This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File:                     HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier:          +d8dqGs8t/nPoLKNDFW7DjCmmRBgHZrRBNEtZCt+Lds=
Subject key identifier:   4E:2A:15:EE:5F:B8:D8:25:17:04:70:21:9F:74:BD:70:A3:29:8F:7B
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number:          0239
Signing time:             Thu 25 Dec 2025 01:03:52 +0000
Manifest this update:     Thu 25 Dec 2025 01:03:51 +0000
Manifest next update:     Thu 01 Jan 2026 01:03:51 +0000
Files and hashes:         1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: 3ccCpRm73B0DsWCkRfWAQYBOSbF6zo+FESMsrbiUdtI=)
                          2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: JuvmY3+I202n0uUz8NMiaSDo2LrHnQwyTbRe2kcQqLA=)
                          3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: xfkl8skdiPHTBgxKlmUOk4AXlxxNWByBJaAARzV7VLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
                          rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 01:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: Dec 25 01:03:51 2025 GMT
            Not After : Jan  1 01:03:51 2026 GMT
        Subject: CN=694c8d77-17e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:20:06:14:15:94:82:25:0a:c9:4e:51:c2:
                    96:7c:2d:8b:00:d3:b1:f3:04:33:1a:40:c8:64:91:
                    5f:19:0e:6e:00:0c:77:7d:02:33:cc:d2:0c:14:2a:
                    4a:e6:19:0d:c1:b1:aa:4b:47:43:28:1a:08:b0:44:
                    0d:72:10:a3:fd:6f:de:76:af:c0:c3:a0:82:67:3c:
                    82:ae:9e:a9:75:a0:60:8e:7c:6f:7f:d3:46:3e:ad:
                    06:7e:27:8d:d5:a2:c7:3a:1b:0d:1b:91:89:26:22:
                    20:2a:58:7b:3c:93:2a:4c:0f:43:06:35:8d:10:ca:
                    70:8b:21:86:8f:74:d2:f9:ab:c8:48:ec:f9:74:6b:
                    6c:00:5c:2a:26:20:07:b4:f6:01:98:c8:08:d1:e4:
                    c6:69:8b:64:5e:cf:b0:d1:39:86:40:78:51:4e:fb:
                    d2:4f:37:03:36:cd:f5:48:a7:66:18:ff:6e:51:21:
                    25:cb:9c:12:b1:09:db:0c:6d:9a:4a:35:55:29:c3:
                    38:48:85:e7:cb:22:ac:08:7e:a5:74:6f:b5:2e:4f:
                    98:5f:05:76:c6:6d:50:0e:a4:e9:5f:c9:c7:c2:ad:
                    ae:58:c5:c5:d9:2e:6d:7a:fe:4d:45:a8:07:cc:57:
                    33:4f:37:d0:17:ec:d0:c8:1e:68:5d:01:72:03:5e:
                    78:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:15:EE:5F:B8:D8:25:17:04:70:21:9F:74:BD:70:A3:29:8F:7B
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:6c:a6:69:71:98:31:83:67:6f:08:10:7d:ef:52:b2:27:f9:
         6f:24:96:de:37:a3:a4:d8:b7:cb:7d:c7:f0:06:95:bf:bb:79:
         70:c5:f0:f9:e7:fb:34:27:08:b4:59:a6:99:86:3d:42:bb:6d:
         c2:01:b7:62:bf:3f:74:ef:85:ad:64:9c:21:8a:d3:06:ba:99:
         17:bd:12:36:1d:61:b5:86:bf:86:f8:41:3f:27:21:cc:29:8b:
         94:d1:d8:cd:15:5e:14:30:f7:01:95:5e:9b:ae:0d:48:30:0c:
         11:94:cd:10:19:da:08:7c:fc:ef:4c:3b:e8:54:c1:b7:e2:28:
         57:73:49:98:d8:07:29:c9:13:63:f5:75:57:fb:46:73:d6:17:
         e8:8c:a3:e4:07:47:91:ef:d7:05:9a:05:7f:48:20:e5:2e:2f:
         aa:33:76:fb:66:57:41:6b:1e:51:a2:ca:61:d9:69:16:77:56:
         04:42:66:4c:91:80:80:bb:5c:6d:2c:18:e1:ff:21:82:32:d7:
         01:22:16:0d:85:7d:95:fb:f1:54:35:c0:f4:b6:4b:13:1a:22:
         e6:06:07:ba:41:f8:02:fd:c0:69:3e:7c:2d:3f:38:85:e5:14:
         a8:17:10:4f:2e:2b:19:da:31:82:6f:93:a8:f8:29:48:5e:e5:
         4e:57:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:11:33 2025 by rpki-client