This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          FZGbwAqoPE4saMKnBoB+khRC1s4ckWO5NYTEempJP0E=
Subject key identifier:   DD:89:7C:72:D9:5C:E8:6F:89:08:87:1E:3F:F5:E7:84:80:C6:23:5F
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0C98
Signing time:             Mon 22 Dec 2025 18:26:12 +0000
Manifest this update:     Mon 22 Dec 2025 18:26:12 +0000
Manifest next update:     Mon 29 Dec 2025 18:26:12 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: OzJ3ELRl7arAeiErRW+KUXl3CRcWgpf8yIdIrsgY5Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Dec 22 18:26:12 2025 GMT
            Not After : Dec 29 18:26:12 2025 GMT
        Subject: CN=69498d44-07b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:43:9c:22:d6:b8:50:59:ee:49:26:e0:48:
                    51:00:89:af:7e:a7:ff:c9:ca:7a:0b:72:28:7b:7b:
                    49:2b:61:2e:01:92:23:87:47:6a:6b:76:5f:1a:b2:
                    b6:36:6f:fe:0c:7e:82:b5:5c:36:ab:e2:fd:71:86:
                    f2:ac:83:ad:4b:d8:2c:8b:5f:83:a5:8b:91:6a:90:
                    36:0e:c5:0d:51:35:23:ff:7c:24:f0:b6:7d:0d:d2:
                    46:20:ba:98:43:7a:7c:96:c3:d2:b3:b5:4b:a2:02:
                    3a:13:b0:4c:b2:f5:02:e8:71:70:99:d9:63:24:8d:
                    f0:62:72:b4:01:93:d5:01:db:7e:8d:c7:39:73:4c:
                    31:f4:6e:f2:5e:9a:7f:63:70:73:30:c7:d7:61:42:
                    bb:34:4f:10:71:d2:dd:08:0a:a2:41:4f:40:c8:ab:
                    08:0e:4a:47:3d:e6:6f:4d:26:e2:a2:96:74:15:ca:
                    b0:8b:e1:a0:62:dc:c6:07:62:42:49:9a:67:86:a6:
                    35:b1:f1:c4:58:65:a6:de:e9:0b:6b:70:05:91:cb:
                    0a:22:8f:8b:07:40:03:5e:68:3d:84:51:83:ae:71:
                    61:ef:63:69:49:6a:a2:3f:28:e3:b3:e3:aa:6a:9b:
                    d8:59:a5:58:41:88:11:7b:34:64:e6:5a:f6:e6:2b:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:89:7C:72:D9:5C:E8:6F:89:08:87:1E:3F:F5:E7:84:80:C6:23:5F
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:32:ee:ee:b8:d2:10:66:ac:29:1d:1e:86:34:45:30:be:
         05:98:8d:df:34:ff:e0:11:44:99:44:0a:5b:58:dc:18:16:5a:
         62:27:56:56:2f:10:42:58:66:93:35:c3:c4:22:0b:c9:77:c8:
         c6:d6:6b:b2:38:a5:4c:2c:48:a2:9d:14:e7:21:f1:60:ad:8d:
         2b:c8:05:d7:f6:7b:04:cc:26:3a:48:3e:a5:51:66:e6:9b:f4:
         57:dd:7f:c3:bc:a1:8e:76:e1:88:4d:b0:22:c1:d0:b1:a4:d9:
         2d:9c:e5:4b:db:b3:5b:0e:6d:a0:72:58:39:5c:00:aa:41:16:
         75:83:2b:5f:1d:70:fc:0b:e9:26:f4:08:9f:bf:d1:74:e7:06:
         40:52:40:82:75:f7:21:d2:d7:64:94:05:f6:08:74:bd:12:09:
         30:e4:d0:8b:e9:92:ea:cd:d5:d7:2e:d8:55:1d:31:69:5f:90:
         c2:b6:f6:f1:5a:f0:8b:c1:2c:4b:9f:08:5c:91:4d:46:8e:be:
         69:56:c1:bb:db:5d:12:9b:80:2f:67:82:e0:6d:98:dc:2b:fe:
         38:27:9e:c3:a2:74:2b:65:91:97:e2:64:9a:6a:6c:74:20:23:
         4b:ef:95:09:fa:12:fd:7d:37:31:17:40:57:fe:55:58:88:5a:
         fb:86:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:03 2025 by rpki-client