This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
File:                     hEd6PPADq7y8hU4_QMh8vPKhWN8.mft (raw, json)
Hash identifier:          vaLS6KoXJZJ5PmhwLAF4Xk7XrAFVUSTY5cD+9W5ZQ8c=
Subject key identifier:   B1:CC:D5:8E:F7:C4:4B:BD:B9:08:77:8A:00:65:EF:74:92:A8:71:19
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       0554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
Manifest number:          0541
Signing time:             Thu 04 Dec 2025 22:05:54 +0000
Manifest this update:     Thu 04 Dec 2025 22:05:53 +0000
Manifest next update:     Thu 11 Dec 2025 22:05:53 +0000
Files and hashes:         1: hEd6PPADq7y8hU4_QMh8vPKhWN8.crl (hash: Q7f/0c2sktH4EZqNsi2cO8leRDmU84Z2NFams54sfgI=)
                          2: BB682E3E81F711EF9D066A30C4F9AE02.roa (hash: ia2pqx31V4MwmguUfrEguAwy/z3aXZqah5kSHzEHlrE=)
                          3: 6608D04620E911EC891FA162C4F9AE02.roa (hash: 9W/HjzYGLuVHz3M6psfGPjI/8SrB5a0T/iVdc7KS6JA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Dec  4 22:05:53 2025 GMT
            Not After : Dec 11 22:05:53 2025 GMT
        Subject: CN=693205c1-6a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:ae:ae:81:c1:a7:71:6c:38:ef:f6:43:09:
                    73:8e:a9:37:1c:8e:42:57:e5:ba:6d:9c:b1:e6:ca:
                    1a:47:26:ad:a6:5a:46:92:c5:c6:81:6f:99:7c:22:
                    a8:b3:be:8f:10:f7:07:da:f5:34:5e:d4:12:89:dd:
                    fa:67:9e:3e:7d:c5:0f:86:ce:50:87:a2:07:f9:44:
                    da:e6:57:da:b4:5c:4f:23:24:5e:54:d8:b3:72:f6:
                    b4:22:b5:d5:c6:67:db:3a:66:12:35:47:7f:53:5f:
                    c2:7b:88:0f:d8:d6:ed:56:4a:b7:9b:0a:db:cf:aa:
                    9e:43:93:83:3a:69:79:60:b9:4d:64:04:39:1f:b5:
                    f8:4b:ea:82:89:f4:f7:11:d1:c8:61:05:a0:f2:28:
                    42:20:c1:a1:c2:6e:82:2e:5e:d4:fa:92:df:51:98:
                    4b:0d:4a:b7:e8:77:cc:ee:dc:72:10:35:aa:87:c7:
                    88:55:c0:53:15:70:fd:c0:32:05:fc:47:0e:a5:1f:
                    75:cb:82:80:b4:90:0e:b9:82:3b:86:ed:c4:7c:af:
                    6d:66:f1:c7:2e:01:51:bf:03:62:c6:27:f8:72:ed:
                    d0:57:26:45:bd:53:5a:43:0d:67:82:3a:48:de:5c:
                    7a:16:a1:7a:94:b3:5d:a3:b2:04:10:ec:8e:a8:0c:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:D5:8E:F7:C4:4B:BD:B9:08:77:8A:00:65:EF:74:92:A8:71:19
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:b6:99:1e:f3:79:3a:79:57:07:1a:60:e3:9c:01:8f:ae:
         e0:5a:3d:ad:7f:25:70:e9:54:28:33:6e:97:51:d3:25:38:25:
         47:55:1a:1c:a9:45:ea:ab:ff:af:01:8c:2a:30:f2:58:da:e3:
         b9:4f:b0:63:58:98:58:e8:38:20:76:24:6a:dc:53:04:8a:01:
         6f:f3:f4:02:72:f0:4c:78:ca:61:1c:f5:71:94:15:0e:f2:69:
         d1:52:cc:f4:bb:63:a1:70:82:c6:23:8f:de:e2:56:74:a2:27:
         0a:f6:10:ea:b7:06:91:41:78:27:1f:56:92:79:b0:b7:81:9f:
         20:84:60:8e:44:54:f6:bb:59:36:4d:f5:b8:ce:bf:3f:58:e3:
         14:6f:d7:19:3b:f1:54:91:a6:9d:40:41:be:28:f7:23:07:80:
         a1:7f:83:77:fe:c4:63:2f:a4:eb:34:ef:f6:c4:db:17:50:bd:
         b0:e4:33:b6:17:71:e4:4b:d4:af:ef:96:42:ed:6b:e4:3c:55:
         9d:86:c1:86:e3:1b:b4:3a:e5:e8:fa:da:e4:6f:f2:25:4a:35:
         ea:3e:b5:a7:78:37:07:d4:c2:3f:e7:02:e2:24:ea:99:f3:5a:
         df:b0:fc:61:4f:b4:5a:19:a1:34:55:bd:99:88:cc:4d:6f:e2:
         a0:56:62:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:37 2025 by rpki-client