This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File:                     h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier:          pUUuDMcsc1nYqtTSONCmbNxHIiVwFjK8FBlRl8SmCWE=
Subject key identifier:   D5:AD:41:7A:BC:0A:E4:69:D1:54:F0:12:24:0A:7F:EA:27:05:5F:4C
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer:       /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial:       0EB9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number:          1226
Signing time:             Thu 18 Dec 2025 17:28:31 +0000
Manifest this update:     Thu 18 Dec 2025 17:28:30 +0000
Manifest next update:     Thu 25 Dec 2025 17:28:30 +0000
Files and hashes:         1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: CFKvu8CuVEYdm2MbrUjqwzo1qUXA6CKiRWXXwjw7O1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 17:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3769 (0xeb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
        Validity
            Not Before: Dec 18 17:28:30 2025 GMT
            Not After : Dec 25 17:28:30 2025 GMT
        Subject: CN=694439be-547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:d1:72:31:fa:b4:bf:4f:cb:48:01:b7:2e:
                    ad:6c:c3:cb:b9:57:a8:09:18:72:ff:a5:43:0b:93:
                    fd:a2:f5:94:41:69:20:88:5c:35:90:5c:a2:c1:92:
                    09:61:e9:93:b5:f7:a0:79:f1:f5:bc:59:bf:0e:5b:
                    99:d0:b9:c3:2f:aa:6b:60:ab:b6:52:c8:51:3a:af:
                    e4:52:e8:1f:8e:ec:2c:1f:ff:c3:3f:52:71:76:1d:
                    32:43:f7:11:eb:22:d6:ea:a8:01:fe:dc:90:4b:fb:
                    6e:cf:00:2a:6c:a4:24:24:5b:ae:68:57:c2:ea:3e:
                    8b:04:15:21:be:02:44:79:ba:96:16:0d:e7:29:f0:
                    12:20:94:0c:b5:24:a6:3f:64:36:af:0b:12:9d:ab:
                    06:6e:3b:cc:73:df:7c:b4:3e:2d:9d:01:06:b4:2f:
                    74:96:52:76:c2:66:04:b8:58:33:ce:b7:4e:a2:1c:
                    2d:fe:64:b8:03:e0:18:65:70:b1:e5:e6:10:79:7e:
                    c5:0b:bf:6f:bd:42:b5:6a:7f:31:a1:93:93:ba:af:
                    bc:2b:eb:db:01:0a:e1:f0:85:cb:ce:b4:f2:33:1e:
                    26:3b:97:77:b8:13:68:50:a9:d9:de:db:bf:6c:3f:
                    75:52:ec:6e:e1:5d:f9:0c:70:94:09:79:db:67:6d:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:41:7A:BC:0A:E4:69:D1:54:F0:12:24:0A:7F:EA:27:05:5F:4C
            X509v3 Authority Key Identifier:
                keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:07:f5:ad:b2:9f:07:1d:05:c8:c5:e1:6d:85:4c:ad:45:89:
         67:33:70:eb:76:84:71:dc:5a:f2:59:18:66:a3:7b:00:62:46:
         cd:12:69:d6:84:e1:7a:86:3a:1c:b1:cb:02:83:c0:36:c8:a1:
         4d:e3:52:6c:90:ac:b1:ee:91:cb:09:4a:d1:00:1c:88:74:8c:
         1a:09:ee:2f:9c:b1:81:d7:ab:e4:65:da:c2:65:29:1c:db:23:
         c0:b8:2a:2f:1e:6b:0e:5e:ec:94:fb:d1:20:2c:8d:c4:e3:9f:
         ae:37:e2:b0:ec:d9:49:a5:8d:0a:98:ca:ad:cb:cb:50:22:07:
         7a:f2:9e:dd:1e:e5:09:7c:7a:09:c7:ed:43:60:7a:38:9d:3f:
         a6:c0:a8:a3:21:77:00:9a:ca:f5:06:3a:b0:09:2a:b4:13:0b:
         c6:1a:a4:b5:34:ac:b6:6f:d2:3e:7a:e4:b3:93:fc:41:cf:9d:
         c6:71:f0:a4:9c:0e:12:f6:57:38:25:44:64:2b:21:b8:e2:77:
         f3:db:be:66:b4:95:0f:0a:e5:88:88:ec:f4:a6:95:77:33:41:
         51:a6:a3:97:d5:86:87:94:85:a1:ef:7f:bf:b7:8b:80:3c:08:
         ac:88:c4:94:1e:d3:db:1b:9f:07:ed:98:5e:42:a5:e5:a9:bb:
         96:a3:6b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client