This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
File:                     HJuixf6owDTaVR_a3GKlOnoC5ds.mft (raw, json)
Hash identifier:          cs4M0juq8VB9ln2QWhYa9Ptx4zM5NxrmwgyB/Huqq1o=
Subject key identifier:   4C:9E:1F:5D:D6:0E:41:A0:A1:3D:E9:58:3E:2C:7D:41:09:F5:D0:1B
Authority key identifier: 1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB
Certificate issuer:       /CN=A9193D86/serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
Certificate serial:       09CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
Manifest number:          09B0
Signing time:             Thu 04 Dec 2025 19:15:25 +0000
Manifest this update:     Thu 04 Dec 2025 19:15:24 +0000
Manifest next update:     Thu 11 Dec 2025 19:15:24 +0000
Files and hashes:         1: HJuixf6owDTaVR_a3GKlOnoC5ds.crl (hash: 9iEOt7drenDrwN8XXygCBL+RmzprEPnHRVdDe4JLuRQ=)
                          2: 52FC6006A19911EA96035C38C4F9AE02.roa (hash: W0ibhleTeTRf9SQxlBk7HfDKAYLQO1EEAaw2Uj8cqZ4=)
                          3: 7B136C42CC8511EC8D238672C4F9AE02.roa (hash: QSi8XLx3OVsMnyA15sUJv5CABNiE2WZTW3Q/q6D7Y/8=)
                          4: 79C02FB0CC8511EC8D238672C4F9AE02.roa (hash: VxFJ2WxHqvcaRXlyN+j6s6uxQHhjavcFYpy6cqbLq00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl
                          rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 19:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2508 (0x9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193D86, serialNumber=1C9BA2C5FEA8C034DA551FDADC62A53A7A02E5DB
        Validity
            Not Before: Dec  4 19:15:24 2025 GMT
            Not After : Dec 11 19:15:24 2025 GMT
        Subject: CN=6931ddcc-ccdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:f0:dc:dd:80:16:7a:29:fa:88:bf:41:58:
                    5b:97:ea:47:c0:01:e5:a3:38:bc:c4:a0:4d:99:47:
                    b8:7d:0a:4f:bd:4f:cf:d0:75:8e:b7:00:0f:13:9a:
                    71:98:29:b1:24:5d:00:7a:5a:7b:39:b0:c6:55:b8:
                    d1:9c:ed:aa:22:3d:a3:26:23:7e:e2:8e:2e:79:f0:
                    e1:0f:8c:ac:a2:7f:c1:f7:3c:91:08:3c:8e:05:04:
                    44:32:87:2c:10:5e:59:b0:12:e6:ec:37:d7:72:03:
                    d7:22:68:06:2a:16:7a:1a:7d:10:35:c0:ec:5b:36:
                    ae:1d:c8:5e:95:9c:70:5a:32:2c:40:da:48:64:d2:
                    0b:a6:a4:97:e7:28:07:36:d9:a4:a1:36:ee:48:d8:
                    7f:f4:fa:30:4e:b3:ec:33:b9:29:ba:9b:42:3e:f8:
                    8f:38:ec:d9:13:97:26:08:51:03:82:de:b5:4e:ff:
                    1f:cb:15:17:b2:dc:b8:34:63:73:bb:7d:60:c2:3d:
                    21:43:3a:4d:30:1b:c1:df:ce:49:7f:f8:5d:a9:06:
                    14:a9:74:4d:dc:e8:e6:f4:40:7d:b1:ac:6c:ad:b9:
                    60:20:f4:c9:7e:db:bc:41:74:c2:de:1b:26:bf:99:
                    93:df:72:a9:82:f6:b6:d2:e3:41:af:01:8c:c4:76:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:1F:5D:D6:0E:41:A0:A1:3D:E9:58:3E:2C:7D:41:09:F5:D0:1B
            X509v3 Authority Key Identifier:
                keyid:1C:9B:A2:C5:FE:A8:C0:34:DA:55:1F:DA:DC:62:A5:3A:7A:02:E5:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HJuixf6owDTaVR_a3GKlOnoC5ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D86/C67D176E9A5F11EA9F626B5EC4F9AE02/HJuixf6owDTaVR_a3GKlOnoC5ds.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:7d:9b:ba:d4:b9:63:bd:aa:37:21:a7:84:2c:28:0c:b1:
         fa:0d:4e:76:9a:56:ba:07:9d:74:23:f7:fc:ae:fd:f0:a8:6f:
         a7:d4:d9:30:6d:29:83:c5:45:73:57:2c:90:9f:f7:8a:cc:bd:
         f0:c6:d1:b1:8f:36:d8:c9:d9:c0:d0:af:30:79:5e:47:9e:ff:
         0b:24:02:35:1b:02:61:e6:d7:0e:3a:f5:c8:c3:9f:e2:65:24:
         11:ed:5a:49:7d:4f:80:79:22:19:0e:3e:47:2e:1e:3e:19:58:
         e2:cb:e3:45:4d:c3:32:39:35:bf:f2:b8:c5:7a:26:7e:c9:23:
         97:04:37:04:97:06:b2:70:ff:55:40:15:de:95:d0:62:c3:7a:
         27:f3:39:b9:71:19:30:54:50:b5:f9:39:19:ca:8e:fe:16:61:
         83:d0:8c:c0:b7:89:1d:ea:91:7b:8a:11:57:46:ac:93:4a:42:
         40:7b:c5:ce:3d:f1:c0:0d:36:e6:e0:99:0e:d6:ab:ed:ea:b3:
         2f:8a:04:0d:87:33:09:d7:1f:32:80:98:40:29:af:38:e4:88:
         51:67:45:10:eb:33:b5:71:42:44:e6:d9:76:54:05:e1:98:ba:
         84:f5:27:e1:f2:a9:2d:53:aa:ba:43:70:84:36:d0:3e:ff:3f:
         e1:3c:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:00 2025 by rpki-client