This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          ugFNHbqBFNWva7pa52oXF/hrzh2AMxkv5fWsbo7sxB4=
Subject key identifier:   08:5B:50:54:84:3C:76:95:88:5F:46:0D:57:BE:FC:D6:87:3A:72:08
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       09D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          09B8
Signing time:             Sat 20 Dec 2025 19:27:16 +0000
Manifest this update:     Sat 20 Dec 2025 19:27:16 +0000
Manifest next update:     Sat 27 Dec 2025 19:27:16 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: QHG92ILtWR7OITvnjJgUEa2nHzRZWG65ofD1vtw6hIE=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: W0ibhleTeTRf9SQxlBk7HfDKAYLQO1EEAaw2Uj8cqZ4=)
                          3: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: VxFJ2WxHqvcaRXlyN+j6s6uxQHhjavcFYpy6cqbLq00=)
                          4: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: QSi8XLx3OVsMnyA15sUJv5CABNiE2WZTW3Q/q6D7Y/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 19:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Dec 20 19:27:16 2025 GMT
            Not After : Dec 27 19:27:16 2025 GMT
        Subject: CN=6946f894-f8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:15:c4:5b:ea:09:9f:26:5f:68:8e:7f:ae:da:
                    9a:83:97:e2:1b:50:6f:fb:8a:b0:63:14:c1:b5:a7:
                    e8:88:86:21:72:e8:ee:0f:a6:a2:27:55:4c:a8:c5:
                    13:98:64:6f:6d:76:d3:3a:46:ab:44:38:b7:7d:7f:
                    a5:35:98:ea:ae:bd:93:62:f5:18:f1:a7:01:01:3d:
                    01:83:b1:65:ff:0e:5e:88:85:0f:45:3b:c4:81:87:
                    d0:79:3f:50:3f:49:0d:be:6b:86:c2:35:e4:1f:56:
                    9c:fe:3a:bf:98:43:7b:37:15:33:5b:9c:b6:d0:44:
                    f6:f2:98:6c:0a:43:13:da:7e:14:68:43:81:de:ed:
                    d3:1d:97:d7:3b:01:69:7e:94:69:1e:4e:6a:c2:ed:
                    32:63:5a:42:1e:35:7f:bc:1f:8b:b5:b8:a4:ff:e4:
                    5c:0e:60:95:ee:ed:79:e7:26:4f:8e:b9:e8:99:8b:
                    71:22:4d:e5:b5:0d:01:53:1e:a4:3e:34:6c:19:c8:
                    01:fb:77:1f:2e:dc:a3:a6:86:23:62:79:2a:77:8c:
                    4c:88:93:23:a5:54:c7:d7:31:e7:7f:3c:5d:01:10:
                    d6:d1:42:d9:76:a6:b5:45:58:1b:34:01:5b:e9:7a:
                    c6:f5:49:32:a5:c7:2c:2e:4b:c8:cb:c5:8d:81:c7:
                    28:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5B:50:54:84:3C:76:95:88:5F:46:0D:57:BE:FC:D6:87:3A:72:08
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:d0:73:9f:21:e7:cc:d8:2b:a0:0f:e3:f6:01:04:ae:4c:
         42:0e:03:90:61:0b:6f:36:bb:55:02:24:db:b2:85:7f:62:3f:
         9d:3a:03:ee:fd:45:36:51:4e:4f:80:c6:a0:d2:cd:fb:ae:60:
         e4:56:fa:fd:cf:ae:b5:e4:23:bf:9f:07:0e:a3:56:a7:ea:15:
         e1:3f:4c:8d:6c:7c:19:39:72:0e:03:9a:cf:bc:9a:dc:d2:61:
         24:d6:e3:1b:b0:9d:4b:5f:cd:df:a7:ef:46:cd:3c:75:9c:92:
         1a:cd:9e:79:4a:09:f3:1e:48:37:03:05:25:a1:30:fe:ab:2f:
         8f:20:76:43:80:d6:d4:f0:b9:9d:59:54:e0:dd:73:f1:56:22:
         c8:e9:fb:2d:68:2d:fe:30:64:e4:ad:aa:41:ee:ad:8e:02:b3:
         49:eb:31:44:d3:59:4f:70:15:d7:2e:0d:fb:28:13:38:fa:76:
         33:34:1c:a2:31:cd:76:29:55:7a:79:c0:af:7a:60:5e:ca:a2:
         68:3e:88:df:e7:21:66:8b:41:14:4a:d1:c7:fa:d8:42:63:ec:
         2b:6b:35:99:0a:c9:d0:7d:3d:f1:8e:50:96:f4:d7:8d:5a:c1:
         48:0e:3b:78:42:2a:67:07:a9:7f:df:48:d2:4c:f9:0a:2b:e2:
         7c:2c:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:14:11 2025 by rpki-client