This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File:                     hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier:          T4RZy0+UMKgXdnZQp7h0udcvNzDAgdeFSCHOVCBzl84=
Subject key identifier:   75:B0:61:F4:B3:C2:D5:30:C1:91:47:F2:BF:61:C8:12:FD:56:53:E3
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer:       /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number:          0252
Signing time:             Thu 11 Dec 2025 00:05:00 +0000
Manifest this update:     Thu 11 Dec 2025 00:04:59 +0000
Manifest next update:     Thu 18 Dec 2025 00:04:59 +0000
Files and hashes:         1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: WhclAjW5qwRoam8SY5S1I8D9/cc38BPssEraSI98vCs=)
                          2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: d2fZwjk/kReWJf7o+GQOO5RAjKTwIQ1B0ld4lPrAcBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 00:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
        Validity
            Not Before: Dec 11 00:04:59 2025 GMT
            Not After : Dec 18 00:04:59 2025 GMT
        Subject: CN=693a0aac-90b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:86:a5:68:31:e1:72:4c:a6:ec:a0:86:d0:56:
                    07:70:9d:42:55:30:45:20:14:a0:ff:bf:84:ab:af:
                    02:91:58:69:47:bb:2b:6e:b0:ae:4a:ec:3c:e7:a7:
                    cd:83:d2:bc:ad:8c:17:f0:41:f1:2a:6b:e6:0c:f6:
                    26:c9:b0:78:7f:df:ff:b4:02:a2:f1:43:9b:4c:a5:
                    be:8b:02:08:a7:cd:bb:76:61:bb:98:c5:83:26:75:
                    7d:6a:e0:4f:9f:bd:72:19:cb:a0:96:b3:9d:65:09:
                    74:c2:dd:bd:e1:b0:de:eb:0c:04:37:a2:9e:20:dc:
                    1d:56:d9:2a:fa:78:9c:d0:db:54:13:a4:e6:07:e3:
                    99:82:37:21:57:f8:8c:2d:c6:40:de:1f:11:88:ee:
                    15:bd:12:9c:72:5d:24:5f:be:87:d3:5b:05:43:9f:
                    64:fe:6e:a4:57:2b:37:dd:19:19:ff:09:e9:1e:72:
                    66:80:4a:1f:85:b3:54:34:0e:78:ea:7e:ae:03:e8:
                    d6:a9:25:08:d3:3a:4f:4d:11:f7:23:d9:30:e0:77:
                    7b:69:13:2b:d4:cf:44:73:0f:d0:3c:b8:e6:ad:24:
                    80:20:01:eb:34:f2:28:05:69:a3:32:f5:bd:0d:79:
                    7e:d0:97:dd:22:57:dc:26:7b:72:76:d6:12:e5:c1:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:61:F4:B3:C2:D5:30:C1:91:47:F2:BF:61:C8:12:FD:56:53:E3
            X509v3 Authority Key Identifier:
                keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:53:dd:31:cf:f7:5f:86:7a:9e:b9:a6:53:32:d3:d6:1a:
         12:10:c8:a1:d2:1f:7b:c1:97:53:4f:d0:5a:d1:a0:0c:e5:b8:
         56:6f:2e:a9:05:06:38:d9:fd:6a:d0:01:5c:1c:3e:2b:05:63:
         b5:32:af:5b:10:d9:6a:8d:07:0d:7a:fb:2e:5d:3a:f3:9d:83:
         79:82:d9:81:c9:ea:c0:01:e1:06:c2:bb:8b:d6:b0:e6:03:3f:
         5d:fc:15:18:8b:f9:43:b6:7d:f9:09:c3:d7:ea:b2:49:17:10:
         0d:c0:5a:a5:d8:1b:57:86:c3:25:fe:79:6b:d8:df:6e:e9:19:
         f0:89:46:1a:28:1e:8f:a6:1b:7d:d7:b4:ff:45:7d:c8:09:d4:
         0a:21:cc:93:a9:0b:e6:ac:96:74:aa:97:27:46:1b:0f:98:76:
         11:c5:55:0d:bc:da:26:76:b2:ff:aa:ce:04:b3:7a:5d:bb:75:
         20:6e:b7:9b:8e:59:c8:d2:87:15:1f:08:fe:b4:ba:d7:49:05:
         82:3b:9e:75:7d:8a:f7:a9:17:c3:82:9a:d8:74:0f:c3:00:18:
         3d:d1:6e:f6:f9:0a:4a:53:d6:62:39:f7:22:a8:ce:59:4d:e5:
         24:17:84:34:84:59:43:73:ec:9f:ba:9b:9a:51:09:b1:2a:f5:
         6d:55:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 21:00:53 2025 by rpki-client