This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File:                     h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier:          t1L4dYcjo1y9WlEwFlCgggzXkDZlREmoBAqmaGGQXU4=
Subject key identifier:   08:31:DD:ED:D1:6E:39:5F:F7:82:C8:9F:55:ED:16:7C:B4:06:70:B6
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer:       /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number:          78
Signing time:             Sun 07 Dec 2025 04:54:24 +0000
Manifest this update:     Sun 07 Dec 2025 04:54:23 +0000
Manifest next update:     Sun 14 Dec 2025 04:54:23 +0000
Files and hashes:         1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: qB9qxFom8rFVwJLiF9yQ6MMOjvWE+Dx9Wgyy8MRlzKo=)
                          2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: sfbcZk8SAWuxMbwQPAGFt07XT5Nj4mSWLUAB6k9yQMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
                          rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 04:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
        Validity
            Not Before: Dec  7 04:54:23 2025 GMT
            Not After : Dec 14 04:54:23 2025 GMT
        Subject: CN=69350880-15c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:26:18:2f:b2:51:4e:43:d1:2b:ff:b6:77:
                    f3:d5:77:07:99:09:f7:cb:c6:ce:51:47:eb:21:13:
                    50:1d:c1:36:a1:a1:ea:ff:2e:6e:05:37:cd:17:51:
                    3a:00:91:fb:6f:d2:ff:57:1b:3c:6b:38:00:f9:6b:
                    f6:dc:df:38:cf:50:85:ec:fd:3e:57:dd:c2:83:4a:
                    9c:7a:bd:01:ff:c8:65:fc:65:17:b2:31:14:76:cf:
                    5d:b0:4c:9d:93:0c:d6:6b:e2:cb:36:86:6b:d4:5a:
                    44:e3:df:0a:44:ab:1c:07:15:6b:9d:d2:97:e5:0b:
                    f9:ea:51:3b:70:93:c9:3e:0c:e7:41:d9:55:e6:21:
                    26:21:95:bf:27:2a:f7:29:04:9b:ed:f1:2f:9d:8d:
                    23:34:7f:22:36:c4:1a:19:96:fd:b0:c8:84:56:b0:
                    d0:db:aa:ca:28:55:d5:c6:ab:ea:1a:85:1f:4b:fb:
                    c5:bb:11:04:75:44:b8:bb:b1:df:6f:49:8c:24:17:
                    67:de:67:e1:53:57:95:03:26:cf:72:1e:3f:15:8d:
                    3b:50:c4:74:e9:0e:32:e5:ec:56:6a:68:d1:26:49:
                    55:7c:9b:f5:bb:54:46:3d:58:26:66:18:e0:db:3f:
                    59:91:7f:5c:6a:d7:77:55:ce:2c:7e:3d:2e:74:cb:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:31:DD:ED:D1:6E:39:5F:F7:82:C8:9F:55:ED:16:7C:B4:06:70:B6
            X509v3 Authority Key Identifier:
                keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:f2:9d:38:e2:b7:0f:0f:f7:f7:61:eb:68:61:8c:bf:be:
         70:0b:40:ab:73:dd:90:79:b1:6a:ff:06:77:f0:b1:0e:b3:a5:
         71:2b:07:bb:82:5e:96:77:6a:2a:5b:bd:85:d9:75:60:3d:65:
         7f:a0:e4:d6:e4:c8:22:a1:a1:f3:48:c7:ff:c7:22:ed:3d:a3:
         74:00:1f:12:39:35:48:a2:aa:99:5d:53:6f:ef:98:b6:fd:15:
         b2:fb:ef:36:71:7e:7f:49:30:43:10:42:55:8f:53:a4:cf:ed:
         c2:2f:17:6c:79:67:5f:e4:80:4b:2d:89:c5:f6:2d:c8:ea:34:
         f8:3e:51:47:c5:c5:34:b4:fc:35:b1:86:b1:65:2d:4b:25:ac:
         9e:74:21:ef:7e:c8:b2:d4:6a:ac:5d:e4:1b:5d:55:4a:b1:cd:
         ca:d2:ac:b3:75:ca:4f:d2:41:54:3c:91:14:26:b4:6d:bb:bd:
         57:84:b0:17:2d:c6:0e:96:b7:67:d8:ec:cd:6d:27:ac:f1:a2:
         b8:fc:e7:4e:5e:96:a8:dd:b9:3f:95:1d:11:4d:7c:9a:b7:9d:
         ef:0c:72:cd:4f:72:f0:df:11:ec:e7:47:19:c5:7c:05:eb:e6:
         f2:81:82:97:eb:a4:04:bf:89:a3:23:20:59:ea:6a:af:20:34:
         bd:37:67:4d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NTg1MjExMC8GA1UEBRMoODc1QjYxNzQwQ0QzNzBCRDRCNEE0RjZBRUEwQTg2MDgz
ODhEQkE4QTAeFw0yNTEyMDcwNDU0MjNaFw0yNTEyMTQwNDU0MjNaMBgxFjAUBgNV
BAMTDTY5MzUwODgwLTE1YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoSyYYL7JRTkPRK/+2d/PVdweZCffLxs5RR+shE1AdwTahoer/Lm4FN80XUToA
kftv0v9XGzxrOAD5a/bc3zjPUIXs/T5X3cKDSpx6vQH/yGX8ZReyMRR2z12wTJ2T
DNZr4ss2hmvUWkTj3wpEqxwHFWud0pflC/nqUTtwk8k+DOdB2VXmISYhlb8nKvcp
BJvt8S+djSM0fyI2xBoZlv2wyIRWsNDbqsooVdXGq+oahR9L+8W7EQR1RLi7sd9v
SYwkF2feZ+FTV5UDJs9yHj8VjTtQxHTpDjLl7FZqaNEmSVV8m/W7VEY9WCZmGODb
P1mRf1xq13dVzix+PS50y4J5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCDHd7dFu
OV/3gsifVe0WfLQGcLYwHwYDVR0jBBgwFoAUh1thdAzTcL1LSk9q6gqGCDiNuoow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1ODUyL0U5NTRGRDc4MUJB
MjExRjA4QjI5RTkyQ0M0RjlBRTAyL2gxdGhkQXpUY0wxTFNrOXE2Z3FHQ0RpTnVv
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaDF0aGRBelRjTDFMU2s5cTZncUdDRGlOdW9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1
ODUyL0U5NTRGRDc4MUJBMjExRjA4QjI5RTkyQ0M0RjlBRTAyL2gxdGhkQXpUY0wx
TFNrOXE2Z3FHQ0RpTnVvby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMh48p044rcPD/f3YetoYYy/vnALQKtz3ZB5sWr/BnfwsQ6zpXErB7uC
XpZ3aipbvYXZdWA9ZX+g5NbkyCKhofNIx//HIu09o3QAHxI5NUiiqpldU2/vmLb9
FbL77zZxfn9JMEMQQlWPU6TP7cIvF2x5Z1/kgEsticX2LcjqNPg+UUfFxTS0/DWx
hrFlLUslrJ50Ie9+yLLUaqxd5BtdVUqxzcrSrLN1yk/SQVQ8kRQmtG27vVeEsBct
xg6Wt2fY7M1tJ6zxorj8505elqjduT+VHRFNfJq3ne8Mcs1PcvDfEeznRxnFfAXr
5vKBgpfrpAS/iaMjIFnqaq8gNL03Z00=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:43:09 2025 by rpki-client