This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
File:                     H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json)
Hash identifier:          iycxb1wyoxj/j8sIwpgRdNlcn6DJe/j8peshQQi3bqU=
Subject key identifier:   47:9B:BA:28:7D:F0:AB:49:31:4B:B4:4C:F7:EE:11:D2:F2:B3:DF:C5
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Certificate issuer:       /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
Manifest number:          06FE
Signing time:             Sat 20 Dec 2025 21:17:36 +0000
Manifest this update:     Sat 20 Dec 2025 21:17:36 +0000
Manifest next update:     Sat 27 Dec 2025 21:17:36 +0000
Files and hashes:         1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: nl4gYusVAE4qv9OFcULyqdONW+xzwCEASFdnM/6DHZo=)
                          2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY=)
                          3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
                          rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
        Validity
            Not Before: Dec 20 21:17:36 2025 GMT
            Not After : Dec 27 21:17:36 2025 GMT
        Subject: CN=69471270-a248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:7e:3f:d5:5d:10:84:f5:64:6c:88:44:51:
                    e7:f0:25:7f:6f:f0:78:3f:1a:4a:4d:8b:07:cf:5c:
                    f8:d2:31:f5:2b:ff:54:93:31:5b:80:db:08:d5:1f:
                    7e:c1:77:4b:09:9e:ec:c3:75:f2:5c:47:a0:81:42:
                    68:b3:94:e0:c7:66:23:fa:8c:cf:cc:0a:27:c6:7a:
                    15:8e:1c:a4:c0:88:8e:50:8f:17:7c:4d:38:e5:ef:
                    da:78:03:a8:04:56:2f:e7:aa:34:14:4c:2d:55:5f:
                    4e:d6:80:06:e0:23:50:b5:91:48:90:78:d2:47:db:
                    4c:6e:27:92:2d:28:ab:05:55:7c:3f:75:01:f8:36:
                    2b:ee:6f:1c:45:c8:be:b5:15:29:73:4c:26:83:76:
                    86:bc:e8:7d:2a:15:d1:89:78:74:1b:76:95:14:eb:
                    2b:63:19:df:58:61:ad:88:3d:5e:b8:21:36:4c:1b:
                    42:bf:dc:30:9c:a7:2d:47:91:87:38:64:54:d7:96:
                    f1:c3:b2:42:d7:69:4d:be:a0:44:c1:e9:1d:e1:e7:
                    57:81:3c:47:f5:88:b3:0d:b0:db:0f:12:42:a0:d1:
                    13:25:38:43:3b:9c:21:2c:57:85:b4:6c:d1:ce:7b:
                    c6:71:75:a1:ca:4c:a9:27:c9:48:5f:2c:3a:e5:a7:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9B:BA:28:7D:F0:AB:49:31:4B:B4:4C:F7:EE:11:D2:F2:B3:DF:C5
            X509v3 Authority Key Identifier:
                keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:6b:62:ba:23:fb:ce:de:12:63:65:4b:96:2e:05:8e:1f:
         0f:26:e6:fe:39:fd:c7:b3:d7:82:bd:62:3f:bd:ad:5b:62:84:
         48:70:c7:88:4d:14:ab:fc:a1:45:35:a7:df:cc:c7:bc:e4:57:
         6a:ff:b3:c6:a1:e4:4a:05:a1:2a:02:52:8d:f8:33:b2:e4:59:
         2c:9e:cb:c3:e7:fd:90:f5:43:65:ab:a9:e5:e4:aa:cb:2f:61:
         58:8b:09:57:67:02:10:98:94:96:6e:9f:b1:a6:46:ed:71:4b:
         2d:f0:30:e6:38:66:78:06:9a:83:54:5a:60:c2:e9:28:7c:26:
         c7:fe:1f:37:ab:4e:50:43:1b:16:8e:50:dc:bd:6c:6b:b1:30:
         41:fc:67:a0:2a:2f:1f:df:42:2d:c2:cd:73:51:7f:e3:a9:f4:
         24:8d:da:78:26:eb:2c:34:93:28:66:5b:b2:de:7a:65:2a:69:
         24:d1:9f:4b:0b:e2:20:29:1e:ed:c0:14:50:c5:c0:c5:3d:88:
         8e:ca:ad:b9:ea:9d:95:15:b0:35:33:5e:ea:5d:d2:f6:d6:a8:
         86:d4:34:71:40:52:7b:78:5e:f5:73:79:43:8d:a8:04:33:e3:
         17:2a:49:1e:40:2b:86:c0:a8:82:f4:fa:62:33:a8:d9:e2:be:
         b3:f0:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:09:40 2025 by rpki-client