This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          Us1s/VcUAUw1Nt7rNvzlWnkj8aAmtiCCrFNlRQA9mU0=
Subject key identifier:   FB:6C:28:D8:13:7A:1E:4B:CC:F2:D7:9A:2A:3E:90:9F:89:74:57:F7
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       0413
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          040F
Signing time:             Thu 18 Dec 2025 23:42:52 +0000
Manifest this update:     Thu 18 Dec 2025 23:42:51 +0000
Manifest next update:     Thu 25 Dec 2025 23:42:51 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: hpcP9p16/bcvE2tWzGTDg4bjnTYtrpgJBm0eKLvcI84=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: H2GtJ0iPg0F8hSUg65wTV+ujzqji+9qmbwmD4ETHfZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 23:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Dec 18 23:42:51 2025 GMT
            Not After : Dec 25 23:42:51 2025 GMT
        Subject: CN=6944917c-b524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:51:f8:33:fe:8c:f8:6d:fc:0b:4f:dc:61:3b:
                    80:06:6f:68:3a:82:27:5d:61:9c:42:ed:69:46:6b:
                    2b:91:5f:54:fc:d8:57:e3:9b:b1:45:df:b9:24:3a:
                    52:d6:9d:43:d4:a3:03:64:f7:90:23:54:85:53:33:
                    3f:1b:ea:8b:62:40:9b:75:e0:2d:7d:ff:55:c6:3e:
                    5f:ef:13:82:cf:64:17:73:19:49:17:bb:72:97:03:
                    93:a2:a9:aa:fa:02:91:fa:bb:65:8b:9d:81:99:3c:
                    5c:a3:98:84:60:da:f1:20:1b:9f:3b:84:d7:90:05:
                    f1:5c:73:71:fe:f0:07:4d:1f:1b:5c:70:aa:cc:88:
                    90:b8:b1:11:f0:4a:c5:76:32:04:d3:a5:fb:a5:e4:
                    0d:38:46:be:4b:6e:0c:e0:ba:bf:94:75:57:88:a7:
                    e2:40:16:27:63:24:4f:d1:4f:1d:e3:7d:00:f1:e3:
                    35:6c:62:13:9b:5c:2f:f9:e3:6a:8a:b2:12:2b:1f:
                    a5:ad:3b:88:32:03:6a:47:8c:d3:68:87:d9:20:35:
                    d2:6a:ae:75:73:b4:fa:f1:05:c2:de:45:c5:49:41:
                    65:fd:92:3f:e3:90:73:68:cb:46:29:c7:3c:7d:00:
                    cd:cc:3d:d2:52:3f:0e:11:bc:79:16:01:5d:15:2a:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:28:D8:13:7A:1E:4B:CC:F2:D7:9A:2A:3E:90:9F:89:74:57:F7
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:f0:29:2d:97:2e:ed:cd:a8:4c:04:78:e7:13:69:a6:a9:
         78:29:dd:1a:67:1f:73:ba:4d:2d:31:e4:56:2d:b5:7f:0f:7a:
         5e:a9:88:2a:d6:bf:40:90:c0:e3:24:a0:0a:11:ee:6f:a0:8a:
         04:37:c3:37:52:e8:98:2c:d6:88:d0:2a:79:99:b6:fd:32:b4:
         b3:6e:9e:aa:43:84:c3:0d:c2:ac:80:91:95:a7:f8:17:40:e0:
         b6:4f:61:99:d5:61:f1:4b:51:a3:04:90:c6:78:d3:bb:bf:fb:
         49:05:be:45:1b:c7:6e:56:fd:79:23:a5:2d:48:fa:3f:5a:e5:
         bc:d6:a2:a5:56:ec:1f:fa:ef:75:15:cf:c7:4e:84:85:3f:6d:
         3d:26:53:1b:06:cc:13:bc:13:3e:c8:02:c7:c1:aa:07:9d:b0:
         54:6a:97:d4:d9:a3:2b:34:87:28:dc:67:22:50:3f:48:04:a2:
         86:f0:3a:19:91:be:fb:89:2d:3b:61:a1:fb:ba:df:51:2d:fe:
         81:83:e9:5c:a1:82:c5:15:67:63:0a:d7:63:aa:f5:09:19:5d:
         1e:c2:3f:8e:57:10:91:2f:59:7a:d8:04:de:d8:b6:d5:f2:4d:
         88:cf:80:12:fe:71:0e:ad:0b:a9:ba:45:2e:dc:85:fb:91:ba:
         e0:47:64:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlEMUYxMTAvBgNVBAUTKDFDMEVCREMyODFEMDJGOURBMjRFQzExNzRCQTlDRjE4
NDU5QjkzRTAwHhcNMjUxMjE4MjM0MjUxWhcNMjUxMjI1MjM0MjUxWjAYMRYwFAYD
VQQDDA02OTQ0OTE3Yy1iNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6lH4M/6M+G38C0/cYTuABm9oOoInXWGcQu1pRmsrkV9U/NhX45uxRd+5JDpS
1p1D1KMDZPeQI1SFUzM/G+qLYkCbdeAtff9Vxj5f7xOCz2QXcxlJF7tylwOToqmq
+gKR+rtli52BmTxco5iEYNrxIBufO4TXkAXxXHNx/vAHTR8bXHCqzIiQuLER8ErF
djIE06X7peQNOEa+S24M4Lq/lHVXiKfiQBYnYyRP0U8d430A8eM1bGITm1wv+eNq
irISKx+lrTuIMgNqR4zTaIfZIDXSaq51c7T68QXC3kXFSUFl/ZI/45BzaMtGKcc8
fQDNzD3SUj8OEbx5FgFdFSrDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtsKNgT
eh5LzPLXmio+kJ+JdFf3MB8GA1UdIwQYMBaAFBwOvcKB0C+dok7BF0upzxhFm5Pg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUQxRi9EOTgyQ0I1RTk1
RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1MmlUc0VYUzZuUEdFV2Jr
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBNjl3b0hRTDUyaVRzRVhTNm5QR0VXYmstQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUQxRi9EOTgyQ0I1RTk1RDcxMUVDOTUzRjk1NERDNEY5QUUwMi9IQTY5d29IUUw1
MmlUc0VYUzZuUEdFV2JrLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAltvApLZcu7c2oTAR45xNppql4Kd0aZx9zuk0tMeRWLbV/D3peqYgq
1r9AkMDjJKAKEe5voIoEN8M3UuiYLNaI0Cp5mbb9MrSzbp6qQ4TDDcKsgJGVp/gX
QOC2T2GZ1WHxS1GjBJDGeNO7v/tJBb5FG8duVv15I6UtSPo/WuW81qKlVuwf+u91
Fc/HToSFP209JlMbBswTvBM+yALHwaoHnbBUapfU2aMrNIco3GciUD9IBKKG8DoZ
kb77iS07YaH7ut9RLf6Bg+lcoYLFFWdjCtdjqvUJGV0ewj+OVxCRL1l62ATe2LbV
8k2Iz4AS/nEOrQupukUu3IX7kbrgR2Tj
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:08 2025 by rpki-client