This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File:                     h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier:          U2WUorb4oKWmZ1A0UmMojfl4GZ62UCd3hnDh6+2k6lc=
Subject key identifier:   F3:3A:E7:72:08:3C:C3:0B:AE:CF:6C:CD:53:E5:C1:CD:69:F8:5D:65
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer:       /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial:       0EBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number:          122A
Signing time:             Mon 22 Dec 2025 17:19:30 +0000
Manifest this update:     Mon 22 Dec 2025 17:19:30 +0000
Manifest next update:     Mon 29 Dec 2025 17:19:30 +0000
Files and hashes:         1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: WK4K9Xwg6FvdiowJDbib8j6f/eGxTQM9EGpS4E83mYk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3771 (0xebb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
        Validity
            Not Before: Dec 22 17:19:30 2025 GMT
            Not After : Dec 29 17:19:30 2025 GMT
        Subject: CN=69497da2-205e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:5a:55:3e:a2:fe:ce:43:c4:55:d8:2f:cb:
                    b4:42:bf:a0:7a:5d:0f:d0:1d:1c:69:22:9e:36:2e:
                    5d:9b:15:2f:68:f8:f4:7c:36:4f:f4:f7:cb:07:9c:
                    56:ff:1e:bc:30:81:28:20:37:93:14:42:a5:2c:3f:
                    8e:a5:0a:4c:c3:3e:e0:4a:8c:1a:14:ee:9a:fc:e0:
                    a3:e4:c2:c8:56:d2:8a:8c:5b:92:92:72:df:33:08:
                    d4:f7:8a:43:b0:10:4d:9e:83:e1:54:a1:05:7f:94:
                    90:bf:1c:32:42:82:e9:7f:50:bc:f9:85:6a:f4:0f:
                    bb:e1:b1:4b:68:23:40:ed:97:e6:b2:0f:97:fc:5f:
                    6a:27:1a:4f:d4:72:be:aa:fe:eb:26:fb:7e:b3:44:
                    c7:e9:ba:db:21:bc:56:a2:95:c5:c7:2c:f3:5f:b7:
                    2b:5c:97:ba:73:3c:84:cc:b9:82:ca:8d:e6:67:d6:
                    0e:b4:dc:2f:0a:13:c3:fb:89:99:3c:f2:08:a0:f2:
                    8e:c7:4f:73:56:a5:13:a7:a3:8f:ee:fe:71:6c:23:
                    28:2e:ac:e7:8e:97:00:21:33:01:37:6f:c2:4f:d9:
                    0a:55:34:e7:e6:68:d8:40:b0:09:6b:c9:02:ef:19:
                    f6:c1:29:e6:87:a9:cc:92:b0:14:ca:a2:10:6a:65:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:E7:72:08:3C:C3:0B:AE:CF:6C:CD:53:E5:C1:CD:69:F8:5D:65
            X509v3 Authority Key Identifier:
                keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:36:70:cd:e1:b0:36:18:7c:9f:c8:f9:67:41:b7:04:a5:44:
         04:18:59:6b:ad:5e:fe:dd:63:a0:78:a7:12:93:28:ab:5e:9e:
         85:06:29:2c:59:3e:30:62:44:e0:df:d8:ff:22:5e:02:90:5b:
         6b:d6:e7:6b:78:1b:6a:39:8b:b2:1c:6d:87:d1:d8:5e:50:86:
         7e:b6:fc:01:4a:fa:34:06:4f:52:bc:40:0b:c2:aa:05:2f:eb:
         8f:09:01:48:9e:d0:fd:f3:e2:60:87:25:a3:41:95:5d:73:d9:
         e1:ed:ec:de:8c:72:04:89:aa:3c:68:7f:24:1a:ac:7b:c8:3f:
         da:7b:3b:b7:62:32:60:de:c6:71:8c:82:c3:6e:d8:93:c3:6f:
         85:72:02:56:c6:57:d2:09:5e:25:4f:7e:ed:e2:ec:2d:97:2e:
         fa:fe:7e:83:8c:ff:c6:df:62:b4:01:03:1c:8f:3c:e7:c4:52:
         2b:d7:20:0e:6c:5f:03:0c:a1:c5:30:b4:c4:5f:46:19:2a:c5:
         42:39:13:1b:10:b3:a0:25:46:2d:8a:35:e6:1d:b4:af:50:d5:
         6f:13:9c:e3:ad:e4:4e:ce:3c:13:9b:44:6c:ee:82:6e:49:a3:
         81:0d:54:af:bf:30:6b:8e:bf:da:97:2d:43:d6:0c:df:71:44:
         90:7b:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:35 2025 by rpki-client