This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          SNtu7NO08kxRV/luqg+7pDkDgj/NbqAITJ5WHHhIzRM=
Subject key identifier:   B2:16:5E:A8:66:63:EE:D4:A5:F9:06:EA:50:24:58:92:45:75:A1:16
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       04E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          04E4
Signing time:             Sat 20 Dec 2025 23:01:44 +0000
Manifest this update:     Sat 20 Dec 2025 23:01:43 +0000
Manifest next update:     Sat 27 Dec 2025 23:01:43 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: wzASj8MUPTR+kHFaFG8RFssyyfA4wXHGbw0dsUk+fF4=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: pNQ6kIYnvQIwpNCx+ZN0qCQfIPg7+rgG9P96OYYJHr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Dec 20 23:01:43 2025 GMT
            Not After : Dec 27 23:01:43 2025 GMT
        Subject: CN=69472ad8-ac4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:10:98:9a:60:d1:14:92:5a:74:16:48:e5:
                    2a:78:0b:06:0e:90:93:fb:67:97:f6:5a:ad:42:33:
                    52:f8:e8:4e:4f:b0:e9:a1:df:2c:c5:bc:ea:8b:12:
                    18:29:a3:f9:ff:cd:6c:88:8c:ea:76:87:30:de:23:
                    dc:43:90:05:56:4a:84:71:df:11:b0:b8:22:b3:45:
                    10:04:d2:34:df:7c:59:b4:e8:2d:d3:9d:21:c3:c9:
                    63:88:04:6c:35:05:12:3e:3b:cd:43:7d:cb:7b:b4:
                    04:aa:d5:fb:8c:79:80:2f:fc:f4:40:86:2a:86:63:
                    6f:7a:7f:34:4e:59:cd:af:df:68:6c:b7:fc:08:77:
                    94:fc:e5:b8:0e:71:23:a5:12:4b:dd:20:ce:d4:9c:
                    c0:98:6b:81:ff:45:52:69:39:c5:7f:c5:86:e0:41:
                    ee:9e:4e:f6:fd:7a:e6:fb:6b:7f:6e:e9:49:ad:1e:
                    5a:90:1a:10:95:f3:d5:ed:f3:4b:2d:ad:e7:f0:ab:
                    84:96:c0:a8:df:65:62:58:ee:58:8a:e0:90:6b:90:
                    7f:f7:7f:da:ed:2a:0d:f9:38:97:6c:78:94:a2:fa:
                    5a:28:0e:21:63:b3:87:7f:d5:26:f1:3b:bf:22:77:
                    58:6e:76:8d:fc:96:6f:91:de:96:bb:bc:de:9a:cc:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:5E:A8:66:63:EE:D4:A5:F9:06:EA:50:24:58:92:45:75:A1:16
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3b:da:82:71:bd:4d:50:a2:b6:2d:0f:da:96:20:b9:91:90:
         9b:ef:b5:44:ee:69:17:93:26:01:d1:21:87:24:a4:0c:d3:31:
         96:d6:29:cd:2a:3c:e0:d6:48:b3:03:8b:be:bc:1a:6d:7c:a1:
         21:7f:90:72:ff:92:41:cd:fd:1c:75:28:c3:cb:54:73:2f:0b:
         fe:d9:e0:24:22:d4:f9:f4:59:b0:ac:86:0f:ed:0d:d2:21:4d:
         a5:44:ed:a1:96:7a:95:39:0c:4b:bb:0d:63:23:45:f5:4d:6c:
         40:37:31:15:e6:a3:a3:83:86:1f:8b:21:a2:74:b7:35:4c:37:
         b0:d1:14:7d:e3:5a:07:3e:19:b2:ec:8f:ac:ab:4e:24:00:4e:
         02:23:8e:ef:b5:90:9d:08:20:a2:1e:f4:78:aa:37:b6:d1:4b:
         6b:78:13:2f:42:55:a4:d7:ea:cf:bc:04:b3:d3:a1:78:ec:38:
         0d:21:cf:0c:f5:23:d3:bb:6d:d9:0d:d0:c7:9c:87:67:26:56:
         0c:b6:58:61:56:d8:25:a1:fb:f5:e9:62:9b:a8:4a:04:69:41:
         b6:de:fe:08:ef:3a:92:ea:5e:1d:11:43:1a:41:7d:e1:c2:fe:
         15:1d:a7:8f:52:8e:9d:d4:6f:f7:7e:9a:5a:87:7d:e5:60:d4:
         22:0f:98:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZDNEUxMTAvBgNVBAUTKDFFRkVEQTM0Mjg3Rjg1OEREQ0Y0RENFODQyOEMzM0I2
MUM0MUQ5OUEwHhcNMjUxMjIwMjMwMTQzWhcNMjUxMjI3MjMwMTQzWjAYMRYwFAYD
VQQDDA02OTQ3MmFkOC1hYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuD0QmJpg0RSSWnQWSOUqeAsGDpCT+2eX9lqtQjNS+OhOT7Dpod8sxbzqixIY
KaP5/81siIzqdocw3iPcQ5AFVkqEcd8RsLgis0UQBNI033xZtOgt050hw8ljiARs
NQUSPjvNQ33Le7QEqtX7jHmAL/z0QIYqhmNven80TlnNr99obLf8CHeU/OW4DnEj
pRJL3SDO1JzAmGuB/0VSaTnFf8WG4EHunk72/Xrm+2t/bulJrR5akBoQlfPV7fNL
La3n8KuElsCo32ViWO5YiuCQa5B/93/a7SoN+TiXbHiUovpaKA4hY7OHf9Um8Tu/
IndYbnaN/JZvkd6Wu7zemsznBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIWXqhm
Y+7UpfkG6lAkWJJFdaEWMB8GA1UdIwQYMBaAFB7+2jQof4WN3PTc6EKMM7YcQdma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkM0RS9GQjIyMUQ0MDQy
OTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZM2M5TnpvUW93enRoeEIy
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h2N2FOQ2hfaFkzYzlOem9Rb3d6dGh4QjJaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkM0RS9GQjIyMUQ0MDQyOTAxMUVDOUQyMUEzMTZDNEY5QUUwMi9IdjdhTkNoX2hZ
M2M5TnpvUW93enRoeEIyWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1O9qCcb1NUKK2LQ/aliC5kZCb77VE7mkXkyYB0SGHJKQM0zGW1inN
Kjzg1kizA4u+vBptfKEhf5By/5JBzf0cdSjDy1RzLwv+2eAkItT59FmwrIYP7Q3S
IU2lRO2hlnqVOQxLuw1jI0X1TWxANzEV5qOjg4YfiyGidLc1TDew0RR941oHPhmy
7I+sq04kAE4CI47vtZCdCCCiHvR4qje20UtreBMvQlWk1+rPvASz06F47DgNIc8M
9SPTu23ZDdDHnIdnJlYMtlhhVtglofv16WKbqEoEaUG23v4I7zqS6l4dEUMaQX3h
wv4VHaePUo6d1G/3fppah33lYNQiD5iA
-----END CERTIFICATE-----
Generated at Mon Dec 22 22:33:36 2025 by rpki-client