This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
File:                     H50_mRdMazcKDlEAAMo997Z0DHs.mft (raw, json)
Hash identifier:          ZsujrPTQkNvcQYPp7cpxS1wTYPrxaUoCSXh26bZg7zM=
Subject key identifier:   1F:5B:74:C1:1F:91:95:DC:F4:2C:BC:BF:68:8B:4B:2D:D5:3B:2B:B9
Authority key identifier: 1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B
Certificate issuer:       /CN=A9154388/serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
Manifest number:          DB
Signing time:             Fri 19 Dec 2025 04:41:20 +0000
Manifest this update:     Fri 19 Dec 2025 04:41:20 +0000
Manifest next update:     Fri 26 Dec 2025 04:41:20 +0000
Files and hashes:         1: H50_mRdMazcKDlEAAMo997Z0DHs.crl (hash: iKeF8r6S5NCGSfaXz1d7E3bDDOiKoC8dXAFaXsPtEfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=1F9D3F99174C6B370A0E510000CA3DF7B6740C7B
        Validity
            Not Before: Dec 19 04:41:20 2025 GMT
            Not After : Dec 26 04:41:20 2025 GMT
        Subject: CN=6944d770-ba52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:75:95:2f:6f:74:20:be:2b:28:65:a8:ee:
                    d2:36:f6:5a:19:ed:39:27:8f:56:e3:f6:77:0b:3b:
                    20:db:a5:c3:bc:b3:01:7a:b0:19:e9:a8:be:83:4b:
                    2d:38:89:89:41:b7:4a:de:ca:1d:25:96:71:bb:f5:
                    52:b0:76:8b:6b:f7:a9:74:bc:de:58:fc:c4:5a:c1:
                    ec:55:98:3e:6c:49:35:36:55:5b:38:59:31:c7:55:
                    e9:f4:cb:24:51:aa:73:c4:f4:bf:0a:bf:8d:68:71:
                    8b:f9:e7:90:07:68:67:c7:f1:90:0f:ec:aa:43:00:
                    6b:4e:ba:27:3f:df:f7:e6:94:ea:44:af:28:c4:e7:
                    47:52:e8:a5:97:23:ab:b5:19:b8:17:11:a1:bb:e9:
                    f5:dc:23:3f:46:cc:79:df:70:e5:39:44:85:73:4d:
                    7d:55:c3:57:74:ba:a3:1a:9b:a8:27:73:13:2e:2d:
                    2b:2c:c9:85:43:cf:b7:24:b0:40:be:15:36:d3:9e:
                    68:88:e3:fe:e5:54:15:5d:5d:be:5e:c6:90:dd:67:
                    10:ad:49:c0:c8:f4:83:76:d8:3b:42:ae:23:4e:81:
                    09:51:d0:df:0d:31:46:ef:5b:d7:1a:b3:8f:ad:53:
                    f4:40:96:2d:21:73:20:85:a0:7d:f3:cd:3d:9e:12:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:74:C1:1F:91:95:DC:F4:2C:BC:BF:68:8B:4B:2D:D5:3B:2B:B9
            X509v3 Authority Key Identifier:
                keyid:1F:9D:3F:99:17:4C:6B:37:0A:0E:51:00:00:CA:3D:F7:B6:74:0C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H50_mRdMazcKDlEAAMo997Z0DHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/4139F8968C3711EF80901C2EC4F9AE02/H50_mRdMazcKDlEAAMo997Z0DHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:87:d9:a9:c5:39:48:f5:68:f6:e0:19:b9:dc:14:a7:f7:94:
         74:57:66:54:dc:12:2e:53:9e:97:b2:85:6a:9b:99:af:4e:d2:
         dd:03:1e:4f:af:90:bf:6a:a7:23:63:f6:0d:ee:d4:ef:9f:4c:
         6e:e7:90:c3:c6:9d:f8:4d:d4:0e:a5:ce:df:1e:50:27:9d:95:
         9f:80:3d:0e:da:c3:04:81:5b:a7:8f:58:6c:51:13:38:e8:44:
         fb:58:04:b0:4a:cc:bb:a1:ec:f7:12:f6:75:14:cd:ba:94:9f:
         d4:1a:0d:a1:00:98:0a:2e:fb:58:d1:9d:93:e8:da:92:86:03:
         90:1a:3b:ac:fa:ac:ba:33:0b:ea:37:62:b0:9a:19:3f:17:a0:
         d0:26:d2:77:ce:4e:2c:9d:44:58:aa:92:0c:57:2a:19:c2:18:
         4f:ec:d2:4d:ba:b7:cd:16:b1:01:e2:ff:b8:96:df:a0:61:a4:
         ad:9b:6d:1e:2c:b7:c8:b4:6b:7b:6d:b0:e3:7a:c9:8c:2c:70:
         1b:ac:3b:d1:e8:4b:7c:ad:c2:69:49:77:a4:90:a9:06:63:48:
         5f:80:61:41:e7:2e:65:28:58:20:12:d4:06:9a:68:b7:91:5e:
         ee:22:ab:41:3d:32:4a:ea:6e:11:47:e6:5d:76:65:d4:75:e7:
         8c:30:19:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:04 2025 by rpki-client