This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File:                     ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier:          XyX5haypDiYLSFa+GbYCNwu7UELmRYnpDFf1DL/GMrY=
Subject key identifier:   E8:9A:C1:65:93:96:5C:30:32:21:20:C4:B2:75:F7:AC:86:52:9A:2A
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer:       /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number:          0186
Signing time:             Sun 07 Dec 2025 02:06:06 +0000
Manifest this update:     Sun 07 Dec 2025 02:06:05 +0000
Manifest next update:     Sun 14 Dec 2025 02:06:05 +0000
Files and hashes:         1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: FhiyMrVCx9mCB2R7Ybvatmsu0q2kG9xH6LYs0qNBsD0=)
                          2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: gchZs9w0rw9TlztTLiN3YxQhLwyUQamaOc4Ws69TNxo=)
                          3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: PlPXvige1wM44fDKeXBrjYCBTjGnK3s8s01Ti3fCICQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
                          rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 02:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
        Validity
            Not Before: Dec  7 02:06:05 2025 GMT
            Not After : Dec 14 02:06:05 2025 GMT
        Subject: CN=6934e10e-dd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:6e:7e:68:57:a4:1a:51:4b:7d:af:6d:1f:
                    4c:1f:6a:97:b1:c0:24:96:84:4d:4b:c8:53:aa:c9:
                    8f:51:a4:e7:36:de:61:0f:8e:77:f1:c0:70:16:60:
                    d2:51:4b:7a:13:e7:de:cf:d0:01:c4:a4:24:cb:bd:
                    f6:de:9e:2a:e8:63:e0:f1:dc:8d:54:6f:02:75:7a:
                    47:e1:3f:d7:38:a0:18:11:90:03:84:2b:75:fb:f1:
                    ec:e8:1d:00:07:cd:fd:da:fc:18:7f:f9:d6:7b:c1:
                    ee:8e:90:a1:48:8a:04:b3:4b:8d:03:7f:80:1b:d5:
                    25:5e:15:e3:e0:df:dd:25:05:b4:31:0a:d9:ae:19:
                    f2:6b:e2:e7:8e:6d:1c:18:6b:29:14:dc:63:6b:4f:
                    24:ee:6d:58:5b:35:73:e0:87:42:57:04:7d:06:eb:
                    2f:62:8e:5e:3d:a4:d4:ca:b1:24:3b:f2:86:ad:1a:
                    cb:39:7b:c7:c1:b4:58:9a:f7:e1:fc:5f:43:dc:9e:
                    5d:ae:bb:80:8b:0b:68:7b:c0:03:b8:bf:51:5b:36:
                    19:86:3f:98:28:95:c0:6f:34:d7:01:57:b9:4f:55:
                    36:2f:2b:cb:8f:ee:a1:52:fc:e9:39:b0:8a:53:11:
                    4c:0e:54:4e:69:65:80:ff:fb:b7:d4:3d:e0:65:c9:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:C1:65:93:96:5C:30:32:21:20:C4:B2:75:F7:AC:86:52:9A:2A
            X509v3 Authority Key Identifier:
                keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:1b:c4:9c:7e:8c:59:91:c2:5f:ca:d2:41:42:e8:13:e3:d8:
         52:2a:34:04:1f:f5:e5:d3:d3:51:47:6d:cf:d4:99:c7:c9:39:
         be:17:93:b8:01:41:4b:59:58:00:c8:7c:0c:6d:19:60:27:22:
         c6:66:4b:8d:e9:73:ce:e7:10:45:7f:8b:52:dc:00:11:78:63:
         22:f7:b9:b5:f0:5e:5d:b5:d0:7e:ad:62:64:3d:cd:e6:d3:43:
         64:9e:93:0c:13:aa:78:71:b7:d5:41:26:91:a6:57:22:ed:74:
         7b:af:2b:45:a1:e2:ed:a2:f7:29:2a:83:1e:3a:18:84:06:dd:
         da:a5:23:63:09:64:d4:a0:33:e3:6d:45:54:4c:b4:10:f5:98:
         ec:98:6e:d9:be:ed:0b:15:35:47:64:c9:ca:30:6e:42:fc:72:
         aa:0d:83:3d:93:b2:b4:60:d7:c5:d7:f0:43:df:a5:b5:cf:77:
         35:68:df:4e:26:1f:0b:15:5d:51:f6:e6:7d:52:fc:b4:a4:c1:
         fa:39:d3:57:f7:fe:33:93:04:a4:6d:03:51:18:92:98:e1:95:
         29:ae:fe:92:bb:8c:8d:33:9d:ef:f2:51:34:09:c4:84:72:14:
         69:dc:88:f0:2f:37:d1:9e:35:ad:dd:2f:f9:d2:fb:34:58:bf:
         f7:46:5c:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU4MzIxMTAvBgNVBAUTKDc1RDFDN0EzMzMwM0RBOERDNjQyMkFFMzUxNzAzRjJB
NTI4REYzQkUwHhcNMjUxMjA3MDIwNjA1WhcNMjUxMjE0MDIwNjA1WjAYMRYwFAYD
VQQDEw02OTM0ZTEwZS1kZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuINufmhXpBpRS32vbR9MH2qXscAkloRNS8hTqsmPUaTnNt5hD4538cBwFmDS
UUt6E+fez9ABxKQky7323p4q6GPg8dyNVG8CdXpH4T/XOKAYEZADhCt1+/Hs6B0A
B8392vwYf/nWe8HujpChSIoEs0uNA3+AG9UlXhXj4N/dJQW0MQrZrhnya+Lnjm0c
GGspFNxja08k7m1YWzVz4IdCVwR9BusvYo5ePaTUyrEkO/KGrRrLOXvHwbRYmvfh
/F9D3J5drruAiwtoe8ADuL9RWzYZhj+YKJXAbzTXAVe5T1U2LyvLj+6hUvzpObCK
UxFMDlROaWWA//u31D3gZcmICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiawWWT
llwwMiEgxLJ196yGUpoqMB8GA1UdIwQYMBaAFHXRx6MzA9qNxkIq41FwPypSjfO+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTgzMi82RDYwRjlEODg3
OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJvM0dRaXJqVVhBX0tsS044
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkSEhvek1EMm8zR1FpcmpVWEFfS2xLTjg3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTgzMi82RDYwRjlEODg3OTcxMUVFOUYzRUQ0NEZDNEY5QUUwMi9kZEhIb3pNRDJv
M0dRaXJqVVhBX0tsS044NzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGG8ScfoxZkcJfytJBQugT49hSKjQEH/Xl09NRR23P1JnHyTm+F5O4
AUFLWVgAyHwMbRlgJyLGZkuN6XPO5xBFf4tS3AAReGMi97m18F5dtdB+rWJkPc3m
00NknpMME6p4cbfVQSaRplci7XR7rytFoeLtovcpKoMeOhiEBt3apSNjCWTUoDPj
bUVUTLQQ9ZjsmG7Zvu0LFTVHZMnKMG5C/HKqDYM9k7K0YNfF1/BD36W1z3c1aN9O
Jh8LFV1R9uZ9Uvy0pMH6OdNX9/4zkwSkbQNRGJKY4ZUprv6Su4yNM53v8lE0CcSE
chRp3IjwLzfRnjWt3S/50vs0WL/3Rlyb
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:13:31 2025 by rpki-client