This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
File:                     HWw-nEchLuSN-fVOZJCpphbUEYk.mft (raw, json)
Hash identifier:          TF5W2ft6LlWjyjzGPjyGWsk3HMCpzVB27wLGeW/wPB4=
Subject key identifier:   4B:7E:AC:18:A6:0C:20:FE:C8:82:38:34:76:77:98:14:1E:3F:C5:43
Authority key identifier: 1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89
Certificate issuer:       /CN=A91B6AEE/serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
Manifest number:          023D
Signing time:             Fri 05 Dec 2025 00:12:57 +0000
Manifest this update:     Fri 05 Dec 2025 00:12:56 +0000
Manifest next update:     Fri 12 Dec 2025 00:12:56 +0000
Files and hashes:         1: HWw-nEchLuSN-fVOZJCpphbUEYk.crl (hash: gEJWPwFUWqH8y47zf0TzRF18lpuk/LyV8jLCP7yiEYg=)
                          2: 3B7794D2664A11EDB095B812C4F9AE02.roa (hash: 3/Fx9zU+/qcgAJraecgoQhxMCpBayBXQ3IM4m/S+gH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6AEE, serialNumber=1D6C3E9C47212EE48DF9F54E6490A9A616D41189
        Validity
            Not Before: Dec  5 00:12:56 2025 GMT
            Not After : Dec 12 00:12:56 2025 GMT
        Subject: CN=69322388-12f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:69:d1:4f:52:3e:af:87:b6:73:65:57:28:
                    28:b8:60:47:d1:38:89:44:9e:36:07:71:b2:0b:4b:
                    07:04:48:52:9a:6f:70:11:52:93:54:2d:0f:43:87:
                    59:8c:01:45:78:c4:9a:a6:24:78:b2:05:26:60:b6:
                    a6:ee:d6:48:a3:0f:a0:de:d1:30:93:c4:61:4b:34:
                    ed:08:b8:42:61:ff:24:cf:db:d8:99:46:2f:06:07:
                    c6:70:33:38:b7:21:6a:54:36:78:5c:64:c9:be:26:
                    4d:9c:cb:89:80:ce:ee:97:ad:08:28:25:94:a8:3e:
                    14:a5:74:f6:74:f5:3a:e7:28:fc:a6:b1:34:f2:c8:
                    82:85:cc:d6:8d:0e:6e:17:eb:e3:7f:32:92:14:85:
                    ac:b0:e6:66:c0:9d:8a:1c:ed:70:49:1e:b2:0a:db:
                    b4:55:53:f7:8a:63:49:e0:31:49:c9:c7:fb:07:c6:
                    7c:aa:21:ba:d3:e5:c6:89:6e:c0:e3:15:2d:0b:b5:
                    be:88:36:b8:e7:42:c6:c9:64:ab:ef:f9:e6:3e:b5:
                    b6:2e:75:f2:d2:6c:9a:dc:35:65:51:ab:2a:d5:2e:
                    8e:fc:7e:9b:72:5a:0f:70:89:73:ad:b7:75:6c:74:
                    2a:32:b3:0b:2e:77:a7:11:e2:bd:6a:49:8f:b1:ba:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7E:AC:18:A6:0C:20:FE:C8:82:38:34:76:77:98:14:1E:3F:C5:43
            X509v3 Authority Key Identifier:
                keyid:1D:6C:3E:9C:47:21:2E:E4:8D:F9:F5:4E:64:90:A9:A6:16:D4:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWw-nEchLuSN-fVOZJCpphbUEYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6AEE/4F332882664611ED8D2C750FC4F9AE02/HWw-nEchLuSN-fVOZJCpphbUEYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:e0:11:de:5b:b9:1a:72:19:a1:e3:74:29:0a:9c:7f:53:
         17:c9:f1:21:fc:25:cf:71:84:29:69:f3:f4:4c:1d:d1:5e:42:
         95:b0:24:45:ce:2b:3e:22:c8:51:7d:ad:f1:cb:5c:b8:f4:df:
         3a:5b:ac:b3:23:43:d8:99:d3:70:6c:05:34:5f:72:77:b3:82:
         ea:c5:3c:a6:f2:2b:6d:40:ca:da:f2:8e:a4:86:a0:02:eb:19:
         c3:35:83:a8:ca:b4:94:52:d6:96:53:e4:a6:61:e9:b7:e9:cb:
         bf:e1:a8:c3:eb:b9:75:76:3e:19:68:4e:2b:98:a2:b8:2a:c4:
         3e:40:38:82:a0:70:a7:a9:57:ed:2d:85:62:8b:9c:ad:c0:a2:
         dc:3c:44:5d:50:27:96:fc:33:ac:03:9f:b7:dd:3a:95:5a:1b:
         a9:10:9e:ef:00:63:eb:e7:8c:b4:b3:ab:7f:f3:12:79:05:a4:
         63:09:9e:ad:30:36:b1:44:c5:24:8a:79:f8:96:fa:4b:af:26:
         f6:42:a6:69:3e:bf:1b:a6:c7:f0:27:74:ef:ea:1e:02:8f:20:
         3d:b0:11:ae:9f:3e:a2:dd:c9:5b:ee:5b:16:f8:53:f3:2c:e5:
         90:b3:a0:73:91:2b:fd:8a:c6:97:36:39:6f:04:71:e2:85:47:
         00:f5:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:03:37 2025 by rpki-client