This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
File:                     H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft (raw, json)
Hash identifier:          lSUle/YgjtzbmPTOjTxcSVkJKz0c4XQ/Npx/PQ5oatk=
Subject key identifier:   61:62:0E:FC:5B:73:36:94:71:92:12:26:E3:2B:29:85:5D:EF:A1:49
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Certificate issuer:       /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial:       2930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
Manifest number:          28BC
Signing time:             Mon 22 Dec 2025 15:27:48 +0000
Manifest this update:     Mon 22 Dec 2025 15:27:47 +0000
Manifest next update:     Mon 29 Dec 2025 15:27:47 +0000
Files and hashes:         1: H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl (hash: /B8sXfOGyCRG2PZhHEYXnd7KFpKTfCnYgZDJmSHUrpw=)
                          2: 4B65B208288F11EFB3C88742C4F9AE02.roa (hash: r2GAe+G1s6g34WU+Ia+gD4xaBN9kiFwzFN+koW6QJQs=)
                          3: 57D5BBF870F211F086293675C4F9AE02.roa (hash: MfxJKHAl2OU7PVOYPpiK4bilcuV1ajcVyr3SRatYOEw=)
                          4: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (hash: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
                          rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 15:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10544 (0x2930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
        Validity
            Not Before: Dec 22 15:27:47 2025 GMT
            Not After : Dec 29 15:27:47 2025 GMT
        Subject: CN=69496373-d80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ac:cc:69:34:50:00:23:e9:66:16:8f:26:5d:
                    23:d5:c4:24:9d:62:7c:01:1e:51:47:2e:2f:0d:39:
                    4c:54:71:ed:e0:ca:dc:32:4f:71:62:bf:2f:dd:3d:
                    96:84:f5:b6:58:52:ef:54:27:27:b7:c1:da:13:14:
                    44:ba:90:44:db:65:ec:a1:72:8f:51:8b:48:5a:5a:
                    28:7a:3c:89:76:ed:24:be:eb:d1:4c:e0:7b:40:33:
                    98:27:c6:b9:1b:62:e7:06:a1:1c:b5:08:11:c3:8d:
                    4d:bd:9e:92:09:43:df:e7:2c:07:34:e5:a9:81:c2:
                    21:78:69:8e:b6:f7:a4:99:e9:37:ed:d0:56:06:d9:
                    06:b2:4e:3c:4d:f4:8c:a2:cd:5b:a5:70:c5:06:c0:
                    03:7b:bb:ea:69:7e:04:4e:ae:06:89:d3:8f:f6:9f:
                    3a:7b:79:4c:73:6b:0d:9c:fd:18:3e:c7:03:a0:75:
                    e7:3d:fd:e8:03:e9:b7:3d:6e:ff:4d:b2:28:d6:af:
                    1e:c6:ad:be:1f:2a:ea:57:65:4f:6b:45:17:54:d9:
                    f4:1a:a2:0b:8c:29:a3:ee:66:ad:d0:1c:e8:fd:2f:
                    93:95:8d:37:24:24:1c:46:a6:5e:46:cd:3b:78:8f:
                    8e:26:85:9f:e8:8a:90:96:3d:17:32:f6:d0:58:6a:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:0E:FC:5B:73:36:94:71:92:12:26:E3:2B:29:85:5D:EF:A1:49
            X509v3 Authority Key Identifier:
                keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e5:d2:22:66:5b:c9:ac:59:dc:b0:d8:38:3e:c3:4c:9a:e4:
         13:f6:60:52:67:c7:4f:4d:89:56:cc:94:a5:af:52:36:9b:07:
         c0:65:5f:12:43:e9:34:99:9a:36:f2:b4:5c:1c:3b:17:17:95:
         47:64:38:11:c0:bb:67:2d:8d:9c:10:06:b7:c0:2d:8a:d3:77:
         83:63:ac:f2:04:47:71:de:9c:25:31:2a:f4:85:48:bb:7a:1f:
         d9:a8:ca:a4:73:27:3a:fe:51:da:83:f7:f8:c0:3d:58:38:f5:
         3d:ad:12:03:08:0f:59:da:31:74:0d:8f:52:af:78:6f:e5:5c:
         c0:49:b7:76:5e:f5:83:e4:c6:6b:d8:9f:5e:77:31:98:03:e6:
         b4:e8:e1:92:0a:fb:da:38:a3:e2:a9:91:00:fd:e3:9b:27:f9:
         aa:84:1c:3d:a8:66:a5:8f:b0:1a:15:03:51:4f:09:fc:00:4f:
         a6:77:c4:9f:94:a9:4c:6f:93:29:98:8c:15:a9:9e:ea:a3:99:
         bb:dd:26:39:b5:44:01:8f:8d:26:e1:82:2f:d7:a4:25:2e:47:
         da:a7:61:c6:2e:e4:96:43:2d:e4:65:0f:02:13:56:cf:8d:f7:
         58:0a:53:7c:6c:13:15:d3:fd:b7:a9:14:40:f5:cd:f6:1a:3d:
         3c:43:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 13:02:18 2025 by rpki-client