This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
File:                     hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft (raw, json)
Hash identifier:          sF66YfOImRlpWjvv6iRXsohWExTxCo9eQ4ICRROMY0E=
Subject key identifier:   3C:1F:BF:60:D8:42:13:A7:2F:86:C2:2F:16:B1:78:B5:15:FD:08:CF
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
Manifest number:          03C4
Signing time:             Thu 18 Dec 2025 23:55:44 +0000
Manifest this update:     Thu 18 Dec 2025 23:55:44 +0000
Manifest next update:     Thu 25 Dec 2025 23:55:44 +0000
Files and hashes:         1: hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl (hash: v3Cjso1/h6P6fEjbkZEA1rvhZpncIC8OL/1oGkzlr6c=)
                          2: 6E6B914234E311EDB9020B6DC4F9AE02.roa (hash: 88ko9UJFFNtj+HS4XzX5w+1kD78T/NOvmunkaebMytY=)
                          3: C80B0244CB2F11EEB240B62AC4F9AE02.roa (hash: 1pOI0527imuvZcTDV+q5rDya5atw0bipn9DUjAh03Hc=)
                          4: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (hash: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: Dec 18 23:55:44 2025 GMT
            Not After : Dec 25 23:55:44 2025 GMT
        Subject: CN=69449480-ffd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:88:bd:7f:88:d0:d9:9f:be:96:40:6a:da:
                    ee:d1:48:f7:9d:fc:8a:4d:2b:fd:25:45:e4:bf:ec:
                    f9:89:7a:00:49:6a:ff:72:53:b2:d4:00:3a:06:66:
                    89:ed:29:61:29:b7:e2:cf:d7:a9:f5:54:ea:c0:d4:
                    97:cd:ec:17:f0:56:65:39:dd:87:a6:6c:e7:f0:a7:
                    f3:ac:e8:7f:95:4e:3b:72:21:df:d6:67:db:13:b1:
                    52:00:2e:65:5a:3a:af:00:27:3f:5a:a8:7c:9c:24:
                    5b:f9:fa:e8:5f:12:03:e0:e3:d6:71:b9:11:05:62:
                    ad:22:e1:90:9a:e8:c8:b8:f0:c4:ca:7f:32:ea:f6:
                    4a:72:d7:ac:1a:55:b8:77:c5:32:2b:57:73:f3:1f:
                    f9:a7:46:f9:92:aa:7b:cf:0d:94:4d:28:20:e7:20:
                    8e:31:dc:f2:73:ff:fe:c6:c1:56:82:49:bb:d5:9a:
                    ae:17:4b:db:e4:82:1a:85:94:84:3a:f5:94:eb:50:
                    c6:67:39:cd:8c:3f:3e:1d:c9:63:9c:2c:a8:b9:4d:
                    37:8a:1a:49:6f:44:cf:76:18:71:f8:04:55:d9:a2:
                    f8:64:ee:19:48:d1:97:8e:b9:ee:9e:55:e0:be:81:
                    81:33:bd:cb:ad:28:0d:58:33:d1:1d:65:ed:d4:da:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:BF:60:D8:42:13:A7:2F:86:C2:2F:16:B1:78:B5:15:FD:08:CF
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:35:52:e7:be:87:c4:0d:2b:25:f4:f8:d4:b9:52:71:75:
         90:bf:72:5a:23:e7:f1:f7:01:e7:06:19:c1:46:99:7c:45:9a:
         1b:b6:04:de:c4:2f:d7:8a:82:9e:12:26:9b:01:b1:03:af:54:
         e7:aa:b0:52:85:af:72:9e:95:ee:64:ef:58:6b:27:4c:3a:12:
         9f:b2:14:18:39:1a:13:fa:44:4f:7d:cb:3b:0c:1b:fa:4d:d2:
         ec:42:e4:52:53:a0:6d:ac:7c:70:75:4f:6e:04:23:db:65:c2:
         3e:42:a2:79:b1:08:56:b9:7b:cc:47:56:19:f7:25:d6:25:d1:
         32:32:31:6c:cd:ce:ab:35:b3:fd:36:d0:14:a6:6f:34:60:81:
         68:cc:95:68:c6:d0:c2:4f:76:fa:4c:7f:59:76:6d:a1:32:68:
         0c:07:69:ca:cc:69:21:d1:c6:ae:f5:33:1e:57:ca:1e:a8:b7:
         21:35:97:63:ca:11:c4:8c:c6:49:1a:f2:60:00:c3:32:f5:19:
         38:4d:95:e6:70:a8:bf:36:c1:2e:45:e5:ed:67:21:0a:e5:14:
         0d:d1:de:8e:7f:81:da:7a:05:e2:27:9e:ae:ae:18:f3:cd:5c:
         a9:db:e5:12:2a:4b:65:8b:4a:d5:0d:7c:60:8d:5a:10:48:93:
         00:dd:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:34:26 2025 by rpki-client