This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
File:                     r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json)
Hash identifier:          HqfXtKZddcu5yl5GRJg2BJcmWQK28dEFsaRFUEG6jjc=
Subject key identifier:   CB:33:05:96:6E:BC:12:9F:64:1C:FF:38:9C:06:3B:28:42:15:26:6E
Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84
Certificate issuer:       /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
Certificate serial:       0863
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
Manifest number:          0856
Signing time:             Sat 20 Dec 2025 20:07:47 +0000
Manifest this update:     Sat 20 Dec 2025 20:07:46 +0000
Manifest next update:     Sat 27 Dec 2025 20:07:46 +0000
Files and hashes:         1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: z0XzKImOcPWF8ZI9BTzH2qWONehNnjKNUoKQNIGbDJQ=)
                          2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
        Validity
            Not Before: Dec 20 20:07:46 2025 GMT
            Not After : Dec 27 20:07:46 2025 GMT
        Subject: CN=69470213-81cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:9d:ce:ae:fc:43:de:a0:67:60:3d:02:29:
                    d7:f2:a7:34:32:26:00:fd:91:ca:85:bf:bc:ca:d4:
                    6d:f9:8b:3c:fa:6d:94:e2:a8:bf:a9:fe:92:d7:61:
                    f3:2f:94:4e:70:a1:78:50:04:4e:64:30:bc:ca:05:
                    f7:b4:22:5b:0d:48:d7:f2:a8:f8:90:a8:4f:6f:6e:
                    c3:16:97:6b:02:c8:31:d0:25:0e:52:44:3e:ff:27:
                    d6:0a:97:e3:91:b7:dc:4f:44:8b:9c:29:09:3d:7a:
                    fd:24:ec:76:16:9e:eb:07:38:3e:d8:ec:e5:1b:59:
                    93:ea:aa:31:48:ea:13:67:a8:69:65:98:3d:b1:92:
                    2e:2c:71:06:aa:cc:46:05:c8:b8:81:4c:e6:ad:f4:
                    16:fc:2d:a5:40:7b:61:30:02:49:bf:3d:8f:34:4b:
                    08:da:17:3a:77:4d:53:c2:85:39:5c:60:0f:f3:6c:
                    fb:86:9d:db:cd:28:63:76:30:5b:0b:b3:48:c7:d8:
                    e3:20:cc:61:01:a6:d6:93:8d:f6:ba:3c:15:01:ec:
                    ec:00:1c:8a:d9:48:a3:8f:65:9d:db:f7:51:c5:9c:
                    ec:47:34:7c:d7:5e:75:66:b2:0b:1a:40:27:61:dd:
                    ef:dc:e2:92:f4:11:54:5a:73:ff:5b:ab:87:83:05:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:33:05:96:6E:BC:12:9F:64:1C:FF:38:9C:06:3B:28:42:15:26:6E
            X509v3 Authority Key Identifier:
                keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:96:55:32:40:63:67:6c:bf:67:94:fb:0b:3e:bf:9f:58:
         73:eb:bb:5f:de:f3:a5:03:06:40:08:d3:b6:53:6b:7e:2f:f7:
         83:f9:13:f0:35:2d:1c:ba:7f:f7:ef:0f:3b:5b:00:00:45:0a:
         27:78:70:82:28:7a:a0:f6:7a:cf:2b:e0:29:94:78:5a:09:19:
         61:c8:4d:1c:2b:08:c3:a7:0c:b7:cf:9b:e1:c5:27:7a:4a:71:
         c1:96:4d:ff:51:d9:e5:21:b1:03:c7:f7:28:19:f6:b5:17:78:
         c0:95:9f:e5:06:1e:03:df:62:c0:44:76:fb:87:f7:b7:07:c0:
         eb:c1:10:0b:de:25:ac:33:1d:73:35:1e:da:1d:88:f9:91:1e:
         52:25:e0:cb:f3:ff:ee:fc:f1:f6:a3:d7:35:3f:53:c2:84:e8:
         e5:86:88:e7:e8:19:3c:86:3d:56:a9:6a:ff:e0:e5:92:cb:11:
         7c:b4:ee:cf:a7:d3:21:c0:d4:e5:66:4c:db:39:07:6a:99:5d:
         5c:6c:7d:d7:c4:85:dc:79:b6:5b:7b:97:d2:d6:8b:9f:57:5d:
         86:0a:8a:69:cd:8f:20:a1:d5:09:f2:b8:57:9d:5f:89:86:e6:
         83:fe:77:02:b3:94:db:e0:fc:fc:19:2f:32:e1:db:d3:45:5e:
         7b:58:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:43:01 2025 by rpki-client