This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
File:                     HVb-TaQriGb-lqKX93LugLUYpAo.mft (raw, json)
Hash identifier:          1M0cQVNCQ9ziZDa2nMyIS5NkLLozBkQ1+pvq2E4Pf3Q=
Subject key identifier:   10:E9:3F:18:A7:17:91:D9:C9:34:C6:55:05:7F:73:41:1E:1F:E8:24
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Certificate issuer:       /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial:       1C83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
Manifest number:          1C58
Signing time:             Sat 06 Dec 2025 15:51:51 +0000
Manifest this update:     Sat 06 Dec 2025 15:51:51 +0000
Manifest next update:     Sat 13 Dec 2025 15:51:51 +0000
Files and hashes:         1: HVb-TaQriGb-lqKX93LugLUYpAo.crl (hash: TxN/TLg+c+qu6lGD+Otrn2gRjeZg26binUScZ3vB8Yg=)
                          2: 9B315A5E46A011E7B9BAF254C4F9AE02.roa (hash: o1l069BBsd3WUVBocCxI6g5VIW+fD/556imvKUhlYKw=)
                          3: 9933B21049D411E7AA790315C4F9AE02.roa (hash: wmOw2BuoGCJIUHvVuaRQLG+5/JheVX4qLMgdMvPjXZ4=)
                          4: 619B0B285AE611E781C33D7CC4F9AE02.roa (hash: zpxaNitqt84GE0AA0tEhFnXbQQVqt2sfIOkbeduHylA=)
                          5: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (hash: M+9/KccsjuKXSA6aFLKg/aVWmUin9oczPRD+MRgWtTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
                          rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7299 (0x1c83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
        Validity
            Not Before: Dec  6 15:51:51 2025 GMT
            Not After : Dec 13 15:51:51 2025 GMT
        Subject: CN=69345117-e717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:ff:bc:33:e4:76:89:28:e2:d1:42:fa:5c:
                    86:f7:15:04:02:a4:48:d8:c3:2a:b3:27:ad:1c:b4:
                    83:0d:1f:b5:44:f1:89:01:65:f9:b7:9f:74:7b:0d:
                    84:d2:ce:30:e2:7a:0c:ad:50:5e:b9:7a:2d:b3:11:
                    df:21:8c:2e:25:48:c8:10:40:d9:07:07:34:64:e1:
                    60:12:8b:0f:e3:c0:5e:7b:69:1c:7a:82:83:64:44:
                    90:e3:2b:37:38:63:cc:30:b0:83:89:4e:ca:f7:9e:
                    70:13:85:5a:d2:da:77:27:10:99:f9:34:ee:4a:f5:
                    44:57:af:7a:60:01:5d:08:bc:07:d4:cd:46:bc:6f:
                    8c:ff:82:20:04:64:86:a9:d6:d8:f6:7f:29:7f:38:
                    cf:63:cf:6f:83:fc:ea:aa:30:94:e3:f8:94:08:77:
                    00:8c:d5:6f:cc:cf:5f:68:c4:07:ce:c2:97:db:64:
                    e0:d2:50:58:ac:51:7e:63:26:75:4c:7d:b3:2d:8b:
                    89:f8:40:13:27:37:00:12:0f:eb:c7:88:e3:fa:89:
                    b3:fd:b0:5f:bf:3b:a1:e8:05:0a:ef:01:36:4a:58:
                    99:04:a8:26:66:df:da:7a:57:9e:12:6e:c1:b4:d8:
                    9a:9d:15:54:8f:d9:9f:84:55:ef:fd:c7:0b:d0:25:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:3F:18:A7:17:91:D9:C9:34:C6:55:05:7F:73:41:1E:1F:E8:24
            X509v3 Authority Key Identifier:
                keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:e9:d9:41:42:f9:61:4b:7d:07:79:a3:5d:d3:80:1c:ed:
         1e:d9:79:36:a4:4d:79:59:f9:dc:c7:e9:a4:23:08:ea:ba:e4:
         19:f3:c7:cc:f2:60:94:ac:76:6a:57:e2:9d:4a:1e:77:ed:c4:
         38:99:fc:76:b7:5d:cb:f7:b5:02:cf:d5:6a:ac:01:8d:24:fb:
         ff:34:dc:7c:a5:8c:27:d6:1e:a8:6a:8b:d6:ba:57:8c:37:73:
         91:b8:c3:54:af:9c:36:e3:71:1e:ae:99:98:0f:96:f6:78:1c:
         33:f2:12:96:49:3b:fe:84:5a:19:79:3c:f1:fe:dc:52:30:c9:
         71:9a:33:2e:a5:e2:18:75:68:3d:ab:d0:72:52:a7:1f:7b:39:
         69:93:cb:0a:85:34:f3:b3:d9:9c:8d:69:c7:6a:f4:71:db:6c:
         34:04:ef:f9:68:70:a0:ab:2b:5b:e9:f0:8d:72:47:08:f5:14:
         3f:5e:ef:98:50:7c:f8:ed:61:a1:09:cf:84:88:b1:2b:00:d4:
         52:01:a1:26:eb:85:eb:a8:03:d0:4f:d8:78:42:b6:4a:aa:36:
         5a:9b:9c:f2:88:2c:b0:ee:56:3f:b5:94:6e:a4:68:92:5b:00:
         22:a6:b5:f2:4e:a3:d0:80:8d:c6:b1:49:ea:20:ce:07:cd:a1:
         5c:f2:31:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:36 2025 by rpki-client