This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          3C/mDN9zhwChPQ4K8rnWWbjdRWhPmgQOFwe/AHE8V18=
Subject key identifier:   56:1B:FB:4B:15:79:C7:31:3F:46:25:8C:0B:7A:5A:81:25:4B:B0:30
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          0706
Signing time:             Tue 16 Dec 2025 21:26:53 +0000
Manifest this update:     Tue 16 Dec 2025 21:26:52 +0000
Manifest next update:     Tue 23 Dec 2025 21:26:52 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: +g2/cFd3FbhfrZOmfAHi+Eq9RN3Gz4XDZoYyW0WXlEw=)
                          2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=)
                          3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: 00yFzXA+JQ5htpGD8ADiNSIhDTumFOoTTNXL9w2q2PM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 21:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Dec 16 21:26:52 2025 GMT
            Not After : Dec 23 21:26:52 2025 GMT
        Subject: CN=6941ce9d-2cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:10:98:1c:0a:04:ed:38:c3:b9:d3:f6:8b:
                    b7:c8:41:b6:41:d3:9c:c2:69:7a:8e:6a:1f:0e:36:
                    3c:5f:8e:bc:9f:64:06:d7:0e:07:75:4f:2c:cf:61:
                    22:b2:10:fe:9c:50:72:21:d2:64:25:e4:4d:63:02:
                    4a:23:45:c3:e1:35:ff:e6:3c:4e:bc:9e:07:b6:0b:
                    46:9e:d2:4c:d4:61:fb:fc:b3:cd:92:17:d5:d6:f2:
                    64:ec:0c:c0:a2:bf:74:55:93:04:b5:45:24:a2:8d:
                    0c:b1:8c:23:8d:9d:74:84:67:b9:3b:23:25:c5:cf:
                    24:ab:87:60:0f:1e:d4:d8:2d:1d:4a:63:80:07:bd:
                    65:d6:ab:77:c5:07:f7:84:b7:8e:58:89:6e:ac:d3:
                    b0:1d:ac:76:df:cf:e8:1c:4c:de:97:6a:ff:43:97:
                    5a:3f:c2:2b:2e:1a:39:c2:b0:5b:a9:ec:5e:45:8b:
                    9c:fd:eb:29:21:77:65:8e:8b:e8:4d:c9:91:9d:90:
                    87:41:ad:e5:8c:f4:07:62:d4:0d:ee:27:13:05:98:
                    f0:2a:ce:cf:fd:87:43:fb:e9:15:5d:77:6b:f6:68:
                    7e:9c:00:ed:c0:ee:1d:ab:a0:67:c9:ec:f5:26:01:
                    cd:3b:d3:92:e0:0e:a3:6a:ff:3c:67:b0:97:16:20:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:FB:4B:15:79:C7:31:3F:46:25:8C:0B:7A:5A:81:25:4B:B0:30
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:81:5b:76:8b:c7:a3:0b:e6:69:2a:05:7a:7f:90:5e:a3:
         a5:42:2e:e4:38:e7:33:3a:99:17:f8:2a:fc:68:cd:9f:3b:69:
         39:8a:36:38:95:a8:0d:66:20:e3:f8:59:18:3b:7a:89:28:aa:
         7e:df:6a:7e:44:c6:ff:4b:b2:3d:41:e0:59:ec:e1:a3:e2:d6:
         af:b8:29:49:4b:9f:5b:54:41:24:26:1a:af:e1:90:ce:96:0a:
         a8:9a:b1:fc:cb:9f:6c:fa:f2:9b:02:c3:f6:db:2d:f7:d0:66:
         e6:ee:8c:eb:98:dc:99:84:7f:2a:ab:f0:40:ed:12:f6:48:e5:
         8e:f6:3a:70:2b:a6:0e:24:c4:2f:24:b6:a4:6a:eb:42:9b:c2:
         3f:ab:e7:ea:21:ea:03:48:2e:2d:ae:bb:28:f9:96:77:e8:86:
         48:76:c7:4c:00:a7:a6:3b:2c:5c:0e:76:43:91:44:2d:29:5b:
         ee:31:69:eb:11:d8:04:3a:db:23:ea:58:f4:22:28:58:7a:39:
         c0:e3:19:e0:aa:63:ca:51:54:79:bd:6f:85:a5:07:c6:99:19:
         7d:a6:b8:b8:9a:d7:d4:94:9b:48:e3:04:92:c5:37:cb:d0:57:
         0e:a7:15:c0:a1:23:e7:a6:be:2d:d8:3b:ab:42:47:48:19:88:
         58:d9:df:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MDYxMTAvBgNVBAUTKDFFMTZGODNEMEM0MDMzNUQ3OTZCRTVCQTIxQzkwQ0JF
RTk5NzU5QkMwHhcNMjUxMjE2MjEyNjUyWhcNMjUxMjIzMjEyNjUyWjAYMRYwFAYD
VQQDDA02OTQxY2U5ZC0yY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5U0QmBwKBO04w7nT9ou3yEG2QdOcwml6jmofDjY8X468n2QG1w4HdU8sz2Ei
shD+nFByIdJkJeRNYwJKI0XD4TX/5jxOvJ4HtgtGntJM1GH7/LPNkhfV1vJk7AzA
or90VZMEtUUkoo0MsYwjjZ10hGe5OyMlxc8kq4dgDx7U2C0dSmOAB71l1qt3xQf3
hLeOWIlurNOwHax238/oHEzel2r/Q5daP8IrLho5wrBbqexeRYuc/espIXdljovo
TcmRnZCHQa3ljPQHYtQN7icTBZjwKs7P/YdD++kVXXdr9mh+nADtwO4dq6Bnyez1
JgHNO9OS4A6jav88Z7CXFiCnpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYb+0sV
eccxP0YljAt6WoElS7AwMB8GA1UdIwQYMBaAFB4W+D0MQDNdeWvluiHJDL7pl1m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwNi85NDBDNUQ5Qzcx
MDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0xMTVhLVc2SWNrTXZ1bVhX
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hoYjRQUXhBTTExNWEtVzZJY2tNdnVtWFdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTYwNi85NDBDNUQ5QzcxMDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0x
MTVhLVc2SWNrTXZ1bVhXYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsAIFbdovHowvmaSoFen+QXqOlQi7kOOczOpkX+Cr8aM2fO2k5ijY4
lagNZiDj+FkYO3qJKKp+32p+RMb/S7I9QeBZ7OGj4tavuClJS59bVEEkJhqv4ZDO
lgqomrH8y59s+vKbAsP22y330Gbm7ozrmNyZhH8qq/BA7RL2SOWO9jpwK6YOJMQv
JLakautCm8I/q+fqIeoDSC4trrso+ZZ36IZIdsdMAKemOyxcDnZDkUQtKVvuMWnr
EdgEOtsj6lj0IihYejnA4xngqmPKUVR5vW+FpQfGmRl9pri4mtfUlJtI4wSSxTfL
0FcOpxXAoSPnpr4t2DurQkdIGYhY2d8h
-----END CERTIFICATE-----
Generated at Thu Dec 18 06:05:00 2025 by rpki-client