This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File:                     h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier:          iNK5lhw+JmES70TtEfQUwbTb1RHvJZkMmbb9iPnreQ8=
Subject key identifier:   D2:18:F6:98:5C:3B:C0:DF:8F:75:EB:FE:1E:DE:CA:15:AD:AA:18:E8
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer:       /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number:          7E
Signing time:             Fri 19 Dec 2025 05:45:25 +0000
Manifest this update:     Fri 19 Dec 2025 05:45:25 +0000
Manifest next update:     Fri 26 Dec 2025 05:45:25 +0000
Files and hashes:         1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: jHEdMxMi3eMq46j1a77wm10T0tYNFf61lwwNhNrBhhY=)
                          2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: sfbcZk8SAWuxMbwQPAGFt07XT5Nj4mSWLUAB6k9yQMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
                          rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
        Validity
            Not Before: Dec 19 05:45:25 2025 GMT
            Not After : Dec 26 05:45:25 2025 GMT
        Subject: CN=6944e675-c530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:f9:7a:10:d7:0b:9f:cf:45:a6:69:8c:d2:
                    6b:d9:e7:71:27:dd:64:f5:47:0e:9c:fd:b1:ee:f0:
                    37:b8:be:f6:6b:f4:2a:26:94:e5:2f:49:d7:07:ca:
                    2a:47:c0:ff:af:d1:09:3e:00:47:35:7f:59:d1:d3:
                    9d:13:93:52:32:ed:a4:91:d7:fd:11:fc:f2:b4:dd:
                    77:eb:27:69:e9:8a:6c:a4:8f:6f:51:01:0b:7d:73:
                    80:84:45:d6:34:3e:81:0d:fc:6d:0d:6a:92:7d:92:
                    03:3b:0f:9f:10:30:0b:bc:4e:df:f4:94:e4:dd:20:
                    ec:e2:41:b3:57:0a:77:29:be:a2:d3:0a:3e:4c:de:
                    2c:eb:b1:5e:ba:8f:19:ae:f4:5b:e9:64:d7:a3:9a:
                    9b:af:6a:8b:db:db:a1:35:0c:26:36:86:d0:7b:a0:
                    7e:22:9c:1e:8c:fa:d0:1c:7f:89:32:23:e0:ec:5c:
                    05:d9:02:cd:21:a8:73:9e:3b:7d:e7:3a:42:7a:b3:
                    6a:b8:3b:aa:47:1d:f7:3d:8e:10:82:17:cb:c5:f8:
                    9b:fe:32:84:7e:28:e6:32:f2:14:ec:ee:fa:2d:b8:
                    d5:3b:70:d6:84:a0:77:3b:90:87:be:30:a8:46:34:
                    55:2c:01:65:09:b1:68:de:cf:9a:ab:10:4c:3a:5b:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:18:F6:98:5C:3B:C0:DF:8F:75:EB:FE:1E:DE:CA:15:AD:AA:18:E8
            X509v3 Authority Key Identifier:
                keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:16:6e:be:ec:c3:94:bd:b4:4c:0f:73:f6:eb:33:5d:7c:
         e9:c3:4c:d7:e4:04:02:14:99:90:d9:4b:b9:2c:bd:ed:c2:83:
         16:e7:d9:a1:ad:d1:7d:fb:e8:0d:8d:a0:40:76:9d:f3:ce:94:
         7f:59:f1:41:bc:0f:3a:bb:b7:59:cb:07:99:33:2c:27:77:be:
         b7:d3:64:67:b2:f4:c8:f0:d3:77:80:83:de:cf:88:47:34:4a:
         2e:49:0d:fb:00:a2:f7:52:f4:61:49:3e:fe:72:68:3b:21:7a:
         7f:d8:59:4b:a6:b4:4f:a4:d2:55:b9:40:ba:7c:49:f4:02:b0:
         28:5f:a8:33:4d:49:24:d8:2c:c0:d2:b8:b4:98:69:8e:04:dc:
         79:33:fd:61:77:86:61:4c:13:02:4d:83:a4:c2:0b:b6:a3:c7:
         e7:4e:41:5d:ee:42:56:d2:09:f9:58:3c:97:73:66:49:ab:b3:
         ae:a8:d1:96:93:0f:7e:45:a9:aa:0b:eb:58:9b:62:1c:e8:c1:
         29:7e:6d:45:36:be:05:32:08:48:9e:3f:0d:be:15:05:20:f6:
         4c:38:52:02:c6:9c:ae:97:85:43:6a:14:50:31:e6:ae:56:15:
         33:46:9e:a4:bf:54:48:0a:6c:b1:93:57:ef:cc:05:05:fb:9a:
         98:04:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:00 2025 by rpki-client