This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File:                     81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier:          Lm7YZUm4X7Z0tb5xjYC29D7EW5ijT1eE+C9wuOfPvrY=
Subject key identifier:   77:D8:09:72:2B:DE:5C:B8:FE:40:FF:22:94:27:82:20:81:95:47:04
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer:       /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial:       080F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number:          07F6
Signing time:             Thu 04 Dec 2025 20:14:32 +0000
Manifest this update:     Thu 04 Dec 2025 20:14:31 +0000
Manifest next update:     Thu 11 Dec 2025 20:14:31 +0000
Files and hashes:         1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: lNHpOR9jnyWjunwp6ml7uyDWxXVsGX3wE2q8XtUWOKw=)
                          2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
        Validity
            Not Before: Dec  4 20:14:31 2025 GMT
            Not After : Dec 11 20:14:31 2025 GMT
        Subject: CN=6931eba8-415d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:29:43:80:e9:06:d0:b7:86:22:ca:d5:93:
                    54:84:d8:c1:72:00:70:f1:04:81:1c:e6:51:dd:25:
                    df:c5:52:10:b4:b6:15:41:0e:d1:1b:b7:73:f9:4f:
                    fc:6b:3c:ae:5e:f4:a9:cc:8d:aa:f3:8b:2f:67:a1:
                    ed:00:f9:42:42:3d:b5:20:62:80:e8:db:04:a4:5f:
                    d3:06:78:3c:f6:62:48:78:34:b7:27:06:99:30:0f:
                    ba:cc:9d:06:85:15:9a:3d:1b:59:1e:53:0d:7b:5c:
                    1d:d6:b0:1f:9b:77:94:6e:78:ce:de:46:f7:4d:48:
                    74:6a:f3:0b:2a:d8:00:9f:d7:f4:26:90:4c:44:b4:
                    57:a4:d1:c5:c8:42:e9:d4:b7:39:0c:b1:02:11:da:
                    8a:cb:a8:9c:17:4c:23:db:70:ab:59:45:60:c0:fc:
                    b2:ce:70:d5:8a:1e:cc:e5:72:0a:73:d6:1e:1d:be:
                    ac:d5:dc:b5:9e:0b:bb:52:f0:ea:c9:25:44:8b:28:
                    ca:37:25:8a:33:a9:b3:41:5e:e4:bf:97:30:5f:07:
                    88:91:fa:17:5f:c7:ef:25:9f:52:ce:ef:78:73:89:
                    bf:75:cb:cb:49:56:dd:30:ff:7c:d9:31:2f:08:00:
                    93:12:09:5d:43:2a:d0:a1:37:d5:23:2b:23:cd:d2:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D8:09:72:2B:DE:5C:B8:FE:40:FF:22:94:27:82:20:81:95:47:04
            X509v3 Authority Key Identifier:
                keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:7b:aa:71:61:d4:32:db:e7:30:7a:6b:f5:f1:9c:22:d5:
         1b:ac:b4:22:05:bf:95:f1:2e:05:f0:4e:59:4e:71:56:a4:3d:
         ea:65:e8:e4:a8:64:e8:73:c6:1a:87:2f:14:5c:52:a1:e5:62:
         a6:9d:83:5b:c5:cf:e2:b3:da:e7:56:e3:b4:91:0e:72:cb:57:
         67:c3:e2:20:00:85:e5:19:33:72:d1:a8:c0:aa:43:82:66:12:
         73:43:42:96:04:5e:eb:e6:bd:a0:82:eb:1a:61:76:09:1e:4c:
         d6:51:8f:ff:a9:f4:a6:fc:e2:f5:46:60:df:8e:83:ab:1c:d3:
         41:f7:67:9f:c8:f0:29:31:19:3f:95:64:f5:60:5f:d5:ed:b9:
         13:b8:30:80:72:26:90:27:18:de:91:f4:25:61:a6:41:81:5c:
         20:5b:7d:2a:d6:ca:bb:e9:c9:66:05:37:22:09:33:74:30:4a:
         2e:f5:0e:56:6a:c6:d5:c0:b4:82:39:d7:8b:21:17:f4:76:fe:
         68:ef:d2:fe:47:ae:4a:63:af:ed:29:32:d0:01:99:7b:b4:61:
         7e:e4:52:3e:88:26:e3:6d:f3:d3:f8:4d:8a:58:31:0c:c1:fb:
         42:a6:23:43:95:41:76:8c:97:db:42:fd:2f:d3:37:24:6f:62:
         8d:3b:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:38 2025 by rpki-client