This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier:          Cp8zQ4P2Df7u0efwcxd8Zbi8KpIOq/mnZQ+k1VUGkVA=
Subject key identifier:   3F:59:12:A4:9B:5D:74:7E:72:1A:A2:2D:80:E8:91:24:DD:14:A1:EC
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number:          0423
Signing time:             Thu 04 Dec 2025 22:49:55 +0000
Manifest this update:     Thu 04 Dec 2025 22:49:54 +0000
Manifest next update:     Thu 11 Dec 2025 22:49:54 +0000
Files and hashes:         1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: CP2ngmd4KjwR/IwvbDYi0cnfJ8H4H4jdf7+RggKMGLc=)
                          2: F4639D76356211F09A66C487C4F9AE02.roa (hash: PHU5aUvAOrBIKy7huYHffiKA6xh2xWAfjAUu0W1+Jtw=)
                          3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: XE/ZbmFKgtcJ8d/T46yRFJ9hkQIFqFEENN93aFpVlI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Dec  4 22:49:54 2025 GMT
            Not After : Dec 11 22:49:54 2025 GMT
        Subject: CN=69321012-7d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:77:cd:6f:dc:1b:60:ca:6c:67:36:b7:8c:1e:
                    5f:fc:dc:d2:2c:74:e6:63:a3:a7:fb:8f:a6:b3:89:
                    f1:7d:3f:c6:15:b9:f5:e6:3a:59:b5:11:d0:01:b0:
                    35:76:30:90:2c:f6:59:b2:dc:17:bb:e7:64:8b:57:
                    0a:15:d8:e3:63:d1:1e:df:b6:66:85:32:47:e1:f2:
                    69:2f:02:9b:b1:ea:de:70:9d:1f:f2:e5:3e:c2:a8:
                    e9:3c:44:39:f1:2c:0c:b2:b6:1e:9f:55:38:cf:be:
                    d8:ee:a7:b9:87:06:be:c8:ee:0f:ca:f7:25:fd:d3:
                    dd:26:87:f3:6a:7c:09:95:b6:ea:a6:8b:80:ce:aa:
                    29:9b:df:ea:26:55:b6:63:b2:f3:a9:a4:d4:bb:b5:
                    8c:db:66:60:50:9a:83:88:68:7b:73:67:19:eb:30:
                    2a:1f:5b:d1:d1:d4:40:d7:f6:30:65:46:82:33:44:
                    29:04:ec:3b:b2:45:8b:e2:a9:d9:35:99:b9:c0:1c:
                    be:c7:26:79:aa:81:ee:59:1a:d3:56:d3:5b:af:d1:
                    97:35:c3:38:aa:c3:86:5e:9e:a5:86:ed:bb:49:73:
                    74:99:8c:3b:6d:36:d1:c3:1a:22:c8:c5:46:34:38:
                    62:11:f6:da:a2:9f:41:83:06:61:52:e3:d7:ab:c9:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:12:A4:9B:5D:74:7E:72:1A:A2:2D:80:E8:91:24:DD:14:A1:EC
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3a:67:aa:35:4d:3c:36:5d:e5:db:fd:fa:4d:f4:e8:22:e4:
         8d:26:1a:34:a6:ac:44:f3:46:66:3e:d7:08:d0:88:84:d7:b1:
         81:cb:74:f7:08:d6:71:d5:8d:c9:66:e8:c4:02:a7:bf:42:3b:
         da:63:31:05:f6:ae:ba:3c:ad:06:76:4c:90:62:fa:69:ef:f9:
         f8:3b:d1:aa:ca:2e:1b:a3:65:93:7c:e3:56:dd:39:b3:b5:d2:
         24:59:06:31:b8:da:b7:fe:db:e2:3b:a9:0f:a6:b2:5d:b8:dc:
         7c:de:0f:71:90:75:c7:22:f3:3a:fe:85:ed:e7:3c:36:d4:af:
         9e:db:28:cd:19:c3:2f:30:aa:64:b4:da:72:c8:f5:e9:9e:ec:
         08:41:ed:08:15:66:e2:12:e2:b8:6e:0f:7e:46:56:1a:9e:5b:
         0d:65:a0:93:70:14:66:40:bc:79:ff:eb:2a:b0:57:cc:0a:c2:
         72:39:8c:b7:51:fe:e0:28:f7:8b:da:e5:b5:f8:e2:65:e5:ae:
         cd:8b:20:18:2b:40:ba:f0:ad:88:fb:e4:18:62:80:cf:a2:8a:
         c6:be:27:16:e3:7f:ee:9f:4b:9f:15:8a:3a:b4:ff:8c:e6:14:
         a5:e0:87:5d:ab:82:87:42:86:d0:3d:db:78:35:4c:8c:b1:5e:
         77:4c:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:30:55 2025 by rpki-client