This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
File:                     H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json)
Hash identifier:          Uytx8kazy20Wo01dEm829gXqoHNYx5iRtVGpjMvZ9KM=
Subject key identifier:   D5:DC:33:D7:DE:F0:DB:40:CE:3A:61:6B:E7:77:B8:3F:CC:28:02:59
Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4
Certificate issuer:       /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
Certificate serial:       0461
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
Manifest number:          045B
Signing time:             Sat 06 Dec 2025 22:51:34 +0000
Manifest this update:     Sat 06 Dec 2025 22:51:33 +0000
Manifest next update:     Sat 13 Dec 2025 22:51:33 +0000
Files and hashes:         1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: Qy3+fwEEK4U9WzwabG3ZJu7h4eRI7aHbGIIn01di65g=)
                          2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl
                          rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:51:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4
        Validity
            Not Before: Dec  6 22:51:33 2025 GMT
            Not After : Dec 13 22:51:33 2025 GMT
        Subject: CN=6934b376-a5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:6b:81:6e:9a:be:e4:f6:c8:21:53:47:9e:
                    9c:11:00:32:b5:90:eb:af:5a:db:01:21:98:d5:46:
                    df:61:c6:ee:93:a1:99:66:f1:20:95:49:c4:76:99:
                    d4:40:b2:b4:53:9a:46:83:53:a5:17:07:5b:84:18:
                    0b:62:07:0e:46:8a:6c:b0:ce:f0:d9:61:0c:fa:32:
                    bf:ff:bc:ef:4f:b5:31:41:3d:d5:8e:bf:20:0d:0c:
                    fe:16:59:f5:8c:cc:50:ed:bc:e5:a6:0c:cd:e3:43:
                    10:4e:e3:e7:bc:9c:a7:1c:f5:aa:38:fc:89:6c:f7:
                    0f:cc:0c:88:18:10:13:73:e7:ab:0b:c0:0a:ce:8b:
                    32:f8:3d:ad:6b:a9:71:e0:7f:bf:c5:4d:6f:33:51:
                    ff:36:df:f5:be:ee:df:04:12:76:9b:6f:91:88:52:
                    c4:69:71:64:46:ca:6d:85:b0:ee:16:7e:55:f1:a2:
                    72:e4:a5:6c:c6:9f:ff:47:f1:3d:e2:20:71:56:bc:
                    d5:e8:51:86:db:76:3c:69:ea:e1:f8:15:ad:c8:06:
                    e2:e5:e0:ed:6c:7a:3b:d5:34:ad:6d:fc:ab:c5:13:
                    e9:ef:e1:04:92:29:51:cb:7e:50:fc:ba:3c:0f:7a:
                    6d:17:40:10:85:b8:4a:b7:b7:35:6a:57:81:14:ba:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:33:D7:DE:F0:DB:40:CE:3A:61:6B:E7:77:B8:3F:CC:28:02:59
            X509v3 Authority Key Identifier:
                keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:dc:de:dc:e9:ad:3a:a8:fe:ae:55:fd:c0:41:bf:26:7c:
         70:65:1f:5f:cc:5d:c1:7a:4c:a7:8d:ec:f2:88:82:5b:6d:a5:
         44:ec:7b:ad:9c:bd:2b:12:c1:06:c9:1e:21:e8:b3:4c:48:ee:
         ef:27:fe:a0:d1:83:56:49:71:d1:b4:e1:78:86:e4:06:61:d1:
         b8:d8:10:cb:91:18:09:d6:a6:a7:75:b6:03:bb:ad:01:2d:96:
         3c:61:71:33:98:96:b9:5c:07:76:43:55:78:27:bc:54:58:86:
         44:cd:1f:7c:7b:63:b8:76:b2:1e:59:9f:a6:f2:dd:06:41:ce:
         6a:15:f9:b0:1e:48:f1:97:41:07:90:64:5d:ba:0c:a8:cd:ea:
         d1:2e:5c:c9:93:14:21:45:43:1e:0c:8e:0a:ed:2d:f5:68:71:
         a7:09:0f:f3:47:a5:4f:13:9e:6c:66:44:fd:9e:4d:42:a2:b1:
         3a:75:99:9e:d5:b5:9f:e8:fc:51:65:62:7d:23:16:bb:74:a2:
         70:1d:22:a4:cd:13:58:1f:71:cb:ac:e9:67:79:7f:4b:30:31:
         66:9a:e4:21:af:1d:6f:74:8e:2e:74:13:70:03:d4:ab:8d:5c:
         df:f7:ad:9c:aa:c1:6b:1d:62:5e:ab:46:b9:a2:4a:22:c7:7c:
         09:c9:ec:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2
QTM0NkY2QTQwHhcNMjUxMjA2MjI1MTMzWhcNMjUxMjEzMjI1MTMzWjAYMRYwFAYD
VQQDEw02OTM0YjM3Ni1hNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx91rgW6avuT2yCFTR56cEQAytZDrr1rbASGY1UbfYcbuk6GZZvEglUnEdpnU
QLK0U5pGg1OlFwdbhBgLYgcORopssM7w2WEM+jK//7zvT7UxQT3Vjr8gDQz+Fln1
jMxQ7bzlpgzN40MQTuPnvJynHPWqOPyJbPcPzAyIGBATc+erC8AKzosy+D2ta6lx
4H+/xU1vM1H/Nt/1vu7fBBJ2m2+RiFLEaXFkRspthbDuFn5V8aJy5KVsxp//R/E9
4iBxVrzV6FGG23Y8aerh+BWtyAbi5eDtbHo71TStbfyrxRPp7+EEkilRy35Q/Lo8
D3ptF0AQhbhKt7c1aleBFLqBCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXcM9fe
8NtAzjpha+d3uD/MKAJZMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3
NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct
NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPa9ze3OmtOqj+rlX9wEG/JnxwZR9fzF3BekynjezyiIJbbaVE7Hut
nL0rEsEGyR4h6LNMSO7vJ/6g0YNWSXHRtOF4huQGYdG42BDLkRgJ1qandbYDu60B
LZY8YXEzmJa5XAd2Q1V4J7xUWIZEzR98e2O4drIeWZ+m8t0GQc5qFfmwHkjxl0EH
kGRdugyozerRLlzJkxQhRUMeDI4K7S31aHGnCQ/zR6VPE55sZkT9nk1CorE6dZme
1bWf6PxRZWJ9Ixa7dKJwHSKkzRNYH3HLrOlneX9LMDFmmuQhrx1vdI4udBNwA9Sr
jVzf962cqsFrHWJeq0a5okoix3wJyexW
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:38:18 2025 by rpki-client