This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File:                     hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier:          EprHQRcjnWN0i5dNnCWNmV+SrpHHV3jctLgcjG4KsGI=
Subject key identifier:   F2:4F:37:EC:30:47:12:50:07:BE:79:FE:53:D3:C0:D4:FC:5F:F5:C3
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number:          3C
Signing time:             Tue 23 Dec 2025 06:19:39 +0000
Manifest this update:     Tue 23 Dec 2025 06:19:38 +0000
Manifest next update:     Tue 30 Dec 2025 06:19:38 +0000
Files and hashes:         1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: MP1l+hBNMizoGKcnmhfEliWltvGxwqU6Gt687AFDqvc=)
                          2: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: FD/7U7XSmgg6Fwdvyfw/wFBPedO+DNiEk5bwRU3tAxw=)
                          3: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: Dec 23 06:19:38 2025 GMT
            Not After : Dec 30 06:19:38 2025 GMT
        Subject: CN=694a347b-d0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:42:58:d6:06:11:0a:28:7b:44:38:0f:ac:
                    15:e4:ad:92:76:be:f2:07:2e:c9:00:ce:73:f3:01:
                    23:46:57:41:7d:5f:fb:90:dc:d6:5a:7d:0f:17:32:
                    91:a1:49:fb:16:20:4e:14:bc:74:d2:2b:dc:ab:d0:
                    67:6d:49:af:51:61:4a:22:b3:16:9a:64:e2:82:5c:
                    9b:4e:5e:fb:da:00:00:f5:70:8f:37:b9:bc:e9:f1:
                    03:86:4a:5c:ae:c6:4f:e0:bf:13:4d:2c:42:01:7a:
                    83:01:8e:96:93:1b:fc:dc:77:0b:e6:6d:7e:0c:b2:
                    13:60:67:12:19:45:08:ae:85:04:28:c4:9d:f2:48:
                    a1:8b:07:23:ef:70:f3:bb:be:67:0a:ad:a2:cb:19:
                    21:cc:dd:a8:dc:b9:2e:1c:cc:9e:e8:de:0e:46:71:
                    e5:6b:73:55:9a:a6:2c:92:33:74:a7:57:2a:fe:1f:
                    8e:77:11:c5:fa:1d:b8:05:16:5c:25:e4:49:2f:64:
                    f4:47:80:21:7a:10:6c:ed:32:e0:ae:25:8f:59:27:
                    91:ac:bf:a5:d9:d6:41:a8:a8:13:fe:26:98:69:a3:
                    5c:a3:21:9b:17:f6:35:3e:24:19:d1:86:de:9f:03:
                    cb:06:39:c1:c9:ce:8a:44:6b:2c:37:59:3f:59:56:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4F:37:EC:30:47:12:50:07:BE:79:FE:53:D3:C0:D4:FC:5F:F5:C3
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:04:68:cb:b2:66:12:42:c0:ac:0e:91:e2:27:1f:aa:bb:5c:
         ed:ee:51:f0:ea:73:39:a6:02:71:9e:d7:bc:a1:d0:73:83:3c:
         24:d3:f8:a6:d2:c7:f9:71:e2:6f:16:b4:1c:11:31:6e:7d:7f:
         c2:f3:b6:74:6e:c6:52:9c:42:a7:8b:e4:a2:82:15:0e:9c:4e:
         55:ee:88:e8:47:2f:89:76:3b:b0:b9:30:02:97:22:5a:66:39:
         df:99:0a:64:2f:a0:be:34:a0:18:82:fb:31:f5:9e:2e:ae:fc:
         b0:99:fb:81:8a:54:1d:94:47:ca:47:e1:89:9e:e7:15:70:6a:
         8e:07:bb:bc:ca:71:99:5a:14:b1:61:49:bd:3e:26:67:3b:65:
         b7:7f:fd:6f:d0:d2:b1:84:12:df:d4:e5:45:72:93:8d:6a:40:
         fe:29:96:bf:ca:ea:b8:76:91:c9:bf:ce:55:fb:1c:3f:11:1c:
         f4:89:af:39:41:68:a6:39:47:28:2f:22:a0:a3:e3:dc:c2:43:
         01:2b:36:78:6c:a0:20:c8:ad:8a:ff:39:99:3b:94:8b:7e:92:
         11:32:23:03:72:5a:8e:44:19:03:6e:05:c4:59:68:27:be:97:
         8c:2c:de:92:6b:63:14:47:46:3f:4c:aa:6e:aa:13:4c:cf:b4:
         d2:d3:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:27 2025 by rpki-client