This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
File:                     hitzuc41BLC6JB0U_awOxLTkrcI.mft (raw, json)
Hash identifier:          Bes4Te9pCKzDel5/YZZWofbC1uRaZgNE/xKyEayQ93c=
Subject key identifier:   54:46:1F:84:46:FA:03:66:00:03:0F:4C:27:B2:7F:38:B3:07:64:31
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       09AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
Manifest number:          099A
Signing time:             Wed 10 Dec 2025 19:05:45 +0000
Manifest this update:     Wed 10 Dec 2025 19:05:44 +0000
Manifest next update:     Wed 17 Dec 2025 19:05:44 +0000
Files and hashes:         1: hitzuc41BLC6JB0U_awOxLTkrcI.crl (hash: F8MQXzHe1MEDX2a+JwFNlQpStl/GIhgYS3PANakhh+I=)
                          2: 70FED13CCEF611ED9DDE0A39C4F9AE02.roa (hash: 6YMCbYV0HjEFxQW7Rqr8k/qQPvulelScO8qALM4FUVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 19:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2477 (0x9ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Dec 10 19:05:44 2025 GMT
            Not After : Dec 17 19:05:44 2025 GMT
        Subject: CN=6939c488-2a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:7f:d5:91:9d:94:a6:63:b0:3d:c0:1d:40:
                    df:b5:f0:1d:f9:73:aa:52:6e:e2:6f:a8:e5:4a:65:
                    d1:f0:95:e2:b2:96:cb:2f:b3:e7:b4:c1:03:63:c8:
                    ca:c4:bd:6b:5a:10:c6:d0:de:8c:3f:48:64:c7:76:
                    b9:40:80:6c:1e:bb:1c:17:5a:d0:9b:6e:d5:e1:0a:
                    6e:25:fc:67:70:77:6d:45:29:9e:68:8a:54:5c:c2:
                    64:45:41:80:1e:2c:f6:94:3c:05:7f:74:97:80:38:
                    ab:5e:a4:1b:0e:2d:b5:df:53:b5:33:c7:51:3d:66:
                    08:66:28:c7:bc:3c:c1:43:be:b5:d0:83:5d:f7:c4:
                    3a:c4:e3:bb:98:5f:03:05:de:22:a9:7a:35:ed:7b:
                    ae:77:74:05:26:1f:fe:8c:d7:2c:50:a3:4b:7a:13:
                    37:f4:ed:a2:09:16:b7:40:b2:43:a8:c0:8f:61:c9:
                    43:9f:60:87:a6:b8:dd:e2:64:78:ff:ae:fa:39:52:
                    e5:6d:56:5f:06:b4:3d:b6:aa:27:b5:00:34:0d:20:
                    62:89:87:78:1a:53:a8:66:c4:80:41:9b:60:26:19:
                    7b:dd:f1:b6:dd:8f:50:6b:0d:37:f7:15:1c:71:a6:
                    de:c2:27:8f:8f:9c:8c:ab:57:d0:33:7f:f6:06:ef:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:46:1F:84:46:FA:03:66:00:03:0F:4C:27:B2:7F:38:B3:07:64:31
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ec:ec:bb:4b:41:2f:9c:b2:a8:63:54:bc:f2:84:71:2e:65:
         cc:c5:73:75:e5:57:23:35:be:32:1c:41:56:c1:11:0e:3a:21:
         3e:27:d1:80:f0:21:0f:10:0a:03:80:4c:e4:91:7a:ea:7f:0f:
         75:5a:80:54:67:60:b9:42:15:cf:9c:bc:9f:08:ed:bc:58:28:
         98:4d:55:81:25:1c:de:c1:2d:1b:bb:76:62:7c:6a:05:69:53:
         fc:73:41:d9:76:f7:4f:d0:ad:0d:b3:44:6d:ac:2b:e8:cb:d6:
         d2:70:dc:9c:88:31:50:89:85:93:19:35:c6:38:f5:60:6a:3d:
         87:da:71:b5:f5:a5:c1:af:99:ce:72:98:2f:d5:8c:0a:c9:bc:
         41:f3:0b:40:25:09:3e:70:ef:2b:64:2a:1c:9e:0f:28:a4:87:
         39:f2:46:dc:ef:d6:b2:14:6b:69:03:38:47:33:da:3c:50:af:
         6b:1a:10:7a:5b:39:44:dc:6e:7f:fc:ab:35:cb:68:97:74:1d:
         3a:a2:9d:61:ce:e6:5b:ea:bf:f4:1c:2c:8b:39:ec:56:50:95:
         fa:8c:36:e1:24:92:3a:bb:fa:7a:e3:42:a5:ee:bb:05:e8:04:
         ae:52:0a:f0:74:19:0f:77:c3:a5:dd:2d:69:a1:2a:eb:e9:e0:
         a7:8a:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:32:05 2025 by rpki-client