This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
File:                     -1Hou5mkLX1_xMVwQZv3TIbTr9w.mft (raw, json)
Hash identifier:          5NWr3WM39fXbANIq6hVNd2QS/gI7AVW2cGAL+NzTXos=
Subject key identifier:   F0:05:58:05:5B:D9:B7:6F:4C:F4:B1:39:7F:90:03:C1:39:1F:81:22
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       0687
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
Manifest number:          067F
Signing time:             Thu 18 Dec 2025 21:54:33 +0000
Manifest this update:     Thu 18 Dec 2025 21:54:32 +0000
Manifest next update:     Thu 25 Dec 2025 21:54:32 +0000
Files and hashes:         1: -1Hou5mkLX1_xMVwQZv3TIbTr9w.crl (hash: e/trjhJxMxcn+udKAGZV6vXdVm/jQlJcR6e23jVwIdQ=)
                          2: A2835E90A0B211EBA87FF23EC4F9AE02.roa (hash: aPUJnag1shqRG8J7/SwQ5Siu54HJfQtvC5SHdSgBnZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: Dec 18 21:54:32 2025 GMT
            Not After : Dec 25 21:54:32 2025 GMT
        Subject: CN=69447818-17d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b7:74:03:43:ac:68:13:3e:48:cb:99:77:7b:
                    3f:70:09:23:0e:21:b3:3f:65:62:2e:ca:58:fc:8a:
                    d2:db:23:ea:f5:a9:01:c1:64:e0:cb:01:22:b4:e9:
                    6f:0b:88:ea:a3:0d:38:e6:53:34:95:1c:76:62:b2:
                    2b:3a:51:ae:33:fe:22:75:74:5e:2a:47:6e:32:bb:
                    5a:28:27:3f:3e:9b:d5:00:54:7a:96:66:22:03:5c:
                    52:d0:5b:aa:4e:d8:a8:9e:e3:2a:69:74:cf:18:c6:
                    77:70:6f:70:cd:3c:16:ca:68:6f:ef:ed:47:8a:0a:
                    23:31:10:00:f9:14:d6:07:ea:7a:84:42:1c:e6:04:
                    84:c7:7e:44:62:55:14:74:82:d5:73:c3:7f:44:3d:
                    2a:8b:8b:98:86:b1:d1:49:5d:99:71:0b:c7:da:1b:
                    eb:e9:67:e6:55:8b:08:c5:d6:af:84:a5:36:67:41:
                    c1:f1:3e:f0:c1:46:09:3c:a9:4c:81:f9:a3:3f:45:
                    bf:d3:c0:d8:b7:15:6c:ac:fd:e2:c8:3a:8f:80:5b:
                    23:ab:3b:9c:37:9a:6d:66:0e:2e:c3:96:7e:71:3b:
                    24:32:57:e6:36:f6:92:f4:64:3d:98:53:31:de:b6:
                    88:e5:70:c1:6d:87:a9:ad:e8:bc:62:b4:fd:a7:65:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:05:58:05:5B:D9:B7:6F:4C:F4:B1:39:7F:90:03:C1:39:1F:81:22
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d6:8d:7d:01:f7:e3:03:0d:f3:87:85:26:fc:a6:7a:41:06:
         49:53:1d:41:01:9c:b2:5f:40:3f:05:bb:27:e0:c9:2e:f2:be:
         be:b9:96:32:d1:25:d4:51:25:7d:8a:72:e0:fd:29:17:3a:f6:
         9d:6c:58:b5:fe:39:be:08:48:6a:ad:9f:dd:cb:2c:0c:d5:35:
         bd:ee:0a:9d:d6:c4:72:76:0e:b3:52:95:89:6b:44:83:cc:9f:
         c6:fc:d5:83:0f:66:a5:5d:41:29:04:13:4b:45:7d:94:cd:f6:
         c3:62:11:57:74:f1:5f:0f:25:40:cc:1a:4d:1c:4a:e8:74:10:
         a7:3a:14:6e:d0:7e:1f:1b:5c:30:1d:83:b1:ae:a1:3f:29:9e:
         a0:de:6d:04:72:97:61:33:4f:92:95:73:76:07:26:4f:0e:13:
         da:94:f3:92:80:0b:d0:28:ff:5f:21:5b:d4:e0:0a:29:f6:25:
         f0:a3:54:10:d8:3b:7c:af:16:8c:d4:b0:23:fd:21:4c:fa:5d:
         00:87:47:2a:f2:29:06:8b:37:3c:46:1e:ba:80:7d:46:0a:cf:
         c5:b5:e1:96:41:45:2e:e4:27:77:26:98:36:a1:fd:47:bd:bf:
         71:27:99:d4:21:11:11:3c:f2:73:dc:d0:13:9c:29:de:60:d6:
         a8:79:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:55:43 2025 by rpki-client