This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier:          bK0YM2EXpQ9S0pxErQDf/fE2KvqeTm5ll+qgnFPKaGQ=
Subject key identifier:   07:63:4A:88:12:5C:3F:D7:E9:0A:53:35:25:73:D1:94:D4:2E:3E:05
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer:       /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial:       184D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number:          1835
Signing time:             Sun 28 Dec 2025 16:18:16 +0000
Manifest this update:     Sun 28 Dec 2025 16:18:15 +0000
Manifest next update:     Sun 04 Jan 2026 16:18:15 +0000
Files and hashes:         1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: u/EnilVeknc1X6zkqVz1ZXY1TiD7X/nmRQY5jozcXhM=)
                          2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: EjdNTbAyftBJxtIBKhAk8tku0Xw6VBdJSMgPHoN2SG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
                          rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 16:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6221 (0x184d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Validity
            Not Before: Dec 28 16:18:15 2025 GMT
            Not After : Jan  4 16:18:15 2026 GMT
        Subject: CN=69515848-2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:e3:06:74:48:e7:e0:f7:85:85:50:68:e7:
                    df:9b:8e:72:38:97:fe:fd:33:50:09:9f:7c:e5:66:
                    b0:9b:51:51:b2:1a:f5:38:3a:d2:59:1a:96:90:40:
                    6f:1c:2d:06:a4:5c:4d:a9:44:d6:64:39:e3:12:2e:
                    91:eb:34:1a:ad:05:b8:1e:ad:a5:b4:ad:14:cc:bc:
                    ad:82:41:b5:01:11:42:cb:48:ba:68:78:78:90:ad:
                    0d:3d:93:5c:57:c7:a4:9b:fe:ba:3f:5d:fd:df:44:
                    74:03:2b:dd:51:cf:6d:2b:3a:a5:b3:6e:09:ee:24:
                    f7:03:39:ea:c3:b3:ee:f9:c7:29:d9:a9:a5:2d:62:
                    e0:2c:01:c4:0b:c4:12:fe:39:f2:f9:b8:30:f9:c3:
                    93:e6:99:5d:74:bb:95:99:80:eb:48:a7:cf:b9:ed:
                    b6:17:44:7b:0d:81:be:07:bb:60:9a:f6:64:40:73:
                    f6:cd:73:ae:93:a6:2d:26:2a:e5:d0:98:4a:2a:42:
                    16:8d:fa:27:11:cc:b9:f2:6b:04:74:c8:24:8e:69:
                    9e:c7:f4:2a:50:fa:5e:10:6a:ce:da:c8:e5:29:be:
                    80:68:19:7c:7d:85:d7:4b:a0:36:5e:f2:5a:1a:6b:
                    0b:a6:64:b4:6a:97:d8:3e:0c:35:c9:45:2b:ec:e1:
                    95:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:63:4A:88:12:5C:3F:D7:E9:0A:53:35:25:73:D1:94:D4:2E:3E:05
            X509v3 Authority Key Identifier:
                keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:94:ef:39:b7:0d:2a:77:5a:bb:6b:ee:70:0a:f4:46:5f:48:
         80:54:d7:f6:e6:8f:4e:e0:fc:3b:c9:8f:15:91:c7:bc:38:c0:
         a7:d4:3e:52:a5:7b:e5:be:c3:5b:a9:46:7b:6b:f1:69:95:f5:
         2c:44:e8:06:71:91:cd:1a:01:6d:c6:e6:b1:9c:d9:ee:13:58:
         0b:f7:ad:12:66:e3:b3:fc:63:93:36:6e:36:b6:8c:d0:bd:01:
         b1:20:e7:4f:67:85:33:3e:e2:52:04:6d:2d:15:e3:88:60:91:
         5e:aa:e6:f3:06:ec:3c:b4:38:15:f5:db:17:c2:25:84:e9:d4:
         bb:48:05:46:52:09:d0:48:4d:1c:0e:ef:45:63:e3:89:2d:78:
         ed:1e:f0:50:d3:37:74:ee:eb:49:75:5f:09:9c:96:ad:f5:0c:
         ec:f2:c0:59:40:3a:ad:5f:8d:c6:bc:e5:28:51:c2:19:a5:2e:
         c3:c7:2c:77:eb:63:79:8c:3a:d2:1b:3e:da:56:e9:3d:1b:dd:
         a2:e2:5b:31:08:cc:ae:e6:04:2e:fb:64:7c:88:43:bc:66:db:
         ee:68:f6:ce:42:6e:2f:ea:0a:98:9f:18:e5:bb:8d:80:74:23:
         ac:c7:ca:93:e4:59:71:3d:e8:76:3f:da:6c:6d:f0:1a:93:a1:
         a9:b4:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:43:29 2025 by rpki-client