This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier:          6+obKFvWWeIErHAGLsgpJ7FYGffpmDDHbeszuxcLn6g=
Subject key identifier:   9C:1B:73:D4:18:F7:75:95:0D:93:8E:B9:34:BA:87:7A:1D:44:27:DB
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number:          042E
Signing time:             Fri 26 Dec 2025 23:23:22 +0000
Manifest this update:     Fri 26 Dec 2025 23:23:21 +0000
Manifest next update:     Fri 02 Jan 2026 23:23:21 +0000
Files and hashes:         1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: 9UBKYRKN0Gb7hgoWZd6mAMyU8E6fDh4bif9hhJig2RY=)
                          2: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: XE/ZbmFKgtcJ8d/T46yRFJ9hkQIFqFEENN93aFpVlI8=)
                          3: F4639D76356211F09A66C487C4F9AE02.roa (hash: PHU5aUvAOrBIKy7huYHffiKA6xh2xWAfjAUu0W1+Jtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 23:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Dec 26 23:23:21 2025 GMT
            Not After : Jan  2 23:23:21 2026 GMT
        Subject: CN=694f18ea-ce4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:dd:5e:58:d4:38:c0:12:85:ef:58:32:23:
                    e5:31:17:d3:9a:a3:d8:b8:89:44:22:f5:f6:64:1a:
                    b4:d6:3b:5d:c3:86:a7:9d:cf:c2:3e:ca:bc:aa:4c:
                    98:1c:08:7b:99:f0:c6:ba:a6:e6:3d:e2:cd:32:5d:
                    94:40:1f:06:3f:06:61:7a:10:be:05:9a:ee:c3:5b:
                    e3:18:62:70:10:d1:6a:0a:81:59:f5:22:dc:f3:db:
                    a0:ed:1d:44:09:48:96:ee:bf:40:b0:bb:d8:56:72:
                    97:e5:4a:b3:63:86:3b:e4:f7:0f:07:52:40:47:1e:
                    6c:cb:25:41:5c:d8:e5:d3:38:0f:3a:9d:2d:ae:4b:
                    80:9d:ef:83:48:8c:16:c5:2f:1d:47:fd:d8:7a:2f:
                    ed:75:4c:ea:7e:ae:48:ad:aa:e4:12:46:73:91:b5:
                    09:6c:29:aa:46:08:9f:5e:9b:ba:7e:30:47:71:a8:
                    de:81:c6:35:72:bb:bf:a4:7a:3e:d4:d2:39:f7:42:
                    7a:33:81:a7:76:e2:7e:d7:6b:34:d6:b9:24:6f:0d:
                    d6:30:c2:1a:95:d0:0b:c0:3e:e9:b7:99:f2:2c:82:
                    c9:9a:69:b9:ec:ac:2b:92:52:09:5c:d7:5a:e2:c9:
                    19:f7:f0:86:3a:d2:d5:90:05:2e:1a:11:6d:95:60:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1B:73:D4:18:F7:75:95:0D:93:8E:B9:34:BA:87:7A:1D:44:27:DB
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:d1:23:d6:e0:fc:af:71:bb:dc:87:52:59:d0:2c:08:3a:
         f9:27:9d:08:f2:89:7e:f3:58:28:7d:47:12:05:b2:8f:c1:d1:
         90:98:04:04:01:7c:51:6d:0b:2c:9b:9f:0d:23:df:0a:01:d8:
         59:1e:d7:cd:bd:ce:a8:b7:32:43:1c:9d:26:b8:84:bb:ef:b1:
         1c:56:63:c3:48:18:27:12:4a:63:8d:cf:d7:a3:1a:54:ed:ff:
         12:38:6f:3d:6c:43:f8:30:67:36:02:99:74:f5:54:1c:13:a1:
         1c:d1:57:c3:b2:6c:e4:21:e9:38:fb:a2:b2:33:58:f1:fc:b2:
         65:da:06:5c:b8:7b:a8:4d:45:28:b8:b5:df:b9:24:77:7a:fa:
         18:95:6c:65:53:3d:cb:b8:9b:c9:4d:ce:94:87:3a:84:c7:7b:
         72:fe:e8:c0:cd:a4:ce:ac:51:58:65:a4:20:f1:ba:ef:ac:0c:
         c5:f4:9d:ba:b0:89:01:de:6a:12:71:11:a3:ed:4d:c4:8a:ac:
         3c:12:7a:6e:37:c0:b0:0a:4f:54:4f:11:e2:48:9c:df:2c:77:
         60:cf:fa:80:39:4c:46:98:62:92:32:00:70:99:5b:13:27:66:
         b2:4c:16:76:a2:2b:aa:67:1b:a5:ab:4e:01:fd:10:2b:9d:b8:
         55:7c:27:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD
QUY0NkQ3RDkwHhcNMjUxMjI2MjMyMzIxWhcNMjYwMTAyMjMyMzIxWjAYMRYwFAYD
VQQDDA02OTRmMThlYS1jZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkzdXljUOMAShe9YMiPlMRfTmqPYuIlEIvX2ZBq01jtdw4annc/CPsq8qkyY
HAh7mfDGuqbmPeLNMl2UQB8GPwZhehC+BZruw1vjGGJwENFqCoFZ9SLc89ug7R1E
CUiW7r9AsLvYVnKX5UqzY4Y75PcPB1JARx5syyVBXNjl0zgPOp0trkuAne+DSIwW
xS8dR/3Yei/tdUzqfq5IrarkEkZzkbUJbCmqRgifXpu6fjBHcajegcY1cru/pHo+
1NI590J6M4GnduJ+12s01rkkbw3WMMIaldALwD7pt5nyLILJmmm57KwrklIJXNda
4skZ9/CGOtLVkAUuGhFtlWDsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwbc9QY
93WVDZOOuTS6h3odRCfbMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD
OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTY0NS9FMEQ5RjM2NDhDOTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdI
Z0tCd1Y4c3l0eTdLOUcxOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0mdEj1uD8r3G73IdSWdAsCDr5J50I8ol+81gofUcSBbKPwdGQmAQE
AXxRbQssm58NI98KAdhZHtfNvc6otzJDHJ0muIS777EcVmPDSBgnEkpjjc/XoxpU
7f8SOG89bEP4MGc2Apl09VQcE6Ec0VfDsmzkIek4+6KyM1jx/LJl2gZcuHuoTUUo
uLXfuSR3evoYlWxlUz3LuJvJTc6UhzqEx3ty/ujAzaTOrFFYZaQg8brvrAzF9J26
sIkB3moScRGj7U3Eiqw8EnpuN8CwCk9UTxHiSJzfLHdgz/qAOUxGmGKSMgBwmVsT
J2ayTBZ2oiuqZxulq04B/RArnbhVfCeG
-----END CERTIFICATE-----
Generated at Sun Dec 28 06:22:36 2025 by rpki-client