This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
File:                     HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json)
Hash identifier:          aWiW1b+9YpE6xd4QROlV5cQdWMXQxQLO6bygNVZQfo0=
Subject key identifier:   13:CF:AF:D1:AA:8A:EB:DC:3C:C6:B8:BB:F1:DF:B6:62:EF:BD:C2:43
Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97
Certificate issuer:       /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
Certificate serial:       071D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
Manifest number:          071C
Signing time:             Thu 04 Dec 2025 20:43:16 +0000
Manifest this update:     Thu 04 Dec 2025 20:43:15 +0000
Manifest next update:     Thu 11 Dec 2025 20:43:15 +0000
Files and hashes:         1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: lN3N7GDEmCSeJsym4hNIBjFFDsp1ulcsPYOP56e7y7c=)
                          2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl
                          rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97
        Validity
            Not Before: Dec  4 20:43:15 2025 GMT
            Not After : Dec 11 20:43:15 2025 GMT
        Subject: CN=6931f264-8f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:3f:db:98:c8:df:3b:91:ad:76:6f:3b:68:
                    2f:90:3c:42:20:f8:b8:fd:80:da:cd:30:ba:29:f4:
                    8b:57:31:5c:a2:88:ea:9a:e4:60:71:67:97:32:ae:
                    d2:48:36:ff:d9:21:a5:32:b9:39:03:ca:0b:e1:db:
                    5e:18:5f:63:24:47:6e:88:f4:d9:88:db:10:4a:4a:
                    1b:84:84:31:0f:8b:67:bd:a0:fe:73:05:56:11:8f:
                    69:8c:29:23:8a:ba:2e:ad:7b:f9:59:b3:73:32:09:
                    1b:e7:fa:4f:fd:84:35:c5:c2:c8:45:25:f3:c6:09:
                    3c:0f:01:58:84:d6:39:a9:85:e7:65:f1:31:59:e7:
                    f7:9c:43:73:8e:f8:4c:81:f9:72:b7:06:e5:7a:33:
                    f5:a9:d0:fc:af:6e:a5:4b:7c:dd:89:63:cb:cd:3f:
                    8a:04:53:a9:03:89:d4:58:d2:cb:27:e8:c0:29:d0:
                    e1:5e:c9:55:f9:18:39:fa:61:26:74:9b:5f:fe:93:
                    69:dc:c2:e9:bc:27:e3:d7:6e:bd:a3:ab:38:83:71:
                    25:10:e4:04:21:03:48:ff:a6:4f:13:e7:87:4a:b3:
                    6a:08:92:a4:8f:09:9c:d4:0b:4f:ef:be:d5:61:25:
                    ae:58:4c:b7:d6:90:6c:6d:b3:50:d3:14:4d:9c:83:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:AF:D1:AA:8A:EB:DC:3C:C6:B8:BB:F1:DF:B6:62:EF:BD:C2:43
            X509v3 Authority Key Identifier:
                keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:20:3f:66:4e:60:57:ad:6e:d0:60:b8:0f:93:27:b0:3d:0a:
         ea:d8:87:17:ca:af:89:84:2b:84:21:ab:ba:8d:7f:08:3f:33:
         ed:33:4d:54:e8:87:7b:fe:e9:fa:68:40:6e:94:08:9b:2a:42:
         e8:78:76:2f:f6:c1:5f:3a:c9:8c:0d:79:4e:3a:c3:55:49:a2:
         c1:b4:4d:1f:3a:80:c8:83:34:1b:cc:ce:7d:3a:65:8e:de:28:
         b1:94:22:85:46:fc:83:23:93:d6:7c:58:b5:af:1b:16:9c:51:
         6f:c7:f2:b3:cf:ce:b5:76:02:50:e0:43:ea:88:f0:d3:00:bc:
         8e:ca:78:e0:3e:f2:9b:e6:d8:61:de:30:dd:4d:2a:3b:9e:e6:
         e4:d5:05:63:be:f8:37:f6:f7:a1:b5:55:e1:4b:28:1d:b0:58:
         7b:f0:f4:df:cc:11:2d:cf:cf:8f:09:fc:fd:0b:6d:e3:25:c6:
         cf:79:39:ed:f6:31:7a:86:1d:5d:89:b0:50:ec:e1:9d:04:ca:
         0d:4f:13:60:c4:26:77:98:3d:ba:b6:e3:b5:84:ea:a3:96:be:
         6e:0c:42:5e:42:7a:9e:8c:88:44:a8:f5:90:df:b4:e1:d0:e7:
         a9:b0:cf:b4:7e:d6:65:9f:07:14:3a:1e:41:a4:4f:2e:85:bc:
         d2:99:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:26:51 2025 by rpki-client