This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
File:                     fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft (raw, json)
Hash identifier:          8ZuUrBk2xHjQ7urBt8GzZJ6CPEk/G65DgW/4hPRnnGE=
Subject key identifier:   70:D4:9E:72:D2:28:2B:DB:AF:8F:B5:B3:A6:DA:3E:74:E9:6E:EC:B4
Authority key identifier: 7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E
Certificate issuer:       /CN=A913FA2D/serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
Manifest number:          0D
Signing time:             Fri 19 Dec 2025 06:59:16 +0000
Manifest this update:     Fri 19 Dec 2025 06:59:15 +0000
Manifest next update:     Fri 26 Dec 2025 06:59:15 +0000
Files and hashes:         1: fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl (hash: 0uOkkDvjTD4woDK3ewgobKwUpziAXizK5Sk46ClUvEE=)
                          2: 08B9DE4CD40B11F0B7778216C4F9AE02.roa (hash: GNkRLJn8XSANTINmPiJ00h7rw6CLmDGth09g+Ndrvu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl
                          rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FA2D, serialNumber=7E4FC7B944DC809A8B1C71FF218CFB995DCC953E
        Validity
            Not Before: Dec 19 06:59:15 2025 GMT
            Not After : Dec 26 06:59:15 2025 GMT
        Subject: CN=6944f7c4-255f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:cc:e2:8e:1a:e2:5b:62:fb:0c:4b:b4:5d:
                    47:63:6d:2b:e8:47:3b:7a:d9:7b:3a:85:b4:b3:72:
                    a9:78:c8:fa:1e:48:f4:05:8d:c7:68:17:59:77:ff:
                    1f:2a:9d:4a:d3:9d:f4:f2:1f:d8:b1:08:e3:40:c6:
                    9e:a1:25:55:b1:9e:ac:24:b3:ea:81:03:0b:b7:b3:
                    c8:f6:61:63:aa:f7:e5:6a:64:b5:38:11:b6:7c:dc:
                    c2:4a:f8:b4:20:9c:82:4f:16:46:47:53:51:a5:96:
                    c8:0a:3e:af:68:50:e5:0f:48:3e:76:36:2a:24:41:
                    0c:73:79:50:ec:d1:83:83:8a:cb:30:1a:46:d7:52:
                    11:d2:11:50:cb:62:19:38:6e:26:fa:3d:8b:62:4a:
                    4a:b7:e9:a4:5b:63:62:bc:3b:69:82:1f:c6:c0:b3:
                    9b:a0:c8:cf:ad:e0:b5:ef:29:ba:68:cc:b9:91:08:
                    9d:c3:52:d7:19:b7:57:fc:f3:0f:50:9c:fd:ec:e1:
                    ca:8d:d9:7b:a2:35:d7:ff:cd:eb:4d:8d:4d:b8:b6:
                    c8:5c:4f:14:11:57:ad:7f:a0:f7:cf:1a:b3:94:92:
                    d2:40:e9:2d:16:e2:2a:70:e3:eb:44:2e:15:c8:e2:
                    e2:7d:e0:ae:b6:0d:c7:1e:73:c6:f7:23:ff:98:ea:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:9E:72:D2:28:2B:DB:AF:8F:B5:B3:A6:DA:3E:74:E9:6E:EC:B4
            X509v3 Authority Key Identifier:
                keyid:7E:4F:C7:B9:44:DC:80:9A:8B:1C:71:FF:21:8C:FB:99:5D:CC:95:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fk_HuUTcgJqLHHH_IYz7mV3MlT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA2D/C91EE8A2D20411F08D4FB019C4F9AE02/fk_HuUTcgJqLHHH_IYz7mV3MlT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:50:41:9c:11:d9:a9:ce:96:01:65:13:95:4f:dd:d9:70:78:
         f4:66:ca:b1:58:ea:35:8c:d4:05:86:0b:97:2e:c4:92:91:04:
         80:08:b6:fc:04:70:86:d0:7b:c0:b9:2e:cc:ff:f3:b8:6e:af:
         7f:f9:88:69:09:bb:f6:52:5e:eb:07:54:f7:81:61:95:a8:79:
         1b:a0:76:3c:28:3d:31:b6:b9:d5:a8:11:75:9d:d7:b3:02:4d:
         69:ac:f4:10:39:84:5f:6f:ab:fb:12:be:e0:11:25:c4:29:47:
         57:cd:55:d9:44:66:97:44:bf:06:27:92:b5:fd:1d:e8:c9:97:
         85:bb:9f:1a:84:21:e9:0e:66:04:cc:7c:76:a7:93:83:3c:f5:
         a2:28:93:c2:1b:3e:0f:c2:dd:b7:83:a7:f5:c7:82:0d:06:da:
         76:73:51:20:17:46:c9:d8:ad:d2:8a:4c:fc:44:56:f0:8c:4f:
         aa:13:86:6e:fb:eb:43:22:57:91:e3:e1:b6:2b:80:14:96:ee:
         2e:c8:8a:3f:78:02:35:ff:17:35:9a:81:9b:9e:99:5d:27:7f:
         46:a5:3e:8c:2f:0c:09:5b:97:b2:00:ae:3e:c7:c7:81:f7:67:
         e3:60:6a:22:6b:22:c7:89:c7:6e:f1:cc:b6:73:a2:19:b5:47:
         51:dc:12:69
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RkEyRDExMC8GA1UEBRMoN0U0RkM3Qjk0NERDODA5QThCMUM3MUZGMjE4Q0ZCOTk1
RENDOTUzRTAeFw0yNTEyMTkwNjU5MTVaFw0yNTEyMjYwNjU5MTVaMBgxFjAUBgNV
BAMMDTY5NDRmN2M0LTI1NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpG8zijhriW2L7DEu0XUdjbSvoRzt62Xs6hbSzcql4yPoeSPQFjcdoF1l3/x8q
nUrTnfTyH9ixCONAxp6hJVWxnqwks+qBAwu3s8j2YWOq9+VqZLU4EbZ83MJK+LQg
nIJPFkZHU1GllsgKPq9oUOUPSD52NiokQQxzeVDs0YODisswGkbXUhHSEVDLYhk4
bib6PYtiSkq36aRbY2K8O2mCH8bAs5ugyM+t4LXvKbpozLmRCJ3DUtcZt1f88w9Q
nP3s4cqN2XuiNdf/zetNjU24tshcTxQRV61/oPfPGrOUktJA6S0W4ipw4+tELhXI
4uJ94K62Dccec8b3I/+Y6pxvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcNSectIo
K9uvj7Wzpto+dOlu7LQwHwYDVR0jBBgwFoAUfk/HuUTcgJqLHHH/IYz7mV3MlT4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGQTJEL0M5MUVFOEEyRDIw
NDExRjA4RDRGQjAxOUM0RjlBRTAyL2ZrX0h1VVRjZ0pxTEhISF9JWXo3bVYzTWxU
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZmtfSHVVVGNnSnFMSEhIX0lZejdtVjNNbFQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG
QTJEL0M5MUVFOEEyRDIwNDExRjA4RDRGQjAxOUM0RjlBRTAyL2ZrX0h1VVRjZ0px
TEhISF9JWXo3bVYzTWxUNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAL9QQZwR2anOlgFlE5VP3dlwePRmyrFY6jWM1AWGC5cuxJKRBIAItvwE
cIbQe8C5Lsz/87hur3/5iGkJu/ZSXusHVPeBYZWoeRugdjwoPTG2udWoEXWd17MC
TWms9BA5hF9vq/sSvuARJcQpR1fNVdlEZpdEvwYnkrX9HejJl4W7nxqEIekOZgTM
fHank4M89aIok8IbPg/C3beDp/XHgg0G2nZzUSAXRsnYrdKKTPxEVvCMT6oThm77
60MiV5Hj4bYrgBSW7i7Iij94AjX/FzWagZuemV0nf0alPowvDAlbl7IArj7Hx4H3
Z+NgaiJrIseJx27xzLZzohm1R1HcEmk=
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:41:10 2025 by rpki-client