This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
File:                     F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json)
Hash identifier:          fhyHXf9Y6IOM4vO5b585CJ3ZZO2fB2jXC3Ws5lnlA7s=
Subject key identifier:   34:D9:3D:58:77:24:55:C2:91:A3:CE:49:96:3A:49:2A:3E:30:1A:16
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Certificate issuer:       /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial:       3582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
Manifest number:          353B
Signing time:             Thu 18 Dec 2025 14:43:28 +0000
Manifest this update:     Thu 18 Dec 2025 14:43:28 +0000
Manifest next update:     Thu 25 Dec 2025 14:43:28 +0000
Files and hashes:         1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: u/5+PBQaYmK3DTIgDB3d2vILbaSPaqsM81m06bwJuWA=)
                          2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8=)
                          3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: sZVhikXu0+BgylCyd4weUDz3omEWpmI+GLV51J/cwuU=)
                          4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: q2ExykZAmfzp0xfcMOWOgSv2/3eS55YeYtvtqyJjJO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
                          rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
        Validity
            Not Before: Dec 18 14:43:28 2025 GMT
            Not After : Dec 25 14:43:28 2025 GMT
        Subject: CN=69441310-be7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:1b:86:b7:23:72:62:d6:84:0c:3e:5a:93:
                    95:04:64:cf:23:fe:85:5b:09:28:ec:68:f8:6c:cd:
                    aa:05:80:bf:43:8b:62:02:de:ca:bc:5a:d7:83:27:
                    ca:49:88:00:81:50:8e:9c:f7:be:10:78:8e:de:e0:
                    48:4c:dd:13:92:ac:10:db:f6:f5:50:7d:ed:8d:fe:
                    c4:fa:e8:4e:70:2c:60:74:98:fb:fb:3b:8a:60:b3:
                    e3:7e:6a:6c:a8:1a:d0:9c:b4:f5:74:07:66:38:d6:
                    a8:8e:a5:38:68:c8:9a:5e:8a:20:0b:38:19:a4:f8:
                    68:20:53:e7:97:fb:ee:e0:2d:d0:54:2a:e7:6f:c3:
                    57:8d:83:cd:a2:97:20:15:a7:81:0e:39:76:04:a3:
                    4f:dd:16:83:2a:71:da:65:3e:df:82:41:2a:3a:34:
                    0a:c6:6c:4a:78:ad:bc:6c:30:36:d2:a4:25:de:86:
                    a3:f2:6f:e4:bf:74:23:b6:6b:3f:e9:ba:01:22:c7:
                    ac:d2:42:9e:d6:a3:d1:5c:4e:7f:70:43:42:17:49:
                    2a:94:a4:7c:2e:c6:e2:d7:7e:7f:5a:ce:8b:41:82:
                    d1:54:91:8f:3c:e6:66:c3:87:e8:89:c1:8b:25:7c:
                    a3:14:bb:c8:07:78:57:d8:03:26:bf:f1:86:68:f1:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:3D:58:77:24:55:C2:91:A3:CE:49:96:3A:49:2A:3E:30:1A:16
            X509v3 Authority Key Identifier:
                keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:04:9e:70:7b:1c:c4:e7:59:f0:f3:9c:a4:5d:63:94:4e:89:
         ae:45:52:fc:bd:40:20:5b:be:04:a7:ac:2f:8f:dc:f2:13:81:
         ec:a3:e9:1c:f1:f7:4f:bd:a2:f9:d3:90:e9:7f:b3:70:f3:32:
         62:30:3b:5b:e3:d1:fc:b7:ab:b0:11:ca:7f:a1:4b:f2:b8:98:
         70:29:54:74:b1:89:d9:57:25:99:6e:7f:fc:22:b6:9a:e5:fd:
         91:53:15:8c:45:9b:dd:83:c1:97:3f:fe:5d:b3:b3:b9:b2:47:
         28:74:10:a8:4f:24:51:d0:35:e8:3c:50:8a:53:76:16:48:15:
         6b:9a:ea:e4:2b:4c:99:54:aa:7c:fd:26:0c:82:c0:6e:56:b9:
         f2:b8:2f:d4:6d:c6:a6:b0:17:45:5b:72:6b:b4:dc:a2:12:1c:
         99:92:a5:26:3e:ef:82:a8:d2:df:27:16:4f:2f:2c:e1:7c:15:
         c8:45:2d:39:3a:49:63:01:a0:3d:35:36:95:6a:7d:64:a3:0a:
         36:75:d4:99:1b:47:4d:b7:9b:43:85:b0:cf:b7:7c:e7:98:11:
         d4:85:b6:b0:1f:ec:bb:d8:b2:89:0a:0a:c0:db:a0:26:65:f5:
         29:ee:f6:72:53:66:cf:06:ba:2e:7d:22:fb:e3:28:4c:e6:5e:
         fa:f4:41:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB
MkUwMkZEQTMwHhcNMjUxMjE4MTQ0MzI4WhcNMjUxMjI1MTQ0MzI4WjAYMRYwFAYD
VQQDDA02OTQ0MTMxMC1iZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LkbhrcjcmLWhAw+WpOVBGTPI/6FWwko7Gj4bM2qBYC/Q4tiAt7KvFrXgyfK
SYgAgVCOnPe+EHiO3uBITN0TkqwQ2/b1UH3tjf7E+uhOcCxgdJj7+zuKYLPjfmps
qBrQnLT1dAdmONaojqU4aMiaXoogCzgZpPhoIFPnl/vu4C3QVCrnb8NXjYPNopcg
FaeBDjl2BKNP3RaDKnHaZT7fgkEqOjQKxmxKeK28bDA20qQl3oaj8m/kv3Qjtms/
6boBIses0kKe1qPRXE5/cENCF0kqlKR8Lsbi135/Ws6LQYLRVJGPPOZmw4foicGL
JXyjFLvIB3hX2AMmv/GGaPGoCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTZPVh3
JFXCkaPOSZY6SSo+MBoWMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE
OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEM3Qi82NzUyMDhBRTFEOTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03
TE41dVNKd0xtcG1pNENfYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZBJ5wexzE51nw85ykXWOUTomuRVL8vUAgW74Ep6wvj9zyE4Hso+kc
8fdPvaL505Dpf7Nw8zJiMDtb49H8t6uwEcp/oUvyuJhwKVR0sYnZVyWZbn/8Iraa
5f2RUxWMRZvdg8GXP/5ds7O5skcodBCoTyRR0DXoPFCKU3YWSBVrmurkK0yZVKp8
/SYMgsBuVrnyuC/UbcamsBdFW3JrtNyiEhyZkqUmPu+CqNLfJxZPLyzhfBXIRS05
OkljAaA9NTaVan1kowo2ddSZG0dNt5tDhbDPt3znmBHUhbawH+y72LKJCgrA26Am
ZfUp7vZyU2bPBroufSL74yhM5l769EFM
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:43 2025 by rpki-client