This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
File:                     -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json)
Hash identifier:          D7em5aeLIzv+UFM7AvrIyObsc6OgJuPsAuyb/X+Op9o=
Subject key identifier:   55:4D:9D:F2:A4:DE:C7:D5:8B:CB:39:74:19:59:A2:D3:2B:0E:9D:03
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       0689
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
Manifest number:          0681
Signing time:             Mon 22 Dec 2025 21:43:44 +0000
Manifest this update:     Mon 22 Dec 2025 21:43:44 +0000
Manifest next update:     Mon 29 Dec 2025 21:43:44 +0000
Files and hashes:         1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: uLc4dNy6SsFKfV3+zXskzPhcifyPG9EoP6AisiMC8bM=)
                          2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: aPUJnag1shqRG8J7/SwQ5Siu54HJfQtvC5SHdSgBnZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: Dec 22 21:43:44 2025 GMT
            Not After : Dec 29 21:43:44 2025 GMT
        Subject: CN=6949bb90-8cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:5d:98:b2:a8:cc:80:74:5c:f6:0c:b2:bc:
                    69:a2:4d:75:d7:07:43:0b:14:6d:d6:e3:bb:7f:b1:
                    40:94:fb:58:2a:18:55:53:aa:2a:d6:0c:f9:38:16:
                    67:87:b0:5a:2f:b3:4e:9b:fd:a7:25:86:9d:ee:21:
                    5a:e0:c6:31:cf:f5:c6:f8:c5:9f:a2:70:dc:31:1e:
                    44:11:14:59:22:4f:bd:3b:8f:30:ef:ef:9d:ad:79:
                    34:85:9c:4a:e5:d4:a3:1a:a3:21:71:d8:ad:b7:af:
                    84:c7:0a:39:f7:b3:db:ca:dd:04:66:c5:25:32:ff:
                    0e:d6:7c:9f:d6:7e:8f:af:a8:cb:e4:92:33:a4:18:
                    db:80:f1:6c:d1:40:69:d3:61:5e:47:d0:dd:bb:99:
                    5d:33:f2:fe:f6:fb:e0:8b:98:90:f5:0d:2c:d7:5c:
                    cf:b8:ed:ac:d0:ef:72:46:e9:58:5a:41:88:29:96:
                    04:12:14:28:a8:c0:00:b5:79:f6:99:34:03:1e:46:
                    df:65:ef:49:cb:55:80:8b:9e:92:c8:bc:dc:47:43:
                    46:63:2d:a2:5a:ec:aa:47:9e:1f:d1:9f:e9:ed:cf:
                    d1:95:95:b0:4a:3c:4b:1e:76:29:0d:9f:44:a6:b7:
                    c4:93:cf:7e:0e:d6:9a:fb:1b:3b:a6:0e:b3:31:93:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:9D:F2:A4:DE:C7:D5:8B:CB:39:74:19:59:A2:D3:2B:0E:9D:03
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:81:26:b2:2d:47:72:5f:75:09:6b:fc:cc:4c:dc:33:28:2c:
         0b:f6:cb:f9:8e:e4:41:30:fe:fb:f0:49:f2:3a:1c:d8:65:76:
         d3:a2:ca:e9:df:1d:f6:53:c1:99:a1:f5:43:75:8b:0d:e2:bc:
         f4:6b:fa:d2:9c:1a:4e:f6:5b:97:02:7b:0e:8a:21:60:d1:e6:
         66:58:6d:f4:09:4a:12:42:79:70:2f:7e:6e:ba:4b:94:af:54:
         26:6e:0e:d2:0c:03:e8:37:6c:40:d8:8a:ed:03:ab:53:7d:ee:
         c0:b8:bf:56:0f:ec:af:0b:fa:70:f4:9b:eb:34:62:47:3b:c6:
         5b:39:30:d9:25:18:05:0c:92:2c:00:15:9c:d7:93:9b:a7:62:
         7b:8e:f2:e8:8c:14:f0:4b:72:30:70:f8:8b:4f:fe:44:4b:5d:
         6b:1f:73:34:26:11:21:df:ac:11:11:ff:43:91:08:aa:96:89:
         68:dd:f9:48:32:c7:37:4f:e0:51:c6:ca:9f:69:42:d7:9d:de:
         23:6f:b4:b4:4e:5f:93:ca:e3:23:b8:f0:7c:80:1b:a1:cd:1b:
         34:a8:dd:8d:a5:e9:79:a3:75:b1:75:d5:cc:f9:e5:b9:c6:2c:
         5d:84:f0:8c:35:62:f0:52:4d:26:44:1f:75:d3:69:7c:79:fd:
         32:66:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:16 2025 by rpki-client