:75:fb:57:1b:cd:ea:93:8d:31:c0:6a:fb:e6:
         96:45:7c:77:64:2b:66:68:cf:5b:9d:ea:b5:56:3b:bc:2f:7a:
         a3:38:2e:12:b4:0e:27:e7:74:67:0a:7d:3b:cf:47:6b:2c:af:
         6c:40:b9:10:5a:00:b3:a6:59:3f:dd:16:37:5e:dc:a3:44:9d:
         e9:68:b0:61:e2:24:ba:3f:05:10:b6:a3:0d:8f:75:3e:36:35:
         2e:dc:d7:76:88:79:72:58:c2:c3:19:6b:87:21:48:86:67:f3:
         63:09:cb:d9:66:45:d6:f2:44:67:a0:91:1c:b7:ce:a9:9d:7c:
         73:2a:56:19:d7:f1:3f:34:f8:6a:be:e7:10:06:dd:3e:e3:68:
         34:85:12:f4:52:c9:3c:a8:26:6c:6a:74:d1:e1:46:9b:c5:23:
         90:a9:76:17:24:52:aa:ee:96:97:75:e5:44:ba:a3:21:ec:79:
         2a:d5:e3:81:26:65:ed:b5:8e:be:b4:a4:06:54:f0:f8:66:9c:
         5f:1b:77:86:ac:83:cd:b1:9e:e1:6e:1d:bc:1e:90:34:95:72:
         44:9c:ae:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:26:12 2025 by rpki-client