This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
File:                     1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft (raw, json)
Hash identifier:          0NO4Nc/SIW8idaPqNb+2gDtC3hp2phh4dLqf4ZkFmiE=
Subject key identifier:   30:17:7A:9E:FD:05:DC:91:7B:D0:C0:AA:CC:33:EF:60:73:3C:87:43
Authority key identifier: D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5
Certificate issuer:       /CN=A9192920/serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
Certificate serial:       07B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
Manifest number:          07AF
Signing time:             Thu 04 Dec 2025 20:22:38 +0000
Manifest this update:     Thu 04 Dec 2025 20:22:38 +0000
Manifest next update:     Thu 11 Dec 2025 20:22:38 +0000
Files and hashes:         1: 1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl (hash: txBaCjX81fQYVv73TX1pgpSioY5g05DQ1oA8tsXOFBY=)
                          2: 213D6260B68511EC81F0D430C4F9AE02.roa (hash: ORWgLETy9xdLV6va58PYuRXQugFIvAZqmcO/bSIQ6Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl
                          rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192920, serialNumber=D4A1C71D3573A6E446138941D7F7EFECE397AFB5
        Validity
            Not Before: Dec  4 20:22:38 2025 GMT
            Not After : Dec 11 20:22:38 2025 GMT
        Subject: CN=6931ed8e-14d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:5c:f7:e8:66:6d:56:bc:65:87:dd:0c:92:
                    58:31:06:7c:c4:c3:e4:22:3f:92:95:94:7c:23:54:
                    e0:30:81:3e:fa:24:e4:d6:26:e4:21:5f:11:69:df:
                    e2:14:b1:67:0b:58:57:66:a5:f0:8f:fa:83:55:05:
                    e0:7e:2b:8b:21:80:ef:14:7c:24:c7:b3:79:5b:9a:
                    68:85:c7:ef:8d:92:1a:8f:51:2d:6c:39:99:af:ef:
                    b1:1f:45:cd:3b:22:b9:15:b8:42:68:f5:aa:3a:f8:
                    af:4f:3f:20:ac:75:13:bd:a7:53:28:df:f6:44:ec:
                    bf:8c:69:a7:35:b1:05:09:7f:de:dd:8c:bd:1d:0e:
                    2c:7b:04:4e:25:96:f3:42:c8:98:88:38:0a:62:07:
                    fc:e7:c4:fb:0c:ac:e4:18:18:5e:75:8b:c5:22:f2:
                    fe:99:98:74:af:fa:5a:58:08:d5:c4:ff:23:98:60:
                    e9:ee:24:4f:06:f0:ea:04:75:4f:f1:a5:5e:e0:a1:
                    01:26:54:b0:34:27:fd:51:d7:27:17:92:ab:c1:b3:
                    03:90:da:c3:99:2c:63:e7:44:1a:a4:80:ae:2d:0f:
                    58:c8:05:1f:77:c6:df:95:b8:70:10:06:3e:9b:73:
                    28:9b:f7:89:c9:30:0e:3e:61:49:ac:34:a4:8c:1a:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:7A:9E:FD:05:DC:91:7B:D0:C0:AA:CC:33:EF:60:73:3C:87:43
            X509v3 Authority Key Identifier:
                keyid:D4:A1:C7:1D:35:73:A6:E4:46:13:89:41:D7:F7:EF:EC:E3:97:AF:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KHHHTVzpuRGE4lB1_fv7OOXr7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192920/70C0442627EB11EB82F27047C4F9AE02/1KHHHTVzpuRGE4lB1_fv7OOXr7U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d1:1e:ff:20:2d:2b:aa:7d:e4:40:ff:fc:55:16:b4:d9:7e:
         38:3f:19:72:3f:75:82:dc:57:c8:fb:b6:64:e3:f2:d6:8b:fa:
         b6:03:37:c6:24:79:12:7b:6a:29:25:ff:19:c2:f4:e7:a7:02:
         f7:ab:7a:ec:53:56:11:11:41:59:8c:93:7b:0d:b6:df:13:fe:
         e3:ba:ba:b2:8a:df:80:e4:ee:b3:d9:97:90:d2:76:6c:6b:56:
         c4:23:63:7b:8c:a9:30:dd:da:46:2b:0e:50:a9:03:60:f6:b3:
         dd:b3:5e:36:67:1d:75:39:b1:71:73:48:e8:41:ce:f1:cd:15:
         c3:4f:e5:57:f1:02:ed:c2:d6:bd:e7:6a:96:fd:24:51:0e:ca:
         93:f0:32:4f:6a:ed:d7:44:cb:4d:83:a2:bc:5a:77:a8:45:af:
         c7:d0:74:80:6a:a5:f9:7d:b3:be:17:32:b7:2f:86:3e:9f:ea:
         75:7c:82:4c:8b:43:0a:eb:9c:74:88:cb:d2:f0:eb:17:f6:59:
         3c:e9:40:a2:13:4e:d3:df:fb:65:d0:fa:c3:b6:28:cd:d2:5d:
         f2:6b:00:6a:a4:56:06:1b:6b:90:cf:c8:67:66:12:9d:3c:08:
         50:b9:dd:9b:9d:80:77:bb:45:b6:92:7d:41:d3:f0:b1:2d:e1:
         f3:81:00:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTI5MjAxMTAvBgNVBAUTKEQ0QTFDNzFEMzU3M0E2RTQ0NjEzODk0MUQ3RjdFRkVD
RTM5N0FGQjUwHhcNMjUxMjA0MjAyMjM4WhcNMjUxMjExMjAyMjM4WjAYMRYwFAYD
VQQDEw02OTMxZWQ4ZS0xNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7pc9+hmbVa8ZYfdDJJYMQZ8xMPkIj+SlZR8I1TgMIE++iTk1ibkIV8Rad/i
FLFnC1hXZqXwj/qDVQXgfiuLIYDvFHwkx7N5W5pohcfvjZIaj1EtbDmZr++xH0XN
OyK5FbhCaPWqOvivTz8grHUTvadTKN/2ROy/jGmnNbEFCX/e3Yy9HQ4sewROJZbz
QsiYiDgKYgf858T7DKzkGBhedYvFIvL+mZh0r/paWAjVxP8jmGDp7iRPBvDqBHVP
8aVe4KEBJlSwNCf9UdcnF5KrwbMDkNrDmSxj50QapICuLQ9YyAUfd8bflbhwEAY+
m3Mom/eJyTAOPmFJrDSkjBpuTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAXep79
BdyRe9DAqswz72BzPIdDMB8GA1UdIwQYMBaAFNShxx01c6bkRhOJQdf37+zjl6+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkyMC83MEMwNDQyNjI3
RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1UkdFNGxCMV9mdjdPT1hy
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLSEhIVFZ6cHVSR0U0bEIxX2Z2N09PWHI3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjkyMC83MEMwNDQyNjI3RUIxMUVCODJGMjcwNDdDNEY5QUUwMi8xS0hISFRWenB1
UkdFNGxCMV9mdjdPT1hyN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBy0R7/IC0rqn3kQP/8VRa02X44PxlyP3WC3FfI+7Zk4/LWi/q2AzfG
JHkSe2opJf8ZwvTnpwL3q3rsU1YREUFZjJN7DbbfE/7jurqyit+A5O6z2ZeQ0nZs
a1bEI2N7jKkw3dpGKw5QqQNg9rPds142Zx11ObFxc0joQc7xzRXDT+VX8QLtwta9
52qW/SRRDsqT8DJPau3XRMtNg6K8WneoRa/H0HSAaqX5fbO+FzK3L4Y+n+p1fIJM
i0MK65x0iMvS8OsX9lk86UCiE07T3/tl0PrDtijN0l3yawBqpFYGG2uQz8hnZhKd
PAhQud2bnYB3u0W2kn1B0/CxLeHzgQCS
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:59 2025 by rpki-client