This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          zetG6RTtDlGPOCtB6u0lQBWBDgnjyEE0zzyXR3KvDMc=
Subject key identifier:   0C:F7:7C:7D:F4:3D:19:2B:FD:C3:1F:D1:29:79:12:C2:16:B5:67:D8
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0B5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0B4C
Signing time:             Wed 10 Dec 2025 18:23:37 +0000
Manifest this update:     Wed 10 Dec 2025 18:23:36 +0000
Manifest next update:     Wed 17 Dec 2025 18:23:36 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: bxkLI0hf8vo4x5MmJZStqrkzUBKU9w1t9Y0g/FWPIok=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: s5FxAXvHyHM95JkI0bpkB+0cESUkZdTctd6oGAI/wW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 18:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Dec 10 18:23:36 2025 GMT
            Not After : Dec 17 18:23:36 2025 GMT
        Subject: CN=6939baa9-cfa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:8f:52:67:e4:48:5a:18:54:e0:52:c4:1b:
                    ed:55:51:31:80:75:1a:71:44:26:2f:d7:4f:26:53:
                    4f:30:47:ae:3e:5e:4c:cc:6d:15:a3:fc:6b:00:c3:
                    ef:16:60:0e:63:4c:21:de:8b:58:d0:91:5e:45:ee:
                    9a:e4:0b:02:e4:29:85:b3:ea:6e:5e:be:e3:ae:02:
                    23:51:35:f2:7d:9d:bd:1e:ad:fe:55:15:be:5d:f8:
                    a1:50:4f:b9:c3:a2:a9:b2:d0:94:c4:62:05:21:fb:
                    67:bb:6b:b9:44:8c:ac:a3:8b:e9:58:5a:5f:f1:51:
                    63:74:a7:17:f6:73:80:7a:d1:a7:9a:75:07:6d:49:
                    40:d0:cd:63:b7:ac:01:8d:a3:8e:48:ab:16:7d:11:
                    4a:35:8e:f1:f2:1f:67:6c:df:a1:c3:f6:32:62:2d:
                    7d:be:c3:b6:f3:c1:07:4e:ac:7b:91:75:89:9d:f1:
                    b8:5c:6b:6d:ac:5c:03:c9:30:5d:8a:a0:ca:22:25:
                    95:a2:36:94:79:66:94:04:4c:e0:8e:36:de:e7:f0:
                    74:65:ca:3a:61:94:e2:42:57:24:21:4d:ed:25:36:
                    c9:4b:7d:65:07:e2:54:2c:ec:d5:16:a6:f2:63:a8:
                    72:56:7a:29:be:6b:18:ee:f9:07:88:7e:b1:e5:61:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F7:7C:7D:F4:3D:19:2B:FD:C3:1F:D1:29:79:12:C2:16:B5:67:D8
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:ce:e9:42:79:8c:c8:0d:1b:9e:cc:d0:14:2e:8a:dc:26:
         e6:bc:a7:cd:eb:97:77:a4:4c:30:31:66:96:73:1a:a9:b2:e4:
         95:10:49:c7:5b:d3:6c:ac:9b:4b:13:5e:50:6b:a1:5f:cc:09:
         a8:37:d1:50:b0:67:bb:37:ba:fc:8b:dc:e5:e1:10:98:97:3a:
         0b:c8:83:fd:c6:11:3f:9e:ea:3b:8e:61:f7:da:1c:b4:ef:0b:
         72:8e:16:52:c6:8e:a7:3f:67:28:50:11:c0:78:ff:a2:cb:5b:
         99:cc:b9:4a:ad:59:be:c8:7b:42:43:13:22:26:f3:7d:f9:6a:
         d3:31:91:22:da:d4:37:38:a7:19:59:d3:78:78:df:75:9f:cf:
         68:65:29:94:aa:6b:8a:a9:80:2c:84:0f:e4:de:74:5e:b0:91:
         17:94:66:06:67:3d:41:4a:7c:c5:63:17:42:7d:dd:17:7d:a2:
         80:e9:28:d5:05:47:90:c3:58:a0:a3:cd:2a:43:cc:0a:5b:a9:
         52:40:4c:55:45:b1:7a:ae:e7:a4:7b:c3:10:63:29:d8:97:65:
         ad:5f:36:82:d6:cb:ef:84:5b:00:39:9c:d0:84:7b:ad:4b:d8:
         5a:12:82:00:ce:7d:98:ba:17:50:ec:ab:7e:09:49:c2:dc:be:
         04:ec:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:20 2025 by rpki-client