This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          15QCDFvvq087B6hgdTDSz1CfLjcYUYjiavK0vgmBPFk=
Subject key identifier:   EB:12:90:37:53:0E:ED:8C:8E:0D:17:9B:4D:0A:DC:51:22:95:A5:CC
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       09D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          09B5
Signing time:             Sun 14 Dec 2025 19:28:11 +0000
Manifest this update:     Sun 14 Dec 2025 19:28:11 +0000
Manifest next update:     Sun 21 Dec 2025 19:28:11 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: i4nkAb34NkNZtb6u8IGbqhuNi4o9nK5VkAIRa1gDg3Q=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: W0ibhleTeTRf9SQxlBk7HfDKAYLQO1EEAaw2Uj8cqZ4=)
                          3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: QSi8XLx3OVsMnyA15sUJv5CABNiE2WZTW3Q/q6D7Y/8=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: VxFJ2WxHqvcaRXlyN+j6s6uxQHhjavcFYpy6cqbLq00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Dec 14 19:28:11 2025 GMT
            Not After : Dec 21 19:28:11 2025 GMT
        Subject: CN=693f0fcb-ebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:74:c9:2a:6d:ed:bb:02:44:34:da:85:c3:
                    15:20:03:65:3b:34:cc:5f:cd:b9:e0:38:91:29:c9:
                    98:c1:98:97:f0:ba:c7:72:43:c2:4d:36:8e:e9:24:
                    00:dc:51:92:b4:4c:0f:a0:1b:1a:7c:5a:74:f6:4d:
                    46:9e:4c:c0:c8:53:c1:1b:01:25:54:1f:55:0a:d4:
                    23:60:26:c0:9c:1f:ea:fd:0b:3e:a5:d2:ec:38:93:
                    85:a8:03:c2:3e:e9:9c:e7:da:be:69:f5:f8:93:59:
                    14:35:d9:5b:b8:d1:10:81:3e:91:ee:84:96:00:e6:
                    c3:03:21:96:4c:5c:e3:ed:e7:a6:76:c5:e6:64:b7:
                    af:d7:e3:6c:5b:61:02:57:05:a5:b2:b3:72:e8:ea:
                    2a:5f:0a:83:06:27:3a:5a:a8:c1:5d:26:b1:54:f7:
                    8c:4f:43:66:16:2b:24:83:02:05:56:81:32:64:34:
                    45:22:68:b1:df:a7:52:53:e3:ae:d5:72:39:77:e0:
                    19:e8:9b:63:25:b5:29:44:b5:5f:6f:39:59:32:59:
                    1c:a4:f8:4e:04:6a:fd:85:ff:56:d5:ee:52:2f:fb:
                    e6:2d:44:3e:63:a0:5d:d3:fd:c3:2f:ff:2a:76:d7:
                    18:ae:e9:3d:b1:5f:6b:43:18:bd:39:62:5f:ef:3d:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:12:90:37:53:0E:ED:8C:8E:0D:17:9B:4D:0A:DC:51:22:95:A5:CC
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:da:c1:f5:e2:52:cd:c4:60:04:e0:07:5d:4d:45:4b:76:41:
         03:fe:13:81:16:3f:18:e2:94:fc:4f:17:8b:ad:0c:ce:78:9e:
         3a:4a:ab:e6:c3:20:25:ed:a4:2a:dd:97:16:aa:b9:70:8c:8f:
         83:25:e1:2a:f7:5c:67:a3:0f:83:15:f9:58:2c:22:d9:c0:dc:
         c9:6b:36:79:d7:75:d1:12:f8:68:91:68:7b:ef:68:4c:8a:05:
         50:38:9b:3a:3b:fb:6b:b5:59:a0:5d:7b:84:0f:48:4e:10:61:
         2c:e5:22:26:88:a2:1c:ab:0c:54:ab:a4:fd:0b:c1:09:a4:4e:
         12:6c:87:00:5c:fa:bb:6b:81:6b:85:13:75:17:5f:16:37:c2:
         0a:78:de:4f:3a:7d:47:20:57:17:c9:84:83:4a:1f:6a:9a:40:
         76:17:1c:3b:96:ac:17:e2:65:dc:23:cb:ad:d3:29:15:6d:78:
         a2:6f:b6:55:62:82:4d:f9:4c:d0:d2:f7:3a:65:4b:10:a5:b6:
         5f:8d:d7:13:02:9f:0b:ee:5e:a3:1a:e8:b5:3c:1c:59:03:32:
         b3:6b:ab:22:54:ed:9d:78:a0:69:11:45:33:5c:08:43:e4:b8:
         60:fd:91:77:52:37:69:f9:73:7f:a8:e6:55:74:a0:85:a9:27:
         95:7a:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:57:12 2025 by rpki-client