This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
File:                     H8Tf0A2sNKjrhGPTlRwio0WDesk.mft (raw, json)
Hash identifier:          AEuJACHlbaDU5oAYjpz/18xqAoMt5Pix/vsr0HBGw4w=
Subject key identifier:   48:8A:3A:62:00:8D:BA:85:94:CC:21:D9:F9:13:54:AD:69:A6:50:87
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Certificate issuer:       /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial:       070A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
Manifest number:          06FB
Signing time:             Sun 14 Dec 2025 21:19:44 +0000
Manifest this update:     Sun 14 Dec 2025 21:19:44 +0000
Manifest next update:     Sun 21 Dec 2025 21:19:44 +0000
Files and hashes:         1: H8Tf0A2sNKjrhGPTlRwio0WDesk.crl (hash: Vir9RbxgblY35yBHGDh2bIou+ld3AQ9dc7Luj7556I4=)
                          2: 535436609D0511F0BAF1837CC4F9AE02.roa (hash: 5BOUZnIceKppG/eOWr9McqTQMkFI46F0FXPhmOPQ3MY=)
                          3: 22F72E28725311EBA9C51756C4F9AE02.roa (hash: Td9ZRXmDLCaOWu5C2VPY0G2nu6GZr9orup/Cn82OpN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
                          rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 21:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
        Validity
            Not Before: Dec 14 21:19:44 2025 GMT
            Not After : Dec 21 21:19:44 2025 GMT
        Subject: CN=693f29f0-b74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:7b:92:88:a5:8b:86:95:6d:02:2b:0a:c4:
                    ca:40:8f:03:35:fa:2a:03:ca:68:e3:b4:7f:57:9b:
                    73:96:2c:64:47:90:f3:6d:19:03:48:5b:3f:9a:ae:
                    e7:c8:7e:ea:d3:bf:7f:fc:b4:44:8d:92:7a:fd:f7:
                    b4:1d:af:fe:b0:6a:60:c4:bd:aa:e7:76:9f:9d:a3:
                    54:8a:26:1c:93:b1:bd:be:4e:2f:d8:df:a6:f3:62:
                    7a:f3:dd:3d:ca:c4:2c:2e:54:4f:2a:40:c1:a6:00:
                    a5:49:fc:a4:04:85:12:32:7a:eb:53:a3:72:18:ec:
                    3d:65:2f:70:24:28:77:46:74:37:9c:cd:a2:02:05:
                    7a:09:fc:12:2a:b1:97:87:40:ed:48:43:e4:b9:97:
                    e7:dd:37:85:26:6e:8d:a3:c3:d3:97:5b:38:ef:af:
                    63:27:ee:e9:c5:0b:7e:7c:d8:51:19:c6:5b:16:7f:
                    44:b1:cc:6b:8e:1f:a7:3a:e6:72:a3:3e:bf:aa:ff:
                    1a:9f:fe:92:07:46:68:b1:eb:19:62:f5:58:a5:98:
                    8c:a2:09:39:11:c5:47:cc:55:99:8c:61:cf:04:7a:
                    0d:83:cc:bc:f1:a5:09:3c:d8:4b:fa:49:b3:c9:b2:
                    53:a4:73:f7:60:a4:7a:58:63:4a:4f:e2:0c:df:85:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8A:3A:62:00:8D:BA:85:94:CC:21:D9:F9:13:54:AD:69:A6:50:87
            X509v3 Authority Key Identifier:
                keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1c:67:95:6a:b7:73:d9:3b:4f:af:ad:c7:36:a9:64:89:70:
         a0:d8:ee:3f:20:43:45:95:c6:bc:7e:94:77:14:04:bc:e4:91:
         89:12:e8:cc:a2:aa:a7:09:c5:d6:67:2c:58:cf:ba:0e:72:3a:
         86:71:c3:3d:d3:c7:ee:48:1d:fb:5c:b8:3d:34:a6:d3:8b:7e:
         29:8b:9d:54:85:98:4f:39:8d:a3:2b:38:e9:b0:eb:29:57:7e:
         da:88:14:33:bb:1c:7c:4f:6f:7d:75:02:ae:38:33:46:55:57:
         d6:8e:b6:c5:85:1a:ff:fc:36:8d:3e:32:12:fc:d9:f2:c8:27:
         6e:fd:19:e9:e8:06:01:3a:5c:1d:f1:0f:cb:42:7a:a8:9b:50:
         b2:5a:fe:22:33:15:33:0a:b2:e7:40:b5:5d:28:7e:24:b0:ea:
         19:23:45:ac:7e:31:5f:a2:49:ab:79:fc:f2:6a:a3:8a:9c:89:
         39:61:60:8d:24:36:27:5d:66:3b:ad:86:bc:81:b9:99:b8:52:
         5f:45:f0:0f:d4:8f:9d:1b:78:74:51:b3:ef:0f:e6:45:16:6b:
         32:32:d6:09:0d:ee:20:67:56:fd:74:83:16:da:cb:ff:1b:26:
         c0:3a:06:e6:b6:55:6b:1f:a3:5f:94:e3:10:ce:4f:22:89:3a:
         f7:e6:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 15:03:04 2025 by rpki-client