This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          euj07o6bI+uSTw5NiWNUYy0Qsx7HsKnOIgYAxUgQGRc=
Subject key identifier:   46:36:CD:B8:3F:19:35:BC:8B:ED:A3:05:EC:2F:CE:42:7E:36:3F:37
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0F1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0EF8
Signing time:             Wed 24 Dec 2025 17:20:26 +0000
Manifest this update:     Wed 24 Dec 2025 17:20:25 +0000
Manifest next update:     Wed 31 Dec 2025 17:20:25 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: VU+HU5DmKwIqgBJ+PwGeOJuRg5+hO9cmFrjhoZsXZIA=)
                          2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=)
                          3: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=)
                          4: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 31 Dec 2025 17:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3866 (0xf1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Dec 24 17:20:25 2025 GMT
            Not After : Dec 31 17:20:25 2025 GMT
        Subject: CN=694c20da-066b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:ad:c2:39:8b:50:fc:a3:87:6d:de:93:15:
                    87:29:fe:94:b7:ed:2f:40:d1:e4:56:32:e6:65:98:
                    35:da:05:03:f3:12:ee:17:9e:17:0b:aa:e0:63:9e:
                    37:87:48:44:c8:81:89:8d:87:69:3d:be:16:d7:1c:
                    8a:b5:ed:ac:de:94:0a:04:a0:7c:5a:a1:33:85:ad:
                    a2:73:21:9b:2f:7d:60:92:88:1b:07:dc:ce:6a:3c:
                    f7:da:3d:6b:d0:01:79:1e:85:85:8a:47:10:19:94:
                    62:2b:19:ed:3c:eb:74:dc:3f:d7:2c:ca:8c:f1:b9:
                    68:80:29:67:2e:b7:48:37:c2:6b:43:10:90:ce:fd:
                    41:bf:e5:e6:b3:82:6a:74:8c:3b:dd:f4:d7:ee:c1:
                    44:47:b8:71:af:7f:f8:6d:ea:bd:9d:de:af:c9:52:
                    22:af:88:5c:5d:89:77:60:76:33:be:27:46:39:01:
                    8d:74:b6:c2:ed:c9:06:2d:8d:18:51:d4:99:63:78:
                    84:4f:51:1b:dc:81:1a:80:f5:66:29:4a:7b:8b:34:
                    1b:47:37:25:6d:5f:c9:ba:8d:93:53:f7:42:61:1c:
                    aa:66:73:65:44:ad:2e:eb:75:96:e0:27:bc:97:6c:
                    27:aa:22:6c:99:94:b9:7f:c8:23:10:ed:1a:2f:fd:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:CD:B8:3F:19:35:BC:8B:ED:A3:05:EC:2F:CE:42:7E:36:3F:37
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:59:97:95:81:70:be:b8:45:a6:f8:8d:01:30:85:95:6e:
         93:29:39:dc:5f:e2:e5:f7:18:d4:88:01:69:61:17:83:7f:69:
         3e:10:68:09:44:4a:eb:67:27:a8:1d:6c:ce:77:9c:5e:51:43:
         25:1c:fd:3e:59:9b:04:c5:8f:9c:d2:f7:f7:b8:77:ee:de:4e:
         21:71:2b:26:a8:35:b6:3e:15:e7:74:98:2f:dd:98:bd:3c:ac:
         73:df:2a:d3:5b:5f:df:7e:ef:60:e1:b2:a1:90:10:2e:a0:dc:
         31:23:5b:ec:db:e7:ec:b6:38:b8:57:2e:d8:e7:4b:15:bf:21:
         55:4e:f5:0f:3d:29:0e:c8:92:e6:54:83:37:6a:b6:74:81:ed:
         28:b4:88:10:8a:a1:31:ad:24:f0:08:f2:9c:c8:7b:00:5d:3a:
         6b:65:2d:94:c4:20:e9:40:85:18:0b:e2:c6:c8:4c:2b:99:36:
         55:49:1f:80:c4:e5:55:21:d5:bf:97:30:4a:7c:e8:1c:93:48:
         b9:c0:fe:67:ff:07:b7:53:14:dd:06:c3:dd:30:5c:ae:93:7c:
         21:a8:27:6e:7e:af:a4:6f:8e:6a:1e:e9:5f:7b:4b:55:a1:28:
         e0:cc:41:2c:99:0a:37:65:1c:20:f6:d3:d6:47:6d:ec:11:51:
         e8:e9:b1:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1
NjBBRTcwODQwHhcNMjUxMjI0MTcyMDI1WhcNMjUxMjMxMTcyMDI1WjAYMRYwFAYD
VQQDDA02OTRjMjBkYS0wNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWGtwjmLUPyjh23ekxWHKf6Ut+0vQNHkVjLmZZg12gUD8xLuF54XC6rgY543
h0hEyIGJjYdpPb4W1xyKte2s3pQKBKB8WqEzha2icyGbL31gkogbB9zOajz32j1r
0AF5HoWFikcQGZRiKxntPOt03D/XLMqM8blogClnLrdIN8JrQxCQzv1Bv+Xms4Jq
dIw73fTX7sFER7hxr3/4beq9nd6vyVIir4hcXYl3YHYzvidGOQGNdLbC7ckGLY0Y
UdSZY3iET1Eb3IEagPVmKUp7izQbRzclbV/Juo2TU/dCYRyqZnNlRK0u63WW4Ce8
l2wnqiJsmZS5f8gjEO0aL/1EMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY2zbg/
GTW8i+2jBewvzkJ+Nj83MB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3
MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS
aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCp8FmXlYFwvrhFpviNATCFlW6TKTncX+Ll9xjUiAFpYReDf2k+EGgJ
RErrZyeoHWzOd5xeUUMlHP0+WZsExY+c0vf3uHfu3k4hcSsmqDW2PhXndJgv3Zi9
PKxz3yrTW1/ffu9g4bKhkBAuoNwxI1vs2+fstji4Vy7Y50sVvyFVTvUPPSkOyJLm
VIM3arZ0ge0otIgQiqExrSTwCPKcyHsAXTprZS2UxCDpQIUYC+LGyEwrmTZVSR+A
xOVVIdW/lzBKfOgck0i5wP5n/we3UxTdBsPdMFyuk3whqCdufq+kb45qHulfe0tV
oSjgzEEsmQo3ZRwg9tPWR23sEVHo6bF2
-----END CERTIFICATE-----
Generated at Fri Dec 26 10:59:56 2025 by rpki-client