This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
File:                     hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json)
Hash identifier:          hcMeTDzb1iNLsGoK3nOeFmVyYgzr5Vo97j2gvlaNu9c=
Subject key identifier:   4A:D8:25:18:0F:DC:8C:E9:97:11:B2:71:50:59:2B:70:73:8B:58:9B
Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70
Certificate issuer:       /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
Manifest number:          0378
Signing time:             Fri 19 Dec 2025 00:16:01 +0000
Manifest this update:     Fri 19 Dec 2025 00:16:00 +0000
Manifest next update:     Fri 26 Dec 2025 00:16:00 +0000
Files and hashes:         1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: XJN6PQgZFyCWJF1Mze/7k1hs3CtiQUC2KgzZw4hEdDg=)
                          2: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: DtxFYEOtGQIY53GPRL1dPzv4/8AYv0bkRXV3Pqe74uw=)
                          3: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: Yx63u4z9hDR8keVLNdP1xC6pEQSE/UG9aZLw+X4LwRo=)
                          4: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: z5Obs62Z4LeG64hnhJujzAwct4kvn0rbMC23ZtCEssE=)
                          5: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: 10NBPSybJ1d+q+ni3VVF3MNFnJGqTgzoq8TVIRJgedI=)
                          6: B35D540E68F611EFB785D145C4F9AE02.roa (hash: 6WmIg/lOdQnkEvIsKV1OREBoFlxfYt6gLUjZAiHr4+8=)
                          7: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: WhQNM40PbhQEu35UK4su17rbvUJWY/mG7qX+ZTgU+w4=)
                          8: EA792108690E11EF9396CC48C4F9AE02.roa (hash: 6kpxPOxsj0Raf3qdIHWPGMM1EX7pSguYPkBcI1ejIWI=)
                          9: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: CZLbLDcndy2xxG5xhFEstQ1CfMNrOMxWn16hiuaCB3A=)
                          10: 218211CA68F911EF986C8281C4F9AE02.roa (hash: mHnULwgJoiFgX9ai3WggRtZIFI0XOoqJW+z2W78zhrY=)
                          11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: KVYDjb3LOCylq5/WVla/qjjDgT6zCAlDqXpLKrRgpFk=)
                          12: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: Ugtcgz+OwF9hfe6CeTebPqLvH2EQn6e6HzRfBkIfJHo=)
                          13: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: aOIDROQi6GkPOjEwda+oZgehrmBXac6uf9Rdo2Bd6r4=)
                          14: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: xRZTvOkzIPzpcRY24c/2u0KIcsyrTX9YYHCujB9nKyM=)
                          15: BE4B3228691411EFB573C120C4F9AE02.roa (hash: 5H32B3wtPXDSZssXMxHc0JZTPyABfL6/i25/U22sL/A=)
                          16: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 0Wbd0TloILo4D7y7bRvBLRW10Y2AoSQoJYvEUNn6cbg=)
                          17: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: 9K/dPzFWeJ3662AXxOwpQnYP5rZeIOBTrzjoLeu+KQo=)
                          18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: 2OyyCanvq13/lef3XlgSuSBG44PottDi4GJaK+x96f4=)
                          19: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: eDZoNBLuQcw3Wn1rO/220lw34J3dfQJ4no+D+vY9xGU=)
                          20: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: 2TbZWTz5MrS4pUvVlInd+ICIzajVNRsMUaqG9OLqDBQ=)
                          21: 3B4551B4CAA811F09DDC8D69C4F9AE02.roa (hash: q8+3jxkLjtGgAWTpN6kPoNOdBfmaZjeJ2k/PYDuVa+o=)
                          22: 058B976ECA9811F0A295B360C4F9AE02.roa (hash: zw3Bw3tYxrZQpKxOUK57pZSMryzQb0S86CCh4Nq5BP4=)
                          23: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: VMFfG28SR9K0gvV1WJc79wKMQ3bg4zxW5arPOP7vJGw=)
                          24: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: D5I1AGWIgCpGbK2ioEBWE7LhyF6lwZBdzrjdsvoMJHo=)
                          25: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: 1GqQuY6ipOukNjcNmFCRz4aP/qgsCVml/uDhWXv7ZZA=)
                          26: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 8u8ukooKAbnYCoCoCcqh3LJNzpT+wb7zAAtytRCCJns=)
                          27: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: /NnlQrY/nq8rIKszOQKAgkEH+3DZidftTKYbVxGk7FQ=)
                          28: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: 2vWk3DGkjeXEl7FbZy0aavCh6asq08aBokPfmXkrJdc=)
                          29: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: a6e59gPtF+oIYCL1FfTClIwM64Rzhh/gE9NV+k4hGio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 00:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570
        Validity
            Not Before: Dec 19 00:16:00 2025 GMT
            Not After : Dec 26 00:16:00 2025 GMT
        Subject: CN=69449941-9e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:21:65:80:09:78:82:52:6e:50:7d:79:00:
                    bb:d1:5a:9e:67:52:bd:f0:b0:d3:2e:04:e8:6f:94:
                    06:7f:aa:5e:db:7f:67:af:0d:f5:01:df:f6:63:73:
                    4e:d4:55:93:3a:18:2d:c0:3a:eb:e5:2c:26:05:9a:
                    c7:2e:b1:66:94:b5:66:e4:6a:09:9f:ef:4e:27:00:
                    d8:bf:f0:2c:70:7b:83:94:80:78:70:db:dd:53:5c:
                    69:8d:11:b9:e6:ed:55:70:68:e7:24:fe:04:4c:5f:
                    4f:a3:6f:ae:3e:14:c8:87:7b:30:61:9a:ef:76:7e:
                    a3:4f:f8:66:24:1c:db:29:f8:8f:5c:04:5a:66:f9:
                    b5:69:a5:9b:a2:a3:e6:c0:69:16:c3:22:c3:00:10:
                    f9:66:99:1d:59:dc:4e:f8:fd:78:e5:48:63:8b:11:
                    87:3b:6f:b9:e5:9f:7f:ef:0a:98:45:3e:72:c9:f6:
                    22:7c:cf:b8:dd:dd:1d:56:c5:f9:20:52:13:42:35:
                    16:ba:30:29:ce:95:e3:41:10:78:90:95:0f:42:10:
                    8b:5d:67:e4:9c:20:a6:97:3b:51:84:f3:c7:c6:50:
                    1c:77:b5:b7:3e:2a:27:56:73:a8:e5:5e:3a:2e:9f:
                    15:dc:59:7e:a2:3e:63:99:36:5f:50:27:bf:5a:8e:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D8:25:18:0F:DC:8C:E9:97:11:B2:71:50:59:2B:70:73:8B:58:9B
            X509v3 Authority Key Identifier:
                keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:57:4e:86:90:3f:f3:09:e3:5d:6b:1b:c0:13:d3:e4:7a:
         f6:92:c4:42:74:91:d5:91:e3:ac:09:b9:51:42:5c:d3:23:24:
         b2:c6:76:92:f0:72:d3:b7:c5:fa:2e:f3:5e:25:08:9f:da:a3:
         07:96:02:6f:72:ae:cb:77:c9:a2:b4:ea:eb:20:1c:a0:d3:28:
         be:d4:97:41:ab:ac:ea:7d:ee:08:a1:ef:cc:ac:7f:92:dc:9f:
         7b:ab:5a:9d:d8:2e:c4:7a:5b:8a:1b:5f:d6:61:a2:62:cc:2b:
         13:52:56:0d:8f:01:a8:b8:8b:4f:de:2f:e1:75:4e:dd:fa:5b:
         8d:34:83:d4:a0:4c:c1:83:5c:28:ef:36:6f:5c:71:13:61:72:
         9d:36:45:18:b2:9c:be:a1:c4:1a:8e:56:68:79:4e:ee:28:76:
         06:a5:22:7e:79:0b:20:44:8e:ba:e8:b6:1b:74:d3:69:89:89:
         25:3b:08:f0:85:2d:b3:72:03:a3:74:cc:56:04:15:0e:b9:d2:
         e9:9c:be:38:0d:f7:83:34:1a:a9:10:92:38:92:a8:c5:3c:0f:
         62:9e:63:42:dc:58:06:14:3e:6d:d6:74:b5:5f:da:70:fa:e4:
         94:c9:2b:a2:52:6b:81:ff:14:fd:ec:49:10:ee:93:c4:1e:0f:
         e5:fd:ff:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:50:14 2025 by rpki-client