This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          hneVfxSfDIMVX6UnDWC+28UQrdrQfxJnEDOXpRhdb9I=
Subject key identifier:   79:C8:B6:AB:24:58:78:41:3F:D8:0D:1C:C6:A0:AA:90:53:A9:44:0A
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          07FE
Signing time:             Sat 20 Dec 2025 20:34:42 +0000
Manifest this update:     Sat 20 Dec 2025 20:34:42 +0000
Manifest next update:     Sat 27 Dec 2025 20:34:42 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: +9ZlDFGxfRu2LJ1Qs6gcWM/TBlxUJFG1gOsmJrcJxmk=)
                          2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 20:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: Dec 20 20:34:42 2025 GMT
            Not After : Dec 27 20:34:42 2025 GMT
        Subject: CN=69470862-25c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:71:78:15:ef:1a:8d:e9:5e:13:31:ad:42:
                    c0:40:e4:d4:2f:32:72:b0:90:8a:8e:dc:e0:a8:78:
                    12:c4:6f:d8:31:00:0b:b2:35:c2:a7:50:d4:ef:c4:
                    0f:fa:03:8c:e7:3c:9e:ad:f4:08:10:53:60:f0:3b:
                    49:0e:d2:f8:ea:9f:9b:d6:0d:d1:c7:5c:5e:36:2f:
                    17:5f:8d:68:25:82:7d:f9:2f:fb:1c:3e:ef:71:d7:
                    ce:ab:a8:97:d9:12:48:a0:d9:4d:1d:ba:5d:c2:c1:
                    8b:40:4e:07:61:c3:dd:6e:79:33:af:c6:d1:cc:e1:
                    cf:66:5f:2d:b6:0b:07:bd:f0:32:62:ec:6e:ef:f3:
                    09:0e:d8:9f:5d:87:4b:8b:80:2f:c3:32:c8:85:ca:
                    36:6a:42:8e:74:e8:3a:47:b2:ed:e9:5a:ef:6f:00:
                    0d:93:f0:2e:67:ef:91:d2:98:d6:90:36:2e:78:91:
                    8f:b9:05:2e:a0:24:00:66:79:4a:55:d5:8e:b2:df:
                    09:4b:6b:66:43:a1:b2:5e:81:39:36:83:17:cb:ad:
                    27:93:41:39:b3:7e:ab:76:33:ae:c2:b4:f9:03:8e:
                    66:77:93:05:fa:c5:4c:d6:79:ad:aa:2c:3b:b8:f3:
                    77:2a:e7:cf:62:dd:b1:19:20:a6:2c:b4:8c:ce:c9:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C8:B6:AB:24:58:78:41:3F:D8:0D:1C:C6:A0:AA:90:53:A9:44:0A
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:55:37:ec:ff:83:6a:24:5e:e2:af:f2:0d:bd:e7:15:86:d3:
         39:6c:e0:3b:7d:8c:f4:74:cc:fc:2d:b5:ab:71:21:7e:f3:f2:
         07:54:63:67:27:2f:31:7a:59:6b:82:74:ac:e5:9f:b7:98:69:
         35:be:0c:10:c4:c8:fa:84:f6:74:f3:03:00:a6:39:35:1b:fd:
         1e:46:87:46:71:e8:e5:a5:5d:55:77:7c:52:d7:c7:d1:97:91:
         ed:91:f6:ad:ca:09:59:83:97:a4:00:47:05:66:3a:fb:3d:58:
         09:49:68:b7:2f:1b:b6:1a:b3:ff:14:3b:4a:24:86:fc:18:a3:
         a3:fb:8f:a9:db:76:55:c4:e1:bc:e1:f3:a9:b3:f1:7c:5b:c5:
         68:f5:fd:32:80:cf:5f:7e:e0:4f:ef:b7:4c:8b:f8:f3:b0:45:
         a0:c5:5a:24:95:28:73:65:ac:71:0d:88:99:04:c4:af:19:c3:
         a7:69:41:df:ba:8a:d9:38:d9:0d:91:f4:ea:b9:c2:fe:52:91:
         81:54:28:c6:b2:e4:f2:67:94:38:b6:37:47:fd:b8:0b:77:55:
         f4:4d:76:39:fd:53:51:88:77:0f:1f:72:7b:7a:f4:b6:ef:1e:
         c8:00:3d:9e:1c:d6:a4:cf:c6:af:9d:b5:59:1a:a6:7b:c2:8a:
         de:1f:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:14:26 2025 by rpki-client