This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File:                     hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier:          lW6FpHB+9iMHGCD2KdPKtTwiHo21rFh3W5r2Eyfv69Y=
Subject key identifier:   73:88:6F:0F:BA:F1:87:D9:65:75:2C:DD:EF:1E:CE:33:DE:1D:AB:6A
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer:       /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial:       06AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number:          06A3
Signing time:             Thu 04 Dec 2025 21:09:38 +0000
Manifest this update:     Thu 04 Dec 2025 21:09:38 +0000
Manifest next update:     Thu 11 Dec 2025 21:09:38 +0000
Files and hashes:         1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: SWBv0jNaCFkgWyLs2fB90e7xOI7IHcZ6rNoZe28dvDs=)
                          2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: bolwxGi/eUOKWmqsmWqcMpF1AWqbvnFw3vWt3JpNOcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 21:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1707 (0x6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
        Validity
            Not Before: Dec  4 21:09:38 2025 GMT
            Not After : Dec 11 21:09:38 2025 GMT
        Subject: CN=6931f892-f313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:e6:b0:7c:d5:95:46:22:b2:6c:a2:e9:53:
                    0a:a5:1d:12:77:95:72:c8:09:f1:2a:ba:6c:ee:e7:
                    4f:aa:c1:5b:66:e0:68:5e:6d:26:fe:94:e0:10:81:
                    0b:16:45:05:dd:21:b2:40:fd:7e:b1:0e:ee:fa:e6:
                    83:c0:c0:6a:05:bf:9e:cf:e5:6b:8d:08:9a:a1:63:
                    24:23:88:6a:98:3e:fb:73:5d:1d:2a:51:b9:1d:de:
                    95:6b:c0:4b:08:67:26:cc:d9:3a:86:06:9b:0b:0e:
                    05:7f:27:09:91:49:15:3b:1d:b3:50:3d:e4:c3:99:
                    f2:e4:7e:e0:53:72:96:b1:ac:68:79:0f:94:5d:d7:
                    c1:7b:5f:81:83:ab:3c:7c:fc:65:86:70:94:c6:70:
                    05:29:48:36:e1:4a:12:49:02:d3:e7:ab:49:e2:5b:
                    60:b1:9b:99:bc:72:dd:e0:4e:32:9f:1d:9c:e1:ff:
                    a2:a0:88:6b:25:4a:77:b3:16:a0:a4:8e:bf:12:23:
                    32:d7:96:0b:c2:db:5b:88:0c:db:5b:ee:91:9f:9b:
                    29:72:a2:38:c8:ba:38:2c:98:79:25:51:e8:5d:0f:
                    2f:97:b3:53:2b:52:f9:d4:68:39:e8:08:8a:18:87:
                    8a:e8:59:06:e9:6e:39:5b:47:31:bd:4a:8e:5c:22:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:6F:0F:BA:F1:87:D9:65:75:2C:DD:EF:1E:CE:33:DE:1D:AB:6A
            X509v3 Authority Key Identifier:
                keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:1e:03:1c:a7:ae:c3:65:86:a6:c3:6e:44:b0:eb:14:6b:
         45:aa:f9:90:c2:1e:ce:04:d9:c8:11:d3:ba:63:2b:33:5f:c6:
         12:af:a9:4d:55:d9:a1:ba:7e:1e:f8:24:2e:f3:cc:43:66:e0:
         06:8f:13:c3:22:e3:69:83:d1:be:24:cd:50:f6:b5:94:c7:d4:
         58:63:3c:19:b2:e5:5c:9e:33:ef:3b:ca:63:f2:7f:ec:fb:30:
         bc:b7:cc:e1:49:23:90:65:14:9a:8d:47:7e:70:1a:46:ed:5d:
         01:f2:7f:16:68:31:ef:f3:6b:df:65:7e:4a:7b:d9:43:28:e4:
         f7:9d:f6:97:a3:50:d8:84:e5:01:46:33:52:b3:66:64:ca:1a:
         95:04:3a:8f:59:98:cf:e5:33:a9:ae:8e:f8:d7:ff:c0:34:b7:
         62:8e:82:39:42:02:2a:2a:45:f9:d9:e4:d4:ea:04:4c:5e:92:
         9d:8c:b3:73:db:16:b5:ff:bb:2c:9c:5f:1b:55:0c:91:29:e4:
         f3:76:0c:b5:c8:bc:d0:88:7b:33:bc:20:2a:6c:92:a0:58:e2:
         73:cf:41:87:de:92:4f:e0:4f:6b:0f:a3:03:e8:8c:60:c2:79:
         1b:85:5f:7f:03:59:2e:cf:22:c7:4f:19:98:08:6c:9d:e8:f3:
         ac:07:4c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:29 2025 by rpki-client