This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
File:                     hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json)
Hash identifier:          uq54+acUgvWT7gfLXAvN7/vMzhUMEyFPNUlOzH9MhZU=
Subject key identifier:   21:94:B8:B2:15:14:4C:82:8C:6D:30:75:2E:DF:E9:5C:E2:99:FA:32
Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
Certificate issuer:       /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
Certificate serial:       1838
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
Manifest number:          1838
Signing time:             Thu 04 Dec 2025 16:12:40 +0000
Manifest this update:     Thu 04 Dec 2025 16:12:39 +0000
Manifest next update:     Thu 11 Dec 2025 16:12:39 +0000
Files and hashes:         1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: 1eX7FEuAFNJ6shPeJo+jFR/Qj5/xja5tbCxDs3lkduU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
                          rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6200 (0x1838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364
        Validity
            Not Before: Dec  4 16:12:39 2025 GMT
            Not After : Dec 11 16:12:39 2025 GMT
        Subject: CN=6931b2f7-ed89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c2:de:e2:c6:89:0e:5c:77:73:d8:e7:45:36:
                    61:c5:a3:77:cd:c3:71:5c:52:4c:9d:2b:0e:38:5d:
                    24:d3:c7:f5:4e:5c:61:33:b4:13:63:02:cb:d1:3b:
                    56:a2:95:70:35:64:3d:0f:ff:47:38:99:12:6f:61:
                    7d:cd:cd:13:98:f3:12:ed:36:22:a6:0b:d0:39:06:
                    2d:2d:98:cc:57:77:36:0e:94:c6:99:42:80:0d:b8:
                    67:3b:16:e4:2a:35:6e:ed:34:7a:71:f9:8a:f8:74:
                    c4:38:70:51:fb:de:82:b8:7d:bd:56:ca:d2:3d:c1:
                    a7:2e:de:c7:df:9f:2b:05:55:0a:7c:69:fc:f6:9d:
                    1a:41:3b:31:85:ae:0d:1c:75:da:67:53:c8:37:95:
                    67:39:bb:01:f6:9e:df:ab:7f:7e:32:2c:65:1d:9a:
                    fe:ae:69:25:91:ec:be:49:cb:f8:80:ea:93:d0:a8:
                    19:7f:59:a9:6e:16:02:60:9c:33:03:a0:eb:76:ea:
                    36:71:f0:34:50:37:64:71:92:02:ce:36:04:aa:4c:
                    fc:52:b9:98:1d:d3:87:e4:1c:86:61:80:dd:9e:7b:
                    47:8d:bc:00:44:99:a4:96:74:f4:2f:7b:7f:0b:78:
                    61:f0:07:6f:b2:1a:ea:37:e2:c3:ec:e2:ae:4d:bb:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:94:B8:B2:15:14:4C:82:8C:6D:30:75:2E:DF:E9:5C:E2:99:FA:32
            X509v3 Authority Key Identifier:
                keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:51:aa:6e:90:71:e3:92:c7:4e:62:22:4a:68:8b:49:ec:
         56:01:de:84:ee:db:70:b3:23:4b:ef:13:3f:a9:a0:11:69:be:
         1f:ec:90:3a:f5:60:62:f2:1e:b5:e9:03:c3:0c:86:36:29:25:
         cb:4b:09:22:1f:2b:82:02:b4:35:95:94:2f:84:1f:cb:83:44:
         92:51:ca:48:bf:fe:92:1c:4f:ff:4e:77:dd:dc:7c:22:6d:9e:
         23:e6:11:65:b4:60:33:9d:1c:b2:f1:c6:b1:36:e7:e2:36:8e:
         b8:40:f2:88:e5:64:f6:c0:95:98:11:9c:61:28:62:0f:38:96:
         e3:14:d8:d7:fc:7b:09:4d:94:1f:81:b8:a5:15:4a:55:f2:ea:
         bd:ac:73:cb:35:41:b5:ca:13:c6:6b:ae:2f:d9:c0:ea:2d:f9:
         b3:78:1e:2d:3a:6e:74:26:28:b5:e2:ee:2c:d4:ab:c3:e4:f3:
         69:29:a6:c1:46:5e:f5:b5:9b:1e:44:9c:1f:73:61:26:fb:85:
         dd:76:0b:f0:2f:24:c7:f9:89:7a:63:19:40:00:e6:0b:c4:06:
         2c:c5:52:63:3e:5c:d9:b3:00:c5:c3:d5:1e:6b:72:cf:d7:88:
         99:2d:30:43:71:af:d4:bc:30:1c:ff:57:e0:6e:ab:cb:57:71:
         f7:f7:50:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:11 2025 by rpki-client