This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          5tq+T42bALMy8xUsLu5jhONpEHe//rn4H69tNF2sJjQ=
Subject key identifier:   EE:B9:7E:17:E1:70:54:11:11:46:6B:BB:83:60:0A:C3:7A:2A:7E:09
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          C1
Signing time:             Tue 23 Dec 2025 04:53:24 +0000
Manifest this update:     Tue 23 Dec 2025 04:53:23 +0000
Manifest next update:     Tue 30 Dec 2025 04:53:23 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: +Zf+ILG4nxskepUIrd2T5xh6UJp25nFCadfZO+CS8bc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 04:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Dec 23 04:53:23 2025 GMT
            Not After : Dec 30 04:53:23 2025 GMT
        Subject: CN=694a2044-d415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:83:63:94:ef:e8:31:45:89:2f:fd:6b:a6:
                    2f:a0:29:77:38:f5:6c:2f:57:cb:b6:98:7f:ce:47:
                    78:52:b5:ad:98:d2:2a:3b:8a:93:70:97:df:7f:a0:
                    88:19:65:7d:26:38:6a:40:6d:a6:88:c2:ac:30:7a:
                    72:ee:a8:57:3f:8b:be:44:30:f8:57:33:2d:bc:8b:
                    c5:2a:a6:be:13:21:e9:51:6d:52:44:1a:0e:0c:58:
                    7b:a0:4f:19:bc:6e:9e:db:20:9e:e2:a2:d6:31:e6:
                    2e:db:1a:27:e3:0a:72:10:aa:f2:f1:3a:2a:a0:5f:
                    0b:9d:e7:a1:8f:de:d3:63:17:48:2d:0e:c2:91:8d:
                    cf:08:73:e4:3b:b0:d5:06:0b:06:d1:34:f3:8b:23:
                    fb:7e:0e:ef:35:82:40:a2:c5:62:ac:35:6e:88:74:
                    29:be:20:9b:96:bf:db:8b:44:dc:ef:b8:f5:86:9c:
                    48:0e:ca:5f:27:a8:6c:05:c4:55:ae:64:8d:6d:2a:
                    62:8d:e2:bc:79:58:0b:2a:22:3b:c3:cb:df:f2:8c:
                    e8:28:46:55:4e:df:14:7d:b8:45:f8:86:49:e1:79:
                    20:c2:58:5d:e5:90:29:fa:bf:5f:5d:d0:e9:22:91:
                    7a:65:af:0f:3c:2d:3e:62:c5:a4:bd:89:04:59:47:
                    a1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B9:7E:17:E1:70:54:11:11:46:6B:BB:83:60:0A:C3:7A:2A:7E:09
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:0a:ce:d7:09:4b:ed:da:10:70:63:cb:3b:af:a4:c1:fb:
         a9:23:c1:51:36:77:5a:7d:58:a4:d8:9f:70:e0:52:1d:7a:43:
         bf:f9:6c:3b:3c:be:4c:ee:bd:50:61:39:f6:8f:39:48:79:9b:
         16:cb:04:41:12:bb:b8:ae:e0:ca:82:08:93:e7:92:af:79:20:
         fc:98:2d:fa:e5:61:e3:0c:6e:bd:b9:d3:47:7e:82:1d:b0:39:
         73:27:27:0c:e6:a5:77:92:a0:65:45:a2:50:70:a0:26:39:b1:
         1a:b6:ac:76:0a:f7:6a:dc:a2:28:b6:c4:02:00:10:51:ac:ac:
         13:c7:d0:a1:11:12:be:00:d7:59:e2:71:f9:51:91:6d:99:d7:
         4a:ec:16:b3:34:9e:8e:35:ef:94:b3:10:d0:c9:45:be:f6:ce:
         1b:dc:84:f8:11:0b:82:46:d4:be:fa:cd:5e:a8:40:80:9e:02:
         6b:77:01:93:89:5e:ae:72:40:c0:e9:6a:3f:9d:b8:03:b8:23:
         bf:e4:32:f9:c9:49:d5:f2:12:77:cf:e6:72:cf:66:0a:c2:27:
         e9:8f:56:52:6f:d3:74:a5:d6:82:6f:e5:25:c9:4d:eb:c4:96:
         be:dd:a1:42:06:48:39:5e:88:20:2a:39:21:1c:1e:2a:6b:73:
         47:ae:12:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUzMEIxMTAvBgNVBAUTKEFFNTlDNzFGRDYzQkQyNkI0NjMwMjZFMDc0OTA0Njk3
MDRBOEZCOUIwHhcNMjUxMjIzMDQ1MzIzWhcNMjUxMjMwMDQ1MzIzWjAYMRYwFAYD
VQQDDA02OTRhMjA0NC1kNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCGDY5Tv6DFFiS/9a6YvoCl3OPVsL1fLtph/zkd4UrWtmNIqO4qTcJfff6CI
GWV9JjhqQG2miMKsMHpy7qhXP4u+RDD4VzMtvIvFKqa+EyHpUW1SRBoODFh7oE8Z
vG6e2yCe4qLWMeYu2xon4wpyEKry8ToqoF8Lneehj97TYxdILQ7CkY3PCHPkO7DV
BgsG0TTziyP7fg7vNYJAosVirDVuiHQpviCblr/bi0Tc77j1hpxIDspfJ6hsBcRV
rmSNbSpijeK8eVgLKiI7w8vf8ozoKEZVTt8UfbhF+IZJ4Xkgwlhd5ZAp+r9fXdDp
IpF6Za8PPC0+YsWkvYkEWUehpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO65fhfh
cFQREUZru4NgCsN6Kn4JMB8GA1UdIwQYMBaAFK5Zxx/WO9JrRjAm4HSQRpcEqPub
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTMwQi9BNkE1NDRFMEI3
OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBtdEdNQ2JnZEpCR2x3U28t
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JsbkhIOVk3MG10R01DYmdkSkJHbHdTby01cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTMwQi9BNkE1NDRFMEI3OUExMUVGQTBENjk3NURDNEY5QUUwMi9ybG5ISDlZNzBt
dEdNQ2JnZEpCR2x3U28tNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfyQrO1wlL7doQcGPLO6+kwfupI8FRNndafVik2J9w4FIdekO/+Ww7
PL5M7r1QYTn2jzlIeZsWywRBEru4ruDKggiT55KveSD8mC365WHjDG69udNHfoId
sDlzJycM5qV3kqBlRaJQcKAmObEatqx2Cvdq3KIotsQCABBRrKwTx9ChERK+ANdZ
4nH5UZFtmddK7BazNJ6ONe+UsxDQyUW+9s4b3IT4EQuCRtS++s1eqECAngJrdwGT
iV6uckDA6Wo/nbgDuCO/5DL5yUnV8hJ3z+Zyz2YKwifpj1ZSb9N0pdaCb+UlyU3r
xJa+3aFCBkg5XoggKjkhHB4qa3NHrhIz
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:03 2025 by rpki-client