This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          J58Q9Tka84JJWC69uwh1lK0CrP5pwt576Qo4wH7npPY=
Subject key identifier:   8A:52:B3:D9:86:B8:7F:C4:5B:26:C6:D6:C4:DA:8B:0D:FD:E9:30:54
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          8E
Signing time:             Fri 05 Dec 2025 04:31:22 +0000
Manifest this update:     Fri 05 Dec 2025 04:31:21 +0000
Manifest next update:     Fri 12 Dec 2025 04:31:21 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: zxQPBsTsl4T8WmaXL/S0OAetxLy8Y/395nCjm/ZaX0Q=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: qw98EXKpwezEJaUdjFxnME0guuBGI/INe4GkxMZV/98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Dec  5 04:31:21 2025 GMT
            Not After : Dec 12 04:31:21 2025 GMT
        Subject: CN=6932601a-a68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:ae:0a:85:a1:26:d9:1a:e5:5e:ee:ec:77:
                    d8:20:78:60:ef:a0:e6:3d:6e:c1:35:92:5f:92:c4:
                    86:df:e5:9c:4f:19:2f:f5:65:15:71:99:e6:97:61:
                    6e:67:e2:88:64:7a:47:71:89:06:65:5b:bf:fb:ca:
                    84:b5:ff:35:d0:c7:3a:59:df:47:a6:18:59:3d:32:
                    1a:3d:45:e1:4d:5b:83:06:6b:55:08:10:19:3b:a1:
                    07:87:33:3c:54:fd:e2:9b:8d:a3:3b:0e:4e:fb:87:
                    7d:7f:e9:6e:4f:2e:07:a5:57:aa:45:6e:50:39:13:
                    62:23:2f:ee:92:a5:23:63:02:8d:ff:35:4e:89:13:
                    ef:06:8c:f8:6b:e1:9a:4d:79:4d:de:f9:b0:ec:02:
                    e4:e1:44:cc:9c:8a:3b:0e:4a:4c:2a:29:eb:bc:ee:
                    0f:f4:fd:ec:f8:1c:5f:8b:53:8d:ab:7d:a7:59:a2:
                    ae:65:a8:45:27:a7:e1:b9:3b:a6:f7:76:b3:4b:8c:
                    b7:88:9c:57:0b:6a:f0:23:ed:36:e0:42:1b:aa:cb:
                    da:c2:09:47:ee:7a:40:3d:f0:66:c6:be:a0:e6:44:
                    ea:4e:01:03:28:17:e8:4c:cb:0c:64:bc:05:f8:bd:
                    b5:4a:09:7e:6a:36:96:3d:68:a8:01:d5:d1:64:96:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:52:B3:D9:86:B8:7F:C4:5B:26:C6:D6:C4:DA:8B:0D:FD:E9:30:54
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:2d:f2:07:1b:d9:d8:72:c7:e5:9a:a7:14:f3:e2:0a:33:
         c3:6e:41:d8:4a:c4:bd:31:a0:f1:bf:20:a2:50:a9:06:60:92:
         e3:eb:2a:fa:88:07:44:91:ac:e4:b0:fb:e7:f5:07:b5:31:eb:
         d7:da:8e:ef:5a:f0:60:0a:ec:9b:fd:f6:8c:22:6b:b4:f8:cc:
         c7:1e:0a:37:dc:68:33:96:aa:09:c6:ce:7f:76:e1:6c:59:67:
         00:46:40:a3:d4:5f:aa:3c:93:a8:2f:92:6f:87:2c:be:5e:89:
         d3:48:c9:f1:a6:f2:db:be:be:6d:bf:89:33:9e:cb:26:16:c8:
         be:b7:37:aa:aa:4f:42:31:e2:7a:11:f4:b0:1e:50:22:7a:41:
         74:ae:20:22:68:4d:91:63:3d:9b:94:95:84:54:fa:51:51:d3:
         cc:50:fb:49:31:94:15:ca:65:89:e1:19:dc:02:d1:41:be:c0:
         9e:9c:c2:71:aa:e8:58:12:34:db:4e:8b:29:53:16:0f:46:25:
         35:37:58:89:c7:8a:4a:9d:30:66:37:a4:7d:b4:14:e8:4a:af:
         a5:f0:96:ce:a7:0b:55:ab:77:0c:f8:9f:69:43:62:c9:1e:dc:
         2b:f3:ef:ea:15:69:e2:49:37:88:0b:17:10:06:28:ee:d3:8f:
         42:c3:e4:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgyODIxMTAvBgNVBAUTKDFGNERDRTM0MzlCMUY0MDM1RkZGOEM3MUNFMzU5RTVE
MjBFNjlBMjQwHhcNMjUxMjA1MDQzMTIxWhcNMjUxMjEyMDQzMTIxWjAYMRYwFAYD
VQQDEw02OTMyNjAxYS1hNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHquCoWhJtka5V7u7HfYIHhg76DmPW7BNZJfksSG3+WcTxkv9WUVcZnml2Fu
Z+KIZHpHcYkGZVu/+8qEtf810Mc6Wd9HphhZPTIaPUXhTVuDBmtVCBAZO6EHhzM8
VP3im42jOw5O+4d9f+luTy4HpVeqRW5QORNiIy/ukqUjYwKN/zVOiRPvBoz4a+Ga
TXlN3vmw7ALk4UTMnIo7DkpMKinrvO4P9P3s+Bxfi1ONq32nWaKuZahFJ6fhuTum
93azS4y3iJxXC2rwI+024EIbqsvawglH7npAPfBmxr6g5kTqTgEDKBfoTMsMZLwF
+L21Sgl+ajaWPWioAdXRZJbsywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpSs9mG
uH/EWybG1sTaiw396TBUMB8GA1UdIwQYMBaAFB9NzjQ5sfQDX/+Mcc41nl0g5pok
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8yRjI1M0MxQUZC
RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlBTmZfNHh4empXZVhTRG1t
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0gwM09ORG14OUFOZl80eHh6aldlWFNEbW1pUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODI4Mi8yRjI1M0MxQUZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9IMDNPTkRteDlB
TmZfNHh4empXZVhTRG1taVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuvC3yBxvZ2HLH5ZqnFPPiCjPDbkHYSsS9MaDxvyCiUKkGYJLj6yr6
iAdEkazksPvn9Qe1MevX2o7vWvBgCuyb/faMImu0+MzHHgo33GgzlqoJxs5/duFs
WWcARkCj1F+qPJOoL5Jvhyy+XonTSMnxpvLbvr5tv4kznssmFsi+tzeqqk9CMeJ6
EfSwHlAiekF0riAiaE2RYz2blJWEVPpRUdPMUPtJMZQVymWJ4RncAtFBvsCenMJx
quhYEjTbTospUxYPRiU1N1iJx4pKnTBmN6R9tBToSq+l8JbOpwtVq3cM+J9pQ2LJ
Htwr8+/qFWniSTeICxcQBiju049Cw+R+
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:12:01 2025 by rpki-client