This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File:                     HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier:          C1vVddmRSgB34mLx0IdC8t+jkjcDUVIz8/pQMUYv0J4=
Subject key identifier:   80:0F:D1:A4:96:3D:18:3B:BC:44:07:A7:7B:83:A1:8E:32:4F:63:79
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer:       /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial:       146B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number:          1462
Signing time:             Thu 04 Dec 2025 16:32:15 +0000
Manifest this update:     Thu 04 Dec 2025 16:32:14 +0000
Manifest next update:     Thu 11 Dec 2025 16:32:14 +0000
Files and hashes:         1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: 1anASKZxjap1bS+fmQMhpxv2mkyDbySHQ5CuYuuw2uY=)
                          2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: Namfm+gMj3DTGbqctWwU+VBkFxpSXUjfjiuK5KjjSb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
                          rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5227 (0x146b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
        Validity
            Not Before: Dec  4 16:32:14 2025 GMT
            Not After : Dec 11 16:32:14 2025 GMT
        Subject: CN=6931b78f-66b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:eb:b8:ad:a1:7c:70:21:86:2a:6e:05:7f:
                    ba:25:00:34:cb:b0:99:f7:d3:56:20:d5:04:cb:b3:
                    ee:ff:2a:38:72:86:6c:c8:7b:f9:10:13:93:e8:4f:
                    17:97:42:68:4a:ba:fa:ef:62:42:b3:d7:0d:cf:9c:
                    c9:57:86:01:86:00:59:fe:36:93:5f:31:df:a3:0a:
                    cd:a6:fe:4a:14:79:84:7e:e5:96:6a:6f:70:54:b1:
                    12:20:79:bb:54:9a:db:75:a2:26:ee:cc:e9:2c:df:
                    a5:f1:14:a6:5b:3c:29:d0:30:7f:c8:42:52:54:be:
                    d9:b3:24:3c:45:bd:d3:ca:bd:b4:07:31:c7:f4:af:
                    3e:4d:5d:ea:a9:d6:ad:d4:52:bd:0f:08:05:d3:4d:
                    0d:44:39:42:f0:c8:7b:12:77:c6:61:e4:5c:d9:bf:
                    39:23:5a:93:3f:15:05:36:e9:a7:43:76:18:9f:f7:
                    f3:06:c7:9d:90:15:a2:43:f9:4b:53:07:c4:53:36:
                    36:7d:71:80:55:66:f9:4b:83:3f:c7:cb:f4:7c:29:
                    99:b7:97:00:6f:b2:4c:4f:22:b2:d5:4f:d5:9e:a0:
                    56:8f:65:7d:a7:7c:1d:6b:e2:df:0d:42:55:55:21:
                    b3:72:d6:50:f7:f2:e4:5a:d9:0d:0c:eb:0c:0c:e8:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:D1:A4:96:3D:18:3B:BC:44:07:A7:7B:83:A1:8E:32:4F:63:79
            X509v3 Authority Key Identifier:
                keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a6:da:81:bd:7c:79:86:07:c3:40:e3:44:8c:59:31:35:3c:
         56:73:7a:16:eb:9f:11:4c:2d:fe:e7:2f:e5:0e:69:8d:a8:8d:
         c6:f9:65:eb:c5:5a:30:e4:52:94:b2:62:dc:f4:12:3d:b3:2a:
         c6:c3:1e:5e:1b:2e:4f:fd:11:b0:af:81:af:d2:72:b2:3d:82:
         81:22:99:e6:0b:c0:bf:89:d4:c7:1d:28:f8:62:69:57:28:63:
         2e:7b:e3:e2:0b:0d:29:6d:de:c0:99:b5:fa:40:95:56:d8:41:
         b6:50:fc:1f:6e:e7:fb:fe:7e:f8:b0:33:5f:2f:89:bb:42:f9:
         3c:c6:06:d3:93:a2:6f:38:af:33:94:ab:64:ba:09:f4:ac:df:
         b8:9d:85:e1:e2:76:d7:02:8f:3b:44:7d:9f:f2:fb:97:b7:f2:
         6c:90:ab:6e:84:c5:8d:75:ac:67:ef:c9:c0:3b:ff:0c:95:25:
         04:da:de:05:96:89:7e:21:99:33:a0:65:f5:40:4a:1d:05:bf:
         02:d0:4a:fb:c3:17:4e:71:25:ce:ff:d3:88:f1:88:b4:e4:8c:
         ef:bb:64:09:5b:8c:8a:84:8f:b8:e3:bd:9d:f7:1a:f1:f5:a1:
         07:24:7d:e8:51:e6:5c:ad:3d:d7:b3:a7:19:c2:b2:b6:d4:27:
         16:dd:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:11 2025 by rpki-client