This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File:                     hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier:          52hudL/e/oOJbFZS08MlMf8JypvtR5k6JIf21pJGY6s=
Subject key identifier:   77:A4:7C:5D:40:34:AE:6B:B5:29:69:50:8A:15:5C:84:B5:F8:8F:3C
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number:          CC
Signing time:             Fri 19 Dec 2025 05:02:50 +0000
Manifest this update:     Fri 19 Dec 2025 05:02:49 +0000
Manifest next update:     Fri 26 Dec 2025 05:02:49 +0000
Files and hashes:         1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: ISBlwlHZzADugohnIuSEUVGx+VA2QedPqNMYqn3OqdM=)
                          2: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=)
                          3: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: sPYK904wHIWBGcH5mDdbXVeuBhglZFt8rbG1ZnupH8c=)
                          4: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: EmgeGd2nbypcvg/UlNX2SuHf8VqNk8LmkdwfgXUQa7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Dec 19 05:02:49 2025 GMT
            Not After : Dec 26 05:02:49 2025 GMT
        Subject: CN=6944dc7a-5fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:06:8b:39:95:25:d9:16:4a:5d:9d:85:80:
                    7b:33:e3:38:b7:33:71:40:0d:ae:73:3a:e0:8e:ce:
                    1f:12:f5:7f:03:33:66:12:8f:f5:46:fb:3d:9c:5a:
                    db:c3:42:43:d0:d7:50:54:5a:67:68:83:54:2f:13:
                    98:cd:f5:cc:61:53:51:ff:ad:76:02:61:a8:95:49:
                    d1:b9:9a:06:85:b1:44:00:cd:27:e7:58:64:e7:1c:
                    bd:bc:e1:65:8d:82:15:6a:cc:cf:1f:ac:6f:df:2c:
                    7a:70:2a:68:7b:25:87:94:ca:e2:95:3b:70:cf:ce:
                    77:3f:0a:5b:d2:cf:26:63:a0:fd:d0:eb:bd:2a:ee:
                    70:e7:99:82:1d:38:16:6e:57:68:ee:b8:6e:65:55:
                    93:44:68:ce:82:1e:f1:fd:96:cb:a5:de:56:1a:db:
                    bd:f2:32:32:39:a7:87:06:08:e9:5c:78:0d:6d:9d:
                    c1:5e:14:bf:14:a7:c5:79:7c:98:8f:cd:4e:8b:fc:
                    f0:06:08:b2:3f:ce:7b:f1:36:7b:e0:e4:52:98:81:
                    d0:e4:8d:e3:ec:70:bf:f7:8a:c4:a1:1a:c6:24:ba:
                    e1:58:69:3b:11:a4:1b:c9:2a:c7:4d:2a:19:f2:87:
                    a0:e2:24:56:e6:69:b6:8c:34:4b:e7:ff:ba:78:86:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A4:7C:5D:40:34:AE:6B:B5:29:69:50:8A:15:5C:84:B5:F8:8F:3C
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:60:08:6b:4e:38:e2:77:01:86:cb:26:c5:f0:bf:59:54:1f:
         cb:5f:77:36:41:ba:88:f2:dd:ef:d6:ab:3f:14:1d:21:b8:1b:
         ca:80:5f:b8:0a:7a:f5:fe:1e:ee:c9:2f:26:3e:c6:fc:5f:13:
         75:30:0a:f8:1b:8d:09:ee:ca:10:01:80:77:cc:57:e9:d7:b5:
         8e:b1:28:43:87:bf:9c:47:12:3e:ce:a1:c2:e6:fe:b6:2c:47:
         65:fa:f5:65:8a:14:e1:bb:2f:97:d9:ff:9d:05:f1:a6:3b:e9:
         51:76:b4:a9:fd:14:b2:14:d8:91:92:87:6a:56:b1:de:90:d9:
         b8:8f:45:36:00:e4:dd:f1:5b:02:5d:e0:58:c2:7f:19:e8:cd:
         47:b5:e2:2f:98:5a:12:02:b8:f8:59:2d:dc:58:fe:b6:52:1f:
         95:fa:ef:66:cd:42:23:48:b3:08:49:ce:40:e8:21:bd:23:bb:
         2b:bd:c7:c1:b4:b8:fa:b8:b1:ec:9e:3e:59:b1:56:4e:75:f2:
         cc:7f:37:20:0c:80:4b:52:f6:87:c3:0f:35:e6:ea:91:e2:27:
         7d:67:ac:d0:79:9f:5f:5e:35:20:fb:fc:fa:80:13:e5:e2:13:
         72:a5:12:e8:7d:1d:d6:41:da:62:cd:3a:e1:12:b8:b0:9f:af:
         95:ed:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:58:57 2025 by rpki-client