This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          y1h/ndHbmmGk3fsvBsoTiVJHzs8+UGfItp0RxX9X4g0=
Subject key identifier:   FA:44:B3:2C:06:7F:F2:70:59:F3:C4:0C:3D:B5:87:FC:0C:F7:44:A4
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       116D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          19B6
Signing time:             Sat 06 Dec 2025 16:44:47 +0000
Manifest this update:     Sat 06 Dec 2025 16:44:46 +0000
Manifest next update:     Sat 13 Dec 2025 16:44:46 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: hzL4LleGngd/Vazrb/2Pwt8YDcyIZNscHbXGUcz+jbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4461 (0x116d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
        Validity
            Not Before: Dec  6 16:44:46 2025 GMT
            Not After : Dec 13 16:44:46 2025 GMT
        Subject: CN=69345d7f-5dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5b:c2:b1:bb:62:82:99:41:84:84:37:ca:41:
                    63:f4:9b:4a:55:6f:b4:ba:52:c1:c4:b1:97:9b:2f:
                    a0:bd:67:24:d2:a4:ea:1a:72:db:1c:10:87:f6:1a:
                    88:c7:29:d9:75:68:f7:6c:54:a8:07:6a:b8:de:7c:
                    90:50:b7:1f:2b:52:fc:ed:18:ee:87:35:ff:43:67:
                    b4:eb:a7:b4:ad:e9:38:a4:80:6f:22:89:c5:b2:5b:
                    bb:0f:31:cc:a0:52:8d:da:25:15:b6:14:99:a2:cf:
                    c4:75:fc:1f:b4:22:25:be:7a:24:2c:6c:40:8a:7f:
                    eb:f8:31:f0:85:66:04:a4:76:f3:b7:6e:09:3f:b0:
                    3d:bc:7a:23:02:58:7b:88:86:f5:8f:d2:5b:10:74:
                    79:a0:b1:48:08:7d:42:13:18:00:02:4e:ae:c9:8c:
                    6b:74:6e:a0:49:5f:aa:37:53:89:56:09:a0:42:b1:
                    1a:6f:59:a2:61:f4:84:ef:19:13:c7:7b:fd:f7:2a:
                    8e:3a:d9:84:c0:8b:20:d4:8b:bc:c7:c0:93:af:6e:
                    32:41:f3:65:3a:aa:6c:57:13:40:98:87:9b:71:83:
                    0f:79:a4:3e:f5:f2:67:84:59:d1:96:aa:49:f7:75:
                    61:1c:34:a0:4e:f0:e9:df:20:66:14:e9:a3:ca:0a:
                    97:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:B3:2C:06:7F:F2:70:59:F3:C4:0C:3D:B5:87:FC:0C:F7:44:A4
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:77:00:08:73:cc:1e:3b:27:9e:f2:0f:50:fd:6e:6b:90:
         41:2b:2f:80:6c:7f:ca:c7:91:ce:9e:43:83:d4:d5:d9:01:ba:
         cb:43:c6:e7:55:ce:65:c7:4b:0a:1b:1a:a8:36:94:bf:fc:45:
         5c:34:65:2e:a4:ae:c7:b0:86:83:cb:34:fa:6f:f4:93:a1:63:
         16:e5:00:18:04:3a:bf:bc:71:26:77:76:60:f1:92:55:5f:10:
         e4:27:53:e7:d5:56:3f:41:81:d5:5e:f4:d4:e0:a2:08:4c:b0:
         01:bd:8a:da:e1:ad:35:d5:3f:2f:72:83:33:95:67:c7:77:8e:
         12:4e:67:60:8c:08:eb:34:a9:5d:b5:bd:e1:dd:20:bd:52:cf:
         2c:54:de:a2:d4:cb:f2:94:10:2d:86:03:e6:fc:04:48:67:f0:
         57:fc:ac:4f:bc:af:8a:b1:35:ba:6e:2d:78:3c:b7:74:1e:b1:
         96:9a:28:f7:47:bd:85:50:10:71:b0:9a:07:8f:ef:43:d5:22:
         23:31:6b:a5:62:92:9d:91:02:ed:93:b5:23:62:98:73:aa:4a:
         98:9a:ef:e5:7e:39:af:b9:0d:6f:c7:ad:7a:e4:71:6f:51:86:
         92:f6:82:b1:d4:1c:51:14:b7:97:81:69:bc:fa:41:08:61:a9:
         d8:dd:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:13 2025 by rpki-client