This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File:                     hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier:          /TTB8ufQnVSVajvXCa7OiECLf1oJJiLYGzLQVuB/qTA=
Subject key identifier:   A3:46:52:B3:98:50:A3:85:16:7A:C7:3A:23:A7:2B:7E:AA:C5:1C:B2
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer:       /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number:          53
Signing time:             Fri 19 Dec 2025 06:11:43 +0000
Manifest this update:     Fri 19 Dec 2025 06:11:43 +0000
Manifest next update:     Fri 26 Dec 2025 06:11:43 +0000
Files and hashes:         1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: ntntCcnfYFLGn8j3dKssbAcIeJH7CEnqg8Q7zN965rg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
        Validity
            Not Before: Dec 19 06:11:43 2025 GMT
            Not After : Dec 26 06:11:43 2025 GMT
        Subject: CN=6944ec9f-3bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:56:62:f8:8c:31:02:e3:74:f0:b3:6b:73:
                    09:ab:dd:df:65:a2:6f:c9:fb:ce:3c:11:b0:e1:8c:
                    ea:00:21:3a:e4:25:d4:17:d8:92:ee:2f:1c:6f:14:
                    9b:31:40:d3:33:f8:a3:93:2d:2e:de:8e:87:4d:6e:
                    2e:2c:90:54:18:0d:a5:c4:d1:c6:81:a8:72:19:c9:
                    56:3b:b7:07:ec:5a:cb:4a:bb:98:7c:ce:63:6a:68:
                    78:fd:9f:d3:6b:57:20:bc:80:95:47:ec:31:b6:5e:
                    fc:29:8d:06:8d:f2:41:fe:66:37:ec:34:a6:00:1d:
                    05:04:a4:78:dd:f3:a6:fd:6e:3e:c9:29:d6:28:79:
                    26:37:c3:cf:ef:ed:73:bd:c4:1d:c4:6e:7d:d6:4c:
                    2c:4d:b8:d4:c7:c2:21:00:06:d0:cb:1f:2a:d5:2a:
                    17:e4:cc:17:61:a5:af:c4:0e:12:e0:ea:be:b3:e8:
                    42:56:91:64:fc:50:ec:7a:39:ad:ca:6e:a8:e6:68:
                    9b:36:ff:df:7c:9d:4e:9a:09:12:8c:08:50:c1:59:
                    6c:61:60:2d:ec:1e:79:1f:70:d3:f7:6e:63:61:63:
                    1a:bf:20:a3:63:92:95:8e:9a:f2:b9:36:ef:8a:76:
                    b5:d4:1d:b4:62:2f:0b:27:97:da:58:84:06:d2:9a:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:52:B3:98:50:A3:85:16:7A:C7:3A:23:A7:2B:7E:AA:C5:1C:B2
            X509v3 Authority Key Identifier:
                keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:37:82:95:96:3a:86:be:61:d1:b9:bc:80:65:e9:d4:50:
         2f:4a:7e:61:5d:6c:0d:11:fe:13:f9:de:bf:7e:ab:3d:ec:cb:
         d8:75:c1:02:2e:d8:a0:8d:23:62:c1:10:53:f7:a6:24:17:76:
         b9:a5:d5:6d:a7:d7:51:1b:6b:39:7d:80:cd:70:29:aa:c2:14:
         8b:af:f2:42:25:37:0f:39:4d:2c:48:5e:97:32:74:c7:61:73:
         57:29:9c:aa:9b:ef:87:5d:9e:fc:e8:ff:cb:8e:31:ee:08:b5:
         98:46:90:1c:fa:fe:bb:61:e5:0f:00:51:12:2a:c4:62:93:2c:
         ea:db:b7:be:42:bb:3d:6b:66:8d:36:d3:79:bb:4c:8b:53:e3:
         e9:68:a7:b7:b5:4e:8f:92:58:e3:77:bd:a5:83:26:a6:0a:fd:
         7e:44:0c:ba:54:a6:c0:6d:1b:37:82:a2:31:4c:80:da:a0:64:
         e6:dc:7d:fe:51:5d:77:e2:b4:b4:fd:7c:a8:cd:86:61:71:74:
         a6:eb:09:37:e8:c1:af:3f:a3:0c:c8:ca:43:35:12:80:41:1a:
         0b:2b:69:2f:f1:1f:0c:48:a3:0f:56:8e:69:2b:a2:2c:a6:07:
         76:f7:81:63:53:1e:0d:bb:41:d8:8c:1d:a1:a4:48:b5:dc:66:
         74:d0:32:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjYzMjExMC8GA1UEBRMoODQzMThFODFCMkU1OUY2MTE0QjEwMkZBNDUwODMzN0RF
OTE1QzM5MzAeFw0yNTEyMTkwNjExNDNaFw0yNTEyMjYwNjExNDNaMBgxFjAUBgNV
BAMMDTY5NDRlYzlmLTNiYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMV1Zi+IwxAuN08LNrcwmr3d9lom/J+848EbDhjOoAITrkJdQX2JLuLxxvFJsx
QNMz+KOTLS7ejodNbi4skFQYDaXE0caBqHIZyVY7twfsWstKu5h8zmNqaHj9n9Nr
VyC8gJVH7DG2XvwpjQaN8kH+ZjfsNKYAHQUEpHjd86b9bj7JKdYoeSY3w8/v7XO9
xB3Ebn3WTCxNuNTHwiEABtDLHyrVKhfkzBdhpa/EDhLg6r6z6EJWkWT8UOx6Oa3K
bqjmaJs2/998nU6aCRKMCFDBWWxhYC3sHnkfcNP3bmNhYxq/IKNjkpWOmvK5Nu+K
drXUHbRiLwsnl9pYhAbSmkaxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo0ZSs5hQ
o4UWesc6I6crfqrFHLIwHwYDVR0jBBgwFoAUhDGOgbLln2EUsQL6RQgzfekVw5Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NjMyL0FCNUE4NzA2NUUw
RDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJFVXNRTDZSUWd6ZmVrVnc1
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaERHT2diTGxuMkVVc1FMNlJRZ3pmZWtWdzVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
NjMyL0FCNUE4NzA2NUUwRDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJF
VXNRTDZSUWd6ZmVrVnc1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI+AN4KVljqGvmHRubyAZenUUC9KfmFdbA0R/hP53r9+qz3sy9h1wQIu
2KCNI2LBEFP3piQXdrml1W2n11Ebazl9gM1wKarCFIuv8kIlNw85TSxIXpcydMdh
c1cpnKqb74ddnvzo/8uOMe4ItZhGkBz6/rth5Q8AURIqxGKTLOrbt75Cuz1rZo02
03m7TItT4+lop7e1To+SWON3vaWDJqYK/X5EDLpUpsBtGzeCojFMgNqgZObcff5R
XXfitLT9fKjNhmFxdKbrCTfowa8/owzIykM1EoBBGgsraS/xHwxIow9Wjmkroiym
B3b3gWNTHg27QdiMHaGkSLXcZnTQMtM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:21 2025 by rpki-client