This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          YGctZPnzXjfMQgmZkYTXIEGFEjoiHNT5ZiZ60xyqNio=
Subject key identifier:   AD:E9:A5:6F:06:DE:68:82:28:A7:44:63:DB:E1:E4:0F:CB:64:88:7A
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          FB
Signing time:             Fri 05 Dec 2025 03:13:55 +0000
Manifest this update:     Fri 05 Dec 2025 03:13:55 +0000
Manifest next update:     Fri 12 Dec 2025 03:13:55 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: JXVu+VLHazf74vtg1Av6ms5MgT7iGu8mvkU6ta0gnJU=)
                          2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Dec  5 03:13:55 2025 GMT
            Not After : Dec 12 03:13:55 2025 GMT
        Subject: CN=69324df3-6b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:80:ab:8b:51:59:de:98:dd:f2:eb:bc:f0:
                    df:43:b9:82:05:2b:06:34:23:64:e7:7e:53:87:34:
                    4c:d4:b7:2f:f5:73:f1:30:99:bd:86:1f:c1:4c:88:
                    ef:19:17:f5:01:e4:01:05:fc:48:ec:ea:87:5c:f5:
                    e7:58:2d:0f:d7:75:44:58:a7:8f:cc:6a:a0:f0:3c:
                    80:22:14:d4:3d:0a:40:a5:1e:67:ed:d8:0f:5c:cd:
                    5e:e6:02:eb:a1:7e:ba:25:67:f8:5a:da:e6:b4:76:
                    13:7c:6d:5d:b6:9f:4e:83:78:24:07:33:6f:85:f2:
                    6a:10:f5:18:7d:98:21:8b:ac:32:4d:11:3a:83:17:
                    2c:ec:9a:f5:4a:bc:09:c9:c8:53:f9:eb:d8:ff:0d:
                    bf:d7:a1:33:0b:eb:71:56:66:cd:3e:3f:89:5c:9a:
                    a0:f1:7c:98:4b:ff:07:d3:33:4a:49:0f:b2:2a:bb:
                    6f:96:74:71:84:48:6c:0d:17:d5:f7:9b:ee:cf:a9:
                    04:82:9d:ce:23:ee:cf:6b:fb:c3:7d:d1:9f:05:ee:
                    c3:f1:22:12:76:78:55:ec:d3:d1:85:78:bb:67:35:
                    da:9c:45:69:af:64:3c:37:02:8c:39:f0:42:ee:f0:
                    d7:2c:1d:4a:3d:f9:a2:09:38:70:8d:f0:f7:a8:29:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:A5:6F:06:DE:68:82:28:A7:44:63:DB:E1:E4:0F:CB:64:88:7A
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:8d:1b:77:1c:20:c8:02:65:4e:e0:d9:b4:85:a6:3b:4a:
         eb:17:fe:50:63:6b:cd:65:61:0a:62:4a:f5:6b:bf:fd:6b:dc:
         7d:7a:e0:65:ed:a6:7e:1f:6b:c6:cc:d7:30:36:20:94:1d:d7:
         69:ae:ba:ef:69:31:76:49:d2:03:de:4e:30:e2:8c:98:d6:59:
         0d:4d:1a:2c:d3:d8:c2:4b:7c:c9:53:0c:7f:7b:30:ea:4e:62:
         6c:30:6d:f7:f7:81:e2:78:0d:e2:83:0c:4c:bf:e2:1b:ef:38:
         fa:9c:6b:86:83:4d:53:f5:10:bc:df:da:89:06:49:3a:38:db:
         3f:ba:80:72:44:cc:78:23:3b:77:15:94:34:d8:83:03:f9:ad:
         24:ee:b7:4e:fb:c1:40:36:40:16:56:55:cd:33:41:16:02:b1:
         cd:86:88:18:d4:74:66:16:d8:6b:8f:08:5a:b4:c4:f5:06:5e:
         13:08:3e:b4:3d:22:a3:a3:b6:d6:86:5f:02:cd:68:31:23:4e:
         19:07:0e:32:31:57:2a:9c:67:8e:63:38:f6:dc:d7:54:98:51:
         0c:66:fe:cb:99:9d:25:58:8f:12:10:b6:d3:1e:75:f0:2b:ce:
         70:47:e3:37:20:a9:02:1b:e7:0c:6d:c7:6f:f4:a7:12:6b:5b:
         04:2e:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:23 2025 by rpki-client