This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
File:                     fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json)
Hash identifier:          8ZD7vdCgedcFPm0k7V7mXKJKjIZY9I03vxAk9YIDIp0=
Subject key identifier:   B7:09:23:CF:43:ED:5A:DA:75:0F:6E:A9:56:55:5A:AA:34:BD:AF:62
Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F
Certificate issuer:       /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
Certificate serial:       34EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
Manifest number:          34E9
Signing time:             Wed 24 Dec 2025 15:06:39 +0000
Manifest this update:     Wed 24 Dec 2025 15:06:39 +0000
Manifest next update:     Wed 31 Dec 2025 15:06:39 +0000
Files and hashes:         1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: zrLHq0CUOVLorFDjzTrDftS+oufeYeIi0+xLkvwYfks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl
                          rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 15:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13546 (0x34ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F
        Validity
            Not Before: Dec 24 15:06:39 2025 GMT
            Not After : Dec 31 15:06:39 2025 GMT
        Subject: CN=694c017f-27de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:de:0f:96:87:5d:e6:8c:4a:36:60:95:2b:
                    7a:f8:00:52:a1:40:52:5f:b6:a6:ac:02:af:c3:d9:
                    5a:4c:02:0c:5f:61:17:97:c8:bc:38:cc:6d:86:e1:
                    95:2a:3b:dd:46:c3:dc:ff:e8:f8:24:a0:93:18:66:
                    99:21:86:23:39:a8:cf:c6:a9:66:5b:22:b9:dd:3e:
                    19:33:d6:cb:e6:a5:a4:39:5c:36:c1:54:d1:b9:9b:
                    5c:4b:f8:30:64:97:13:f6:95:c2:4e:1e:bc:a6:22:
                    f2:24:37:7b:4f:90:e0:bd:45:18:51:27:03:21:74:
                    97:a7:f7:1e:34:67:02:e7:a7:bf:ba:7f:1f:b7:cb:
                    d1:90:7a:8b:d0:b9:d8:40:49:e2:ed:1e:d7:58:80:
                    17:76:68:0e:40:ef:1e:06:29:75:67:02:71:e6:d6:
                    a3:00:8e:40:fa:91:52:fe:e8:8c:f0:48:a0:52:24:
                    19:3a:1c:67:ad:00:5a:eb:32:2d:49:82:a3:1f:ee:
                    9a:99:d4:b8:a7:96:ff:b1:bc:b0:6d:94:c7:a4:1b:
                    a2:9d:3b:3c:17:66:33:d8:55:50:b6:02:d8:98:47:
                    c3:da:ee:96:be:e0:e5:4a:92:ec:bb:88:42:1b:81:
                    db:6f:da:ea:8f:95:26:fe:cb:52:bd:04:46:87:bf:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:09:23:CF:43:ED:5A:DA:75:0F:6E:A9:56:55:5A:AA:34:BD:AF:62
            X509v3 Authority Key Identifier:
                keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:81:59:e7:c6:e1:36:82:5f:ca:91:0f:15:03:79:a1:b4:00:
         33:e0:0e:96:8b:64:53:48:6b:ff:7b:0e:dc:a8:5a:08:32:32:
         0d:f6:42:5e:5f:f0:0d:86:6e:ee:e2:9a:99:39:76:5a:ca:2b:
         d4:c7:bc:e4:22:30:d6:70:33:86:93:16:3a:58:80:b0:66:84:
         59:cc:f5:83:0c:a6:99:88:6c:87:59:09:f9:0e:fe:0a:65:50:
         4b:63:be:6d:6c:1e:3e:95:98:a4:8c:78:8d:d4:5c:90:8b:ba:
         85:a9:2d:1c:a3:e7:28:2e:24:00:00:14:ea:b4:7c:e9:5c:e0:
         47:42:fe:ec:e0:95:1e:0c:41:d1:14:65:6a:66:88:e1:0e:20:
         1d:2a:9d:0b:a0:7c:8c:bb:00:cc:bd:ec:bb:df:59:e3:85:64:
         ef:e3:19:8c:cd:ab:f0:19:d1:95:12:ff:eb:f5:ae:86:c8:a0:
         61:3f:46:9f:6a:ff:08:93:64:04:4f:0e:74:98:9f:6b:8e:57:
         7c:47:d5:79:a3:58:69:b8:71:1e:48:b1:1d:74:82:38:44:42:
         c5:88:b9:5d:ae:b2:83:7c:a4:bf:85:b7:f4:b8:c0:f3:43:2b:
         d8:81:86:ae:cf:35:14:80:60:30:8d:57:6e:e0:f1:89:94:f3:
         b2:1f:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:24 2025 by rpki-client