This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
File:                     Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json)
Hash identifier:          7SZnIShvl5bMpAlnencbAkvjFlEkLZueZN1YCbYnM8k=
Subject key identifier:   57:B5:AD:83:ED:A3:5E:60:50:6A:A3:0D:59:52:4A:42:B5:BE:A2:20
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Certificate issuer:       /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
Manifest number:          016A
Signing time:             Fri 05 Dec 2025 02:13:54 +0000
Manifest this update:     Fri 05 Dec 2025 02:13:54 +0000
Manifest next update:     Fri 12 Dec 2025 02:13:54 +0000
Files and hashes:         1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: AjdZM7c+mhJKBWGBizt8Sp2n6xtSVm/+PcdlXoVQ/QU=)
                          2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=)
                          3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
                          rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
        Validity
            Not Before: Dec  5 02:13:54 2025 GMT
            Not After : Dec 12 02:13:54 2025 GMT
        Subject: CN=69323fe2-185f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:0c:59:8f:76:74:d3:9c:91:b3:80:3f:75:
                    38:22:2a:26:8c:cc:0c:76:db:81:d8:eb:f8:e9:d1:
                    13:2c:e1:e6:de:00:09:ee:7d:36:80:75:3c:07:a1:
                    35:7a:6f:d5:e4:58:f8:bb:e2:d9:d8:2f:16:ff:98:
                    a8:0f:1c:54:0b:2c:55:f3:69:5b:ca:36:56:9e:cf:
                    79:66:f6:dc:7a:59:86:99:9b:46:54:44:38:0d:f0:
                    18:e5:74:a0:2b:db:fb:5f:d8:c7:61:75:89:39:34:
                    f0:05:f2:3d:3a:48:64:a4:e3:db:38:34:a4:4a:70:
                    9c:5b:c9:d0:04:89:8d:07:51:83:7d:1f:7c:82:66:
                    70:db:ac:a0:91:13:70:a1:e4:3c:74:67:bf:56:2c:
                    5b:b8:50:d6:10:33:f3:96:4c:8a:b5:41:c8:b3:b9:
                    0f:2c:b7:15:8e:16:e3:a4:25:3c:54:f0:38:39:ca:
                    74:dc:e9:c2:39:38:83:e2:df:6c:64:50:59:52:50:
                    1e:75:16:01:45:41:a0:78:b4:08:b5:db:06:4b:db:
                    4a:7e:1c:f1:d0:9f:8a:d0:ec:ce:90:9b:f2:81:0a:
                    fe:5f:38:53:cc:de:c4:63:0f:fb:42:a2:6c:07:f8:
                    62:3b:97:33:a1:c9:57:3a:31:b2:1e:cd:20:00:b4:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:AD:83:ED:A3:5E:60:50:6A:A3:0D:59:52:4A:42:B5:BE:A2:20
            X509v3 Authority Key Identifier:
                keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:b1:9c:19:82:61:10:8d:83:3a:77:5d:3c:d8:1c:d2:47:
         5a:99:49:c9:3e:5a:37:64:b7:2f:f4:2f:8f:14:45:e7:4a:f2:
         3d:e0:c2:a0:7e:25:ec:d7:2a:d0:b8:c8:8d:58:9a:24:ce:a5:
         0e:d3:68:ed:0c:0a:6d:fa:0a:c4:a2:33:92:3a:ec:ff:62:3b:
         1e:92:2d:11:22:d4:3a:8e:08:8c:e0:83:ca:99:4f:2b:b3:2e:
         9e:aa:a5:ee:dc:1b:84:e1:2f:f5:7e:95:13:26:c5:eb:12:48:
         48:af:92:fb:40:f7:3a:ef:cd:8d:c2:8f:88:a7:57:eb:54:c6:
         d4:8c:4e:c7:a1:12:79:c1:12:86:87:01:67:f8:bf:e1:43:32:
         50:3b:2c:31:02:c4:b2:dc:59:86:05:70:60:23:41:cb:e3:fb:
         dc:05:d4:11:ab:b0:61:85:d3:e1:9f:5e:f7:b3:f0:95:76:8f:
         19:6d:6d:11:9a:e5:3b:75:3c:26:1b:29:a5:48:e5:16:58:a4:
         35:3f:ff:58:b4:55:63:39:1f:46:29:c8:1e:64:61:5a:48:c4:
         91:5c:01:56:c1:99:ba:02:92:04:d6:c7:a6:64:00:d4:cc:c1:
         79:72:ef:f5:86:ce:b9:e5:f0:08:2d:08:00:d3:44:ca:fb:26:
         07:7c:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:19 2025 by rpki-client