This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
File:                     hIP9VFfRHgUTVSER9bovNxLphfc.mft (raw, json)
Hash identifier:          WpwgLvhUDEXEqmWlti5r2AwRSboGsaL0pJ49IhCc4+0=
Subject key identifier:   A4:1B:F1:51:00:6E:81:B8:4F:C6:76:BB:59:52:BC:84:64:0C:78:9A
Authority key identifier: 84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7
Certificate issuer:       /CN=A91DC9C4/serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
Certificate serial:       0258
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
Manifest number:          024F
Signing time:             Fri 05 Dec 2025 00:05:34 +0000
Manifest this update:     Fri 05 Dec 2025 00:05:34 +0000
Manifest next update:     Fri 12 Dec 2025 00:05:34 +0000
Files and hashes:         1: hIP9VFfRHgUTVSER9bovNxLphfc.crl (hash: cRa3fOWPIiSTBGYAm2DaYJ28GPkK0CPdlJ9ehJwTchk=)
                          2: 153EBE3ADEF711EF84C57421C4F9AE02.roa (hash: d2fZwjk/kReWJf7o+GQOO5RAjKTwIQ1B0ld4lPrAcBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC9C4, serialNumber=8483FD5457D11E0513552111F5BA2F3712E985F7
        Validity
            Not Before: Dec  5 00:05:34 2025 GMT
            Not After : Dec 12 00:05:34 2025 GMT
        Subject: CN=693221ce-1b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:74:83:93:8e:a3:f3:d2:b4:4f:f9:e5:9d:
                    8b:1b:89:2e:3b:83:d0:0c:9d:b1:93:a5:8f:6b:62:
                    59:fe:c0:fe:50:d5:fc:06:16:d2:d5:11:ba:f3:eb:
                    43:4d:65:2f:69:bc:3b:6d:bd:43:e3:98:da:0a:0e:
                    03:ed:49:cf:e3:a7:80:37:ea:ec:35:b7:14:8a:ab:
                    6c:62:b4:68:91:30:72:a1:b2:19:07:8f:c3:87:3e:
                    40:33:ae:a3:ff:f4:fb:75:70:b7:5d:b0:c1:81:1f:
                    10:b5:3e:14:2f:91:06:21:e7:42:d7:57:69:03:ca:
                    ce:36:03:c3:58:c5:ab:44:0b:b8:27:99:26:f0:01:
                    2a:2c:7b:2e:5c:98:cc:f6:de:3e:56:4d:bd:f6:f9:
                    a7:30:39:29:c0:51:e1:79:7f:24:b7:31:47:d0:18:
                    7f:c7:9d:55:00:58:10:3f:b5:b2:41:19:17:6f:d9:
                    4d:da:20:14:a5:48:ef:24:87:db:a1:84:f9:25:19:
                    e2:3e:f8:a2:1d:45:e0:36:d2:eb:db:19:2f:ea:37:
                    c2:cd:57:68:6d:68:a3:34:f6:07:58:d5:53:8b:54:
                    ab:c4:27:63:ff:f7:9b:e2:4d:b1:d6:58:03:fe:8d:
                    54:b0:a2:43:ae:92:0f:f4:d5:26:34:ff:89:fa:f0:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1B:F1:51:00:6E:81:B8:4F:C6:76:BB:59:52:BC:84:64:0C:78:9A
            X509v3 Authority Key Identifier:
                keyid:84:83:FD:54:57:D1:1E:05:13:55:21:11:F5:BA:2F:37:12:E9:85:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIP9VFfRHgUTVSER9bovNxLphfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC9C4/1A70DC864E9311EDA730ED32C4F9AE02/hIP9VFfRHgUTVSER9bovNxLphfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5d:ad:1e:57:00:86:fc:a9:4e:48:35:e9:81:c1:17:5d:f9:
         02:b8:8a:3f:52:3c:53:44:9c:d0:1d:59:ff:22:0c:69:82:21:
         73:ac:b8:65:44:ee:3f:e1:a4:89:c4:93:85:2c:4c:e6:b9:8f:
         b2:9d:81:5d:01:c8:56:56:08:a2:2d:dc:54:d8:87:6d:d6:63:
         69:10:f1:66:cb:5a:ac:4d:1c:57:a3:c3:f1:9c:b5:81:b5:a0:
         42:c9:5a:2b:21:b7:e5:9a:c1:30:2c:4b:f4:97:27:7c:96:b2:
         65:ca:46:f2:ab:b5:6e:7c:91:63:e8:01:9d:35:1a:57:3d:95:
         87:fd:66:75:a6:02:c2:57:57:60:88:9c:fb:6e:9d:91:00:2a:
         cf:b4:45:ed:63:a9:6c:3d:e8:86:23:c8:a4:93:e0:58:b7:1a:
         d9:0c:51:a0:00:03:87:4c:07:18:c0:e5:39:c5:ce:b3:ea:e8:
         96:8e:1e:c5:b9:84:3f:fd:c2:88:3e:82:10:91:cc:69:8b:b4:
         e1:97:51:35:57:40:0c:f9:68:90:e5:0a:eb:7c:c8:d9:f1:13:
         dc:49:d4:4b:c6:fd:0e:89:7d:ec:89:9c:4c:a3:7b:26:a7:80:
         68:95:2c:18:47:4f:df:99:e7:5a:8c:06:71:48:ec:4d:c9:46:
         16:14:cc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:10:54 2025 by rpki-client