This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
File:                     H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft (raw, json)
Hash identifier:          kKhVsjp1ujbx0CwO9mByIsRm5hOnsdGZrDEo9uiJLps=
Subject key identifier:   22:EA:A9:4F:97:E7:AC:B8:BE:5C:18:87:74:F0:0B:22:E6:BF:D6:11
Authority key identifier: 1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37
Certificate issuer:       /CN=A917B4DF/serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
Manifest number:          065E
Signing time:             Sat 20 Dec 2025 21:55:38 +0000
Manifest this update:     Sat 20 Dec 2025 21:55:37 +0000
Manifest next update:     Sat 27 Dec 2025 21:55:37 +0000
Files and hashes:         1: H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl (hash: HV1a/k5EMVATQF675zVbIiK4+68Mw55VHkTiKCttxHg=)
                          2: F8CE85E2B30211EBA63AE482C4F9AE02.roa (hash: JNO//UyjyCwtO6c12uk/NjDfBJbKa4UXXgFo1EP+Qts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl
                          rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4DF, serialNumber=1FD8EC7C6547AEC52AD7E0E0BC32CF7CAA221E37
        Validity
            Not Before: Dec 20 21:55:37 2025 GMT
            Not After : Dec 27 21:55:37 2025 GMT
        Subject: CN=69471b5a-3bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:93:93:63:d3:4c:21:39:5b:da:5c:61:01:
                    6f:b1:e6:8a:98:dc:4f:bd:cc:81:b0:03:8d:28:51:
                    d6:61:62:49:de:71:b2:6d:d9:bc:bc:6f:ec:40:08:
                    04:d6:b3:8f:4c:44:f0:32:66:31:7d:6e:4b:16:40:
                    3a:0f:37:b1:18:f1:f9:6c:cb:00:af:03:94:b9:27:
                    32:e9:4f:89:c6:3d:9a:91:f9:2d:0e:80:dc:1a:16:
                    0c:0f:ab:b3:b3:7a:3b:06:23:11:4e:79:d2:91:f1:
                    49:e3:96:7d:12:fa:7b:eb:bd:fb:e2:41:06:dd:2b:
                    46:5b:59:0c:dc:ea:f8:ad:8d:85:04:a8:a5:da:e7:
                    27:a5:dd:98:4d:d1:24:31:3c:b9:09:f5:6c:75:6f:
                    a2:db:1d:27:36:7d:4c:00:91:83:27:0e:13:f6:3b:
                    5d:7d:75:f7:dc:7f:ff:aa:4e:8d:d7:4b:cc:36:09:
                    ab:f3:67:38:81:17:14:91:0f:3a:df:f3:03:95:48:
                    4b:88:00:04:15:5d:f4:82:10:15:2b:27:dc:20:e3:
                    d1:f7:91:db:fe:98:48:68:02:0f:f1:66:e3:9b:00:
                    eb:01:e4:85:37:3a:a9:af:1c:77:c1:21:6b:3f:3e:
                    ae:5b:df:8e:43:dd:b5:44:5e:3b:6e:c8:93:89:fd:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EA:A9:4F:97:E7:AC:B8:BE:5C:18:87:74:F0:0B:22:E6:BF:D6:11
            X509v3 Authority Key Identifier:
                keyid:1F:D8:EC:7C:65:47:AE:C5:2A:D7:E0:E0:BC:32:CF:7C:AA:22:1E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9jsfGVHrsUq1-DgvDLPfKoiHjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4DF/5CF1F7A2AD5E11EBADD90579C4F9AE02/H9jsfGVHrsUq1-DgvDLPfKoiHjc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:26:f3:75:a3:8d:7d:ec:45:48:e2:cb:47:82:63:df:f0:
         2d:8a:a2:52:60:63:f6:f0:31:b0:fa:8f:19:21:2b:fe:fd:83:
         f0:26:7b:ab:fe:87:ab:39:34:b2:e6:24:c6:59:20:10:9b:f2:
         d2:d8:f2:b6:ce:f0:27:63:30:68:5d:6a:2a:09:02:6a:ee:a0:
         e9:99:5e:22:08:e0:67:a5:8b:ec:b7:ca:f7:48:8a:fa:a0:9e:
         30:b5:7d:ca:41:b2:2e:ef:2d:79:e0:ff:5f:26:91:11:44:a6:
         04:13:d0:f7:71:fa:35:3f:40:97:32:f1:4a:d7:b0:5e:f4:4a:
         6c:72:b4:e1:a3:59:7c:e5:50:6c:d6:92:a7:f0:c6:26:19:d7:
         2b:10:04:70:6d:66:c7:90:57:7f:e4:8a:a5:77:3d:60:0a:ef:
         5c:df:e3:88:c5:b8:9d:fd:9a:fe:cd:97:f0:85:8b:64:77:27:
         d3:b2:6a:ed:58:71:d5:b3:94:73:a7:f8:72:75:d2:fd:2b:d8:
         74:a7:77:53:18:98:97:36:24:86:41:27:fe:73:aa:e6:58:68:
         c6:29:12:d4:bf:ee:e5:43:2e:e4:62:ea:3b:e5:71:9f:62:4e:
         a2:37:85:88:39:c6:d0:b8:04:1e:1f:8e:ab:8d:98:4e:95:5a:
         9d:75:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:03:04 2025 by rpki-client