This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File:                     HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier:          bJNOfUy75QXEaKNAxZCk8qrUqC1C93/gUITL+VQpplw=
Subject key identifier:   48:63:91:CA:2D:58:B6:AB:BF:AB:C0:EC:A8:B1:47:89:59:80:78:0D
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer:       /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial:       018B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number:          0823
Signing time:             Mon 22 Dec 2025 21:38:04 +0000
Manifest this update:     Mon 22 Dec 2025 21:38:03 +0000
Manifest next update:     Mon 29 Dec 2025 21:38:03 +0000
Files and hashes:         1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: vkKRAUaHGL7c+phW9cL3e/7cDzwr44nhqef5qSEFfJg=)
                          2: D4163D4A884211EEB8B05013C4F9AE02.roa (hash: q4381xIhqUfIrBCsNyCtqEJ8jJCuGtCH1QNYVJEKVIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
        Validity
            Not Before: Dec 22 21:38:03 2025 GMT
            Not After : Dec 29 21:38:03 2025 GMT
        Subject: CN=6949ba3b-8b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:09:58:f0:ea:62:4f:60:da:82:78:43:09:
                    08:a2:6e:db:c0:15:e0:eb:22:dc:0b:86:76:ee:3f:
                    2d:a3:c8:6e:a3:3e:f2:a4:06:89:d3:b9:fc:74:d1:
                    60:8b:39:85:1b:d2:1c:fd:81:45:23:3a:11:2b:7e:
                    29:71:f4:e2:27:e3:ff:dd:02:e8:50:2a:bf:e0:b3:
                    45:12:09:06:a6:ae:37:47:b2:8d:f0:5f:34:5a:ed:
                    ea:16:72:bf:33:a6:6a:c5:9a:dd:53:2f:2a:dd:7c:
                    19:e0:c3:f9:81:35:9f:56:01:81:dd:5f:0b:a7:c4:
                    45:7f:51:3c:e9:09:64:38:09:04:5d:2f:5a:21:a3:
                    72:63:2b:3c:d9:3a:04:71:b0:07:05:da:00:11:a2:
                    b7:44:1f:1e:4f:c3:73:c2:9f:ad:f5:e6:17:f9:12:
                    c2:e8:21:b4:fd:6b:93:75:a9:8b:67:e7:64:75:f1:
                    47:f1:28:fc:b9:e1:02:08:93:bc:df:a6:fa:1b:09:
                    bc:cc:6a:88:07:de:fe:7d:c4:45:95:f7:5d:e7:57:
                    fa:4e:4d:e7:16:3a:bf:84:ac:2a:57:78:fd:11:51:
                    2f:86:a3:78:91:b2:3c:03:f0:ce:41:6b:60:fb:73:
                    03:99:df:68:d2:19:24:98:f1:bf:6e:0f:cc:8e:79:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:63:91:CA:2D:58:B6:AB:BF:AB:C0:EC:A8:B1:47:89:59:80:78:0D
            X509v3 Authority Key Identifier:
                keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:fd:16:08:91:e2:9f:2b:76:89:e9:7c:4d:c2:e0:6d:b0:
         70:61:49:27:ad:e9:3b:a8:eb:a6:b8:b0:9c:69:81:04:97:70:
         2e:f5:c7:29:11:e5:a7:a9:d9:6a:2c:72:48:03:7d:b5:80:c6:
         6d:e6:2e:bd:5b:8a:8e:c9:99:96:48:a3:b5:c0:5b:5b:50:2c:
         90:36:b5:65:a2:1f:b6:ef:ab:18:f5:7b:fb:60:53:59:87:63:
         69:4d:d9:af:86:e7:fd:53:e5:4a:6e:70:af:50:88:f7:0f:5d:
         53:53:ef:92:e8:70:43:6f:70:b6:ae:af:2c:3c:ae:fa:e2:13:
         3c:67:d5:9f:1d:e8:85:06:4e:90:eb:ae:48:06:23:71:26:cd:
         c9:ae:5b:9c:46:5a:73:d7:7c:59:0f:26:62:79:01:81:d9:16:
         4c:ec:fc:89:d7:a1:81:16:f6:6b:c0:cb:8e:eb:43:b4:c6:28:
         20:b8:18:1c:5a:ab:6d:82:32:d7:3c:4b:c2:80:c0:6a:2a:0a:
         84:48:9e:ad:00:10:82:fe:7e:6a:f3:42:b7:6e:3a:18:f4:4d:
         c8:13:35:ce:89:aa:fc:39:0e:4d:9c:de:06:05:b3:59:1c:93:
         31:df:86:7f:68:99:7f:a3:1c:49:15:ba:5b:b6:83:08:83:a7:
         6c:b2:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:54 2025 by rpki-client