This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
File:                     h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json)
Hash identifier:          2Xr8xpBjSX1R4PW1RVyaISQh9N+UWw34eD2BVx9KiBg=
Subject key identifier:   68:7B:C8:6D:33:C1:A5:99:DD:09:E6:CC:1C:96:DB:3A:F7:01:72:D8
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Certificate issuer:       /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial:       0802
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
Manifest number:          07FA
Signing time:             Mon 22 Dec 2025 20:23:59 +0000
Manifest this update:     Mon 22 Dec 2025 20:23:59 +0000
Manifest next update:     Mon 29 Dec 2025 20:23:59 +0000
Files and hashes:         1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: Zwj4FXGOAmE0b8Xj8CE5XeUpyIblIAPTPGedGU/L+rk=)
                          2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
                          rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 20:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
        Validity
            Not Before: Dec 22 20:23:59 2025 GMT
            Not After : Dec 29 20:23:59 2025 GMT
        Subject: CN=6949a8df-c079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:73:06:64:c0:24:a4:6a:b0:e8:36:58:d4:
                    1c:72:56:dc:3d:c1:63:02:77:d0:97:3f:9c:8c:1c:
                    57:c9:a0:84:2c:fb:26:e5:7a:9c:9a:49:95:b2:33:
                    3e:93:51:14:b7:03:82:74:17:af:01:07:69:78:ab:
                    83:16:f0:16:81:fd:88:b7:48:a5:21:1e:84:4e:72:
                    b8:fb:40:cf:33:32:b9:3c:65:4d:1d:1f:18:09:45:
                    2c:21:16:a9:e1:43:27:3e:ab:e5:1d:c4:e7:b3:c5:
                    4b:ce:4b:2b:53:8d:dc:c9:75:47:b1:a3:4e:dc:cc:
                    cc:35:99:97:c8:24:c0:3b:c9:48:6e:f4:b5:37:56:
                    71:ed:56:39:8b:79:86:7e:3f:ac:3d:9f:bd:1b:6b:
                    58:d4:2e:94:67:cc:0d:18:ce:a7:d4:9c:d7:8e:cb:
                    35:38:93:55:61:4d:c6:72:0e:f3:ec:70:50:e9:88:
                    f1:d2:2c:49:e6:2f:f7:aa:8b:cd:e6:94:b9:c4:2d:
                    80:93:f3:aa:37:d0:7b:0e:2b:48:aa:92:a3:ef:f7:
                    91:ef:48:13:ad:23:93:32:21:02:da:50:85:df:4b:
                    13:f4:f1:9b:a8:c2:5a:4f:3a:10:29:19:3d:b7:7f:
                    23:ca:1d:4b:0e:da:56:86:40:32:fc:08:7d:6b:9e:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7B:C8:6D:33:C1:A5:99:DD:09:E6:CC:1C:96:DB:3A:F7:01:72:D8
            X509v3 Authority Key Identifier:
                keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:e2:c1:50:cc:32:d4:5f:64:d5:92:71:29:d4:7c:f9:fa:
         d7:64:48:37:38:fa:e3:8f:e0:73:bd:a8:92:2a:2a:52:de:4f:
         fe:8b:5c:99:b6:72:7d:bd:4d:17:77:a4:3f:71:d0:f5:a9:ff:
         10:8d:2c:08:64:af:b9:35:f6:55:b3:f6:69:6b:51:ff:5c:ca:
         61:2c:e6:e4:90:98:46:14:39:88:61:7b:d9:0c:b8:fa:c8:c8:
         05:dd:20:97:3e:a7:da:5b:20:f6:d0:65:17:48:8b:87:80:a8:
         b1:5c:76:e4:dd:f0:35:62:2e:26:fc:d5:cf:f4:7a:5e:8c:3d:
         5c:ec:0d:ce:c1:96:c6:db:d8:e6:47:ce:1b:a0:60:7a:27:91:
         74:b4:30:ea:02:04:89:58:56:21:97:ff:52:c7:ee:0f:0e:50:
         b0:91:e6:51:5a:da:4f:b1:56:bb:dc:5e:ac:86:aa:39:86:5d:
         34:52:8a:a8:97:b2:e3:2e:8c:16:5d:bb:57:82:4d:72:53:64:
         0e:09:48:a9:fc:71:83:ed:63:d6:e2:4d:83:f1:45:fa:82:d1:
         11:ae:29:aa:8c:2f:06:89:74:20:9e:4e:dc:25:76:51:bc:b3:
         f0:f5:8e:b0:38:97:61:73:95:ca:c7:42:cd:71:78:f0:d3:7d:
         37:9a:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:11:47 2025 by rpki-client