This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
File:                     HpsNFjzgqhHpHVVg9aPMZp4yke8.mft (raw, json)
Hash identifier:          eXAnboEGG2aciodVI/N+ewk9WgoU8Q35XgtEn+ADC7E=
Subject key identifier:   E5:C7:93:26:E8:A7:EE:C5:8C:DE:1E:56:32:19:94:09:99:46:6C:65
Authority key identifier: 1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF
Certificate issuer:       /CN=A91F0578/serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
Manifest number:          AA
Signing time:             Fri 05 Dec 2025 04:11:10 +0000
Manifest this update:     Fri 05 Dec 2025 04:11:09 +0000
Manifest next update:     Fri 12 Dec 2025 04:11:09 +0000
Files and hashes:         1: HpsNFjzgqhHpHVVg9aPMZp4yke8.crl (hash: f7XtRzvr5hOtY0P1hxwVFz9jTldwn3uZ8VNZPa/mROY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1E9B0D163CE0AA11E91D5560F5A3CC669E3291EF
        Validity
            Not Before: Dec  5 04:11:09 2025 GMT
            Not After : Dec 12 04:11:09 2025 GMT
        Subject: CN=69325b5d-97c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:f8:ce:03:e0:8a:80:30:3f:49:c3:47:e6:
                    66:09:4b:37:fe:14:c5:41:ab:7f:da:8a:c0:81:e9:
                    b8:02:29:83:32:cb:69:77:28:15:c7:e5:3a:24:26:
                    7f:8d:52:bd:48:62:6a:6c:c3:51:14:d7:a0:ee:73:
                    c4:e6:7d:67:48:52:7c:6a:b8:1d:18:2f:f3:a4:31:
                    3f:db:aa:26:ab:0f:28:b5:1b:b7:76:59:2a:5b:55:
                    67:ad:b0:24:a6:53:69:60:28:91:ac:b1:04:a6:c7:
                    3b:3d:0a:5f:4d:da:e6:ca:d1:c5:ca:01:0b:39:9e:
                    a7:b1:f5:ba:7c:c1:49:79:6a:6b:9a:bd:22:d7:38:
                    8c:5a:03:a3:79:e6:53:e8:ea:99:4f:f1:70:99:84:
                    94:fe:84:76:f3:58:79:de:8a:6f:79:f2:85:22:f2:
                    09:d9:cd:51:95:df:6d:b0:c9:35:b4:c1:ac:01:8f:
                    7e:3c:34:f2:bb:38:39:f4:10:8c:40:5a:a0:32:ed:
                    01:d3:29:d0:e2:0e:eb:a5:41:28:23:cc:35:06:b1:
                    c7:0b:cc:1c:08:00:9f:14:c3:8a:a1:d9:4a:16:a7:
                    a1:2d:4f:5f:9f:29:42:f5:a7:4a:1c:be:b8:d8:3c:
                    78:2f:af:82:ac:bf:15:be:9f:77:50:4d:cf:f9:4f:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:93:26:E8:A7:EE:C5:8C:DE:1E:56:32:19:94:09:99:46:6C:65
            X509v3 Authority Key Identifier:
                keyid:1E:9B:0D:16:3C:E0:AA:11:E9:1D:55:60:F5:A3:CC:66:9E:32:91:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HpsNFjzgqhHpHVVg9aPMZp4yke8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/09530A8CCF3D11EF91380E11C4F9AE02/HpsNFjzgqhHpHVVg9aPMZp4yke8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e9:11:55:19:83:30:0b:9d:8c:ac:6e:17:75:30:39:05:fe:
         e3:c9:16:3a:d7:7c:97:f3:74:4a:77:47:50:91:78:75:cb:13:
         68:bf:12:58:85:7c:d9:38:bb:30:98:e3:79:c3:6e:6e:3a:98:
         fc:4a:b3:68:7c:8f:05:ca:74:b9:07:c3:dd:c0:a2:18:bf:a0:
         c0:40:83:18:1f:a8:22:b9:f2:55:48:24:ef:c4:f0:44:84:9a:
         1f:f9:5e:0c:16:ee:17:29:c6:5a:76:8a:82:f6:03:14:5e:b6:
         3b:ca:1c:79:65:b8:67:be:db:52:54:24:1f:f1:30:3b:05:4f:
         05:40:36:75:30:d8:4b:65:40:9e:43:41:f8:94:e2:d9:21:51:
         59:8b:05:42:f8:25:ab:93:66:08:d7:66:a3:39:3f:5a:c9:ca:
         94:8b:68:37:a1:3f:2f:a3:20:e4:57:ed:f8:a5:eb:fa:4d:cd:
         9b:9e:a5:18:4f:68:44:bd:78:4f:cf:2d:5c:6a:21:b9:c7:b8:
         41:00:e3:b9:38:48:2d:1f:5e:d8:b6:c8:b7:7f:f6:1d:60:41:
         5c:56:72:4f:f4:4d:d8:5b:3c:69:89:d7:32:04:14:0f:67:9e:
         ca:1a:15:47:32:c2:7c:96:c9:ed:b3:f1:35:d9:1c:3f:e3:2d:
         d6:57:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:01 2025 by rpki-client