This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
File:                     L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json)
Hash identifier:          hwQK5NnzfZYnta86ktBy3NThoL0SWLAnydhnQ5V7bq8=
Subject key identifier:   F9:98:01:30:A5:8B:B7:4E:26:B7:06:EE:F3:DE:0E:D6:7E:9B:B3:46
Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5
Certificate issuer:       /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
Manifest number:          028A
Signing time:             Thu 04 Dec 2025 23:55:15 +0000
Manifest this update:     Thu 04 Dec 2025 23:55:14 +0000
Manifest next update:     Thu 11 Dec 2025 23:55:14 +0000
Files and hashes:         1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: Fy4Iayu7O3PZNQqNzcgFHsfIoUK7P4QEVw8pxw6m+NI=)
                          2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: YiqHt1NmkyZeQGkCylb3t5kmyZBllHOZPJhWp7tXWTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl
                          rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5
        Validity
            Not Before: Dec  4 23:55:14 2025 GMT
            Not After : Dec 11 23:55:14 2025 GMT
        Subject: CN=69321f62-7165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:af:73:f6:b6:73:f2:cf:2b:93:be:7d:ec:
                    7e:c8:e1:1e:40:29:f8:fc:24:85:fd:78:e9:cd:1f:
                    10:1c:58:c5:f5:db:d2:f9:60:26:6b:c6:08:60:2e:
                    f8:81:9e:db:66:2f:c4:cb:e6:10:7c:07:65:45:18:
                    f1:60:ca:3a:f0:e0:d3:92:66:be:8b:32:50:de:1b:
                    f1:53:1b:05:73:00:2c:69:ad:b2:d0:fc:ab:df:ae:
                    74:ca:a1:85:fe:5e:0b:12:f0:90:b2:b2:36:17:d5:
                    c4:f5:ed:71:0b:02:3c:5e:fc:8e:2c:99:b1:67:21:
                    24:2a:13:af:43:3b:1b:b4:bb:04:a2:15:7e:58:60:
                    87:39:4a:f9:2a:d5:0f:d4:0c:98:a1:23:27:f6:db:
                    3d:25:ff:4f:f3:67:90:a7:60:bd:de:ac:10:68:1f:
                    10:7b:d0:5c:39:61:d3:ba:50:a6:f9:72:bb:6a:63:
                    50:bb:db:5a:6c:fd:68:35:4e:06:25:44:14:58:4d:
                    6a:05:ca:75:b8:98:c0:a6:78:b7:5f:c2:be:51:1b:
                    44:22:42:07:38:39:11:93:dd:23:81:c5:bc:40:5f:
                    ae:49:48:c7:05:54:61:18:9f:65:06:a8:36:a8:6f:
                    28:b6:21:e9:4b:55:4a:40:ca:6a:ca:fb:6f:3d:da:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:98:01:30:A5:8B:B7:4E:26:B7:06:EE:F3:DE:0E:D6:7E:9B:B3:46
            X509v3 Authority Key Identifier:
                keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:18:21:22:9e:bd:9d:d1:f6:c2:45:32:cc:44:b0:bb:47:ac:
         0c:ad:8e:67:cc:22:5d:ae:a9:72:aa:4b:95:0f:99:d1:21:e0:
         de:01:02:b5:6e:eb:63:6f:92:48:7a:78:73:8a:ac:63:9f:d0:
         63:7a:7f:be:a4:5e:32:74:62:49:11:4d:95:95:c3:35:7b:43:
         54:27:3d:12:c8:8b:30:b0:b5:44:ef:25:eb:5d:b3:cf:fa:a3:
         0e:9f:50:02:f8:7a:14:d0:6b:01:89:2d:83:58:c2:6c:b3:9e:
         68:b8:5a:d6:55:5c:fb:6f:f3:68:9c:fb:6a:ae:c9:df:c2:09:
         b9:a5:66:62:6b:92:6a:13:08:7a:82:70:0c:8e:f1:73:e2:d2:
         94:69:ec:20:05:d9:57:9f:fa:5f:18:7c:9d:ff:aa:2b:09:dc:
         04:65:48:97:b0:89:0a:12:a1:91:96:aa:e5:11:8e:49:93:cd:
         07:f5:36:66:9a:df:2e:d2:bc:76:91:0c:38:0b:b7:a4:3b:f0:
         6e:0f:d4:64:17:21:9e:b4:80:e7:9c:6a:5b:86:65:57:a7:79:
         48:e7:01:63:48:35:0b:a0:32:cb:57:cd:5c:58:49:9b:70:04:
         90:93:f6:8b:ac:ff:d0:c8:d1:96:46:b8:ab:0a:a2:1a:c7:a2:
         c4:3b:9e:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE
N0IyNDY2RTUwHhcNMjUxMjA0MjM1NTE0WhcNMjUxMjExMjM1NTE0WjAYMRYwFAYD
VQQDEw02OTMyMWY2Mi03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTWvc/a2c/LPK5O+fex+yOEeQCn4/CSF/XjpzR8QHFjF9dvS+WAma8YIYC74
gZ7bZi/Ey+YQfAdlRRjxYMo68ODTkma+izJQ3hvxUxsFcwAsaa2y0Pyr3650yqGF
/l4LEvCQsrI2F9XE9e1xCwI8XvyOLJmxZyEkKhOvQzsbtLsEohV+WGCHOUr5KtUP
1AyYoSMn9ts9Jf9P82eQp2C93qwQaB8Qe9BcOWHTulCm+XK7amNQu9tabP1oNU4G
JUQUWE1qBcp1uJjApni3X8K+URtEIkIHODkRk90jgcW8QF+uSUjHBVRhGJ9lBqg2
qG8otiHpS1VKQMpqyvtvPdo26wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmYATCl
i7dOJrcG7vPeDtZ+m7NGMB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD
RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1
SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVGCEinr2d0fbCRTLMRLC7R6wMrY5nzCJdrqlyqkuVD5nRIeDeAQK1
butjb5JIenhziqxjn9Bjen++pF4ydGJJEU2VlcM1e0NUJz0SyIswsLVE7yXrXbPP
+qMOn1AC+HoU0GsBiS2DWMJss55ouFrWVVz7b/NonPtqrsnfwgm5pWZia5JqEwh6
gnAMjvFz4tKUaewgBdlXn/pfGHyd/6orCdwEZUiXsIkKEqGRlqrlEY5Jk80H9TZm
mt8u0rx2kQw4C7ekO/BuD9RkFyGetIDnnGpbhmVXp3lI5wFjSDULoDLLV81cWEmb
cASQk/aLrP/QyNGWRrirCqIax6LEO57S
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:05:29 2025 by rpki-client