This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier:          7vfWciYQqe53B7AZP4stcpaVsnkKfaX2lCTV/vfkVqU=
Subject key identifier:   2F:03:70:B8:01:64:97:6B:94:BE:3C:03:9C:83:5B:28:6F:3D:DD:A2
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       0437
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number:          042C
Signing time:             Mon 22 Dec 2025 23:23:10 +0000
Manifest this update:     Mon 22 Dec 2025 23:23:10 +0000
Manifest next update:     Mon 29 Dec 2025 23:23:10 +0000
Files and hashes:         1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: gEi4AQmlPZirGJ8sh2wNfROftq7iiPuNUCE4jVYlWe0=)
                          2: F4639D76356211F09A66C487C4F9AE02.roa (hash: PHU5aUvAOrBIKy7huYHffiKA6xh2xWAfjAUu0W1+Jtw=)
                          3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: XE/ZbmFKgtcJ8d/T46yRFJ9hkQIFqFEENN93aFpVlI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Dec 22 23:23:10 2025 GMT
            Not After : Dec 29 23:23:10 2025 GMT
        Subject: CN=6949d2de-c233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:10:54:3d:6b:2c:02:e2:9f:c6:56:5b:c6:b7:
                    6a:a8:33:b0:60:cc:fa:3c:f3:ba:e7:18:c3:f6:f6:
                    8c:3d:36:bc:59:b1:10:99:22:29:4c:64:e3:bb:f4:
                    db:7e:c4:f6:26:1e:d3:ad:c4:5b:8a:ea:69:e3:4e:
                    1b:87:ba:62:ab:bf:87:42:85:05:9e:5e:9a:c6:17:
                    6c:9d:01:28:96:26:d4:5a:fe:e1:f9:78:fd:5c:03:
                    33:a8:08:0c:2a:ba:b0:fb:29:64:d8:5d:2a:52:18:
                    93:50:3d:aa:07:37:bc:49:f9:b3:f6:71:86:e6:d4:
                    ca:b3:8d:8d:2b:e0:e2:54:cf:89:45:80:36:ea:39:
                    04:ad:17:e4:1e:c6:71:4a:7c:26:c0:a6:37:07:3d:
                    23:ec:60:6e:0c:a7:d4:29:fa:c2:0a:7d:e7:73:ff:
                    0b:7a:17:6f:df:e3:12:d2:57:00:6f:b3:e2:0a:65:
                    d2:21:77:05:b5:3a:06:83:8f:cd:90:78:cd:75:eb:
                    87:98:28:7b:16:05:a2:51:6b:84:f5:0a:ea:cf:4b:
                    29:8c:ac:01:20:59:f3:e0:1e:b4:6c:c8:30:78:f9:
                    75:8c:b4:7d:68:88:70:8c:f7:22:ce:59:d4:05:ea:
                    19:90:f5:e0:e2:3c:b5:37:8d:31:fa:0d:be:e7:f6:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:70:B8:01:64:97:6B:94:BE:3C:03:9C:83:5B:28:6F:3D:DD:A2
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:f1:a8:28:e2:10:9b:ef:de:e0:e3:55:a8:ad:2b:21:8c:
         f6:ff:6b:b8:47:27:06:74:51:ab:b4:41:99:83:69:7c:aa:ab:
         78:20:14:79:8f:3a:16:03:c8:e2:1e:fd:07:69:e0:7b:e3:66:
         0e:4d:6b:6e:ba:a4:8b:07:03:f4:7f:fd:8f:a5:83:d2:65:f8:
         67:ab:52:34:77:5d:bd:82:e9:1e:3f:76:dd:e2:a1:1b:47:9f:
         54:47:5e:38:2d:77:08:ec:0a:5b:50:3d:26:50:ab:ad:f4:c1:
         18:c3:57:dd:93:62:39:28:a3:16:cf:6e:cd:a9:7f:0d:03:69:
         29:e3:e1:cc:f2:ba:be:37:78:12:12:8d:63:04:ed:64:19:7a:
         ea:13:f9:70:be:48:9c:94:11:5b:8d:6c:50:80:12:ce:b1:42:
         83:d1:3e:e0:bc:7a:03:19:fe:4f:c6:db:2c:5f:55:24:ad:9a:
         55:e6:20:df:22:d1:c9:8f:12:a9:ba:f8:4c:47:90:88:86:9b:
         2f:d1:1f:10:6e:5d:17:65:36:e3:84:1a:fd:27:fd:41:29:71:
         31:57:90:be:b1:e6:ff:7a:68:a8:fa:b5:d3:f0:64:5a:df:9a:
         00:ae:2c:53:12:0d:1e:0e:c1:17:45:0d:be:96:50:34:c5:ab:
         78:e2:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:18 2025 by rpki-client