This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier:          iASU7J2XAmRGJ0Ars3jISTXHTnYfKx8oYd7pJ0/6lxs=
Subject key identifier:   B1:48:9B:C5:F5:A9:31:7B:4C:5B:D7:80:2A:EB:57:3C:AB:9D:EC:CB
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer:       /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial:       1841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number:          1829
Signing time:             Thu 04 Dec 2025 16:13:51 +0000
Manifest this update:     Thu 04 Dec 2025 16:13:51 +0000
Manifest next update:     Thu 11 Dec 2025 16:13:51 +0000
Files and hashes:         1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: XfbtWmj4Coz9k4yyMWd++Vt/F3XBXi+Y9PTNXLxS7hk=)
                          2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: EjdNTbAyftBJxtIBKhAk8tku0Xw6VBdJSMgPHoN2SG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
                          rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6209 (0x1841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Validity
            Not Before: Dec  4 16:13:51 2025 GMT
            Not After : Dec 11 16:13:51 2025 GMT
        Subject: CN=6931b33f-6e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:0d:39:8e:e8:8a:aa:93:73:38:32:60:0a:
                    cb:f4:58:d1:fd:0b:db:92:3e:d3:fc:b2:b5:f1:51:
                    35:ca:a8:51:2c:4a:7d:e2:98:8a:69:5a:62:d0:52:
                    98:00:a4:4e:35:ba:db:91:e6:cb:8a:3f:1c:b8:63:
                    f1:7d:b0:29:cb:1e:30:97:70:a0:6d:b1:3b:0e:e2:
                    a0:9a:ff:ae:00:0a:9b:50:3a:d3:fc:51:09:87:3e:
                    86:7f:f4:3a:3f:fb:f8:5f:db:30:b3:0e:a2:0b:79:
                    37:b9:ba:6b:9e:18:01:05:79:e6:74:27:92:48:ea:
                    63:14:86:b9:06:e6:4b:98:20:a9:55:87:d5:d6:5d:
                    9e:d2:4c:f7:5e:16:7b:01:05:5f:e9:b2:20:76:64:
                    27:90:ad:e9:7c:e8:63:ed:7d:cf:d0:1f:f2:68:5e:
                    e1:56:e1:3e:44:d9:83:b3:35:4f:ff:75:0b:a3:f7:
                    2f:a0:34:a7:47:45:be:d6:29:11:ed:1e:c6:23:44:
                    4e:81:9e:a3:41:2f:e5:0c:35:b5:a1:de:22:d4:41:
                    8c:3b:b4:06:8c:55:3c:40:b9:0b:9d:4b:ea:5f:64:
                    a5:67:a9:12:2b:35:53:7e:ba:df:10:aa:19:b6:52:
                    34:f8:d8:2b:5b:37:73:83:d0:65:08:3a:75:74:88:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:9B:C5:F5:A9:31:7B:4C:5B:D7:80:2A:EB:57:3C:AB:9D:EC:CB
            X509v3 Authority Key Identifier:
                keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e1:a3:40:c7:09:0b:ef:f3:c3:41:8d:3d:da:93:50:01:d1:
         27:f8:20:6e:34:0a:ce:eb:3c:75:95:4c:d2:85:09:7e:ce:19:
         28:33:78:50:11:25:79:6d:a5:4e:9b:6a:67:fb:f0:5b:38:83:
         fc:ad:bf:d9:15:e3:df:82:0e:45:5f:bf:47:35:5b:73:76:1f:
         2a:3d:45:d7:ac:0c:99:5d:4e:5e:7b:64:35:50:9f:cd:f5:ac:
         1c:a9:0e:88:b5:6f:9b:92:3c:8e:7a:7c:1f:ae:0d:83:21:3d:
         d3:68:84:56:62:35:53:c9:47:43:f6:29:a1:bb:9e:ea:09:99:
         e8:2e:be:1c:30:60:4f:7f:79:f4:74:b3:a7:29:e5:f0:7a:a8:
         d6:7e:2f:2b:62:1e:e4:38:f9:61:4e:02:d4:33:61:71:ed:c4:
         62:fd:a9:60:6a:ef:cb:8a:77:b6:42:89:87:b3:47:18:8b:34:
         a2:c0:3c:ab:f0:89:5c:9a:a0:5f:59:6b:c6:56:a8:80:4e:33:
         24:78:d2:e5:aa:e9:8f:ee:e8:70:64:9b:46:29:93:bc:d9:0c:
         89:27:44:74:b7:cf:8f:ab:4d:2c:28:53:b5:3d:8b:be:4d:82:
         ca:7f:a9:75:dc:8f:ee:17:f5:a1:83:ff:80:b8:22:8d:fa:94:
         34:c9:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:12:20 2025 by rpki-client