This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          VPTX2EZEiMr2MFKV3fglHVX3/Mk/q4/mEfs9vIl3nN0=
Subject key identifier:   A2:94:4D:54:A6:0D:2E:F0:1D:F8:4D:F5:4F:B4:59:83:2F:EF:5D:7A
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          0744
Signing time:             Sat 06 Dec 2025 22:02:18 +0000
Manifest this update:     Sat 06 Dec 2025 22:02:17 +0000
Manifest next update:     Sat 13 Dec 2025 22:02:17 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: syEc0EvAgScGhj/t6NH894pjiA1Cxf2LVVf5GYZze34=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: hVEGhELX1A8z+OTyICUg8ehNwNYoGDS6osi29y06XSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 22:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Dec  6 22:02:17 2025 GMT
            Not After : Dec 13 22:02:17 2025 GMT
        Subject: CN=6934a7ea-4545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:57:b8:dc:ae:b4:13:8a:2f:7f:58:92:7e:
                    f5:33:04:90:12:d6:86:56:b1:d7:43:62:02:9a:ea:
                    e6:06:f6:bf:37:a6:03:e7:a4:18:f7:59:ae:fd:44:
                    ce:cf:ec:ae:5c:e6:8c:65:82:90:81:81:c0:1c:18:
                    fa:36:d6:58:83:02:51:17:06:c3:53:57:13:9d:ec:
                    47:33:9b:94:dc:0a:f7:2f:21:07:9f:e8:7d:05:0c:
                    cf:35:b5:7a:4b:77:98:fe:0c:d0:34:55:52:5d:41:
                    2f:ff:d6:a6:c3:d4:51:b8:84:25:b9:4a:49:14:a2:
                    b6:06:cc:9b:7c:58:e9:ee:d8:78:d8:1d:28:3b:eb:
                    87:1a:93:64:ec:08:4c:af:e9:d2:4e:3e:a9:cb:be:
                    39:10:0f:f2:34:54:b6:27:37:ec:c9:43:98:d7:49:
                    2c:dd:99:c9:2e:a9:da:e5:0c:21:04:77:7f:c4:5b:
                    07:5b:bb:fb:44:2f:54:b5:ba:02:8b:b5:f8:7d:61:
                    c3:62:85:e1:fe:90:eb:c2:a9:02:7e:1c:e2:1a:c6:
                    58:df:bc:e6:6f:93:fe:f1:ea:cc:cd:7a:e9:74:13:
                    05:88:9b:9c:f1:d2:f2:81:cb:72:9c:27:f7:c5:4d:
                    02:96:cf:09:51:3a:43:d3:43:52:27:8f:84:b9:e7:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:4D:54:A6:0D:2E:F0:1D:F8:4D:F5:4F:B4:59:83:2F:EF:5D:7A
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:05:d3:7d:0c:ae:2d:69:32:36:1c:10:31:ce:cf:9d:0f:1f:
         d2:e5:2c:6f:bb:3c:8e:28:c8:b2:71:92:59:fb:6d:7e:0e:57:
         74:c7:d1:32:1a:e1:e8:37:86:fe:b3:e4:9c:72:5a:a9:53:80:
         75:88:39:ac:c6:73:07:0c:fd:42:ae:f2:72:93:bc:c1:27:82:
         02:fa:62:31:5f:5b:dc:1c:44:f1:e5:55:40:b8:3a:ba:64:07:
         af:82:06:b7:7b:16:ba:d8:a7:4b:83:d1:2a:b8:84:4d:7f:7e:
         32:5e:2c:84:c5:c4:d0:43:ff:3f:72:5d:16:8e:39:78:e3:22:
         18:97:d6:78:8e:9c:d1:4d:63:75:b6:c2:74:7b:10:2d:06:6b:
         84:6f:2f:b2:8d:a7:47:93:ea:67:3f:ed:4e:91:4d:18:6f:a4:
         0e:ce:dd:0e:d8:6d:9c:0b:56:82:55:8b:ea:ee:05:69:08:75:
         53:31:7d:1a:a6:f2:0c:79:86:3f:e7:a1:30:58:72:47:11:47:
         a0:91:94:21:2e:1c:9a:0f:d4:f8:f5:05:7d:be:c5:69:e2:1a:
         26:25:e1:6b:50:8d:a8:ec:42:22:2c:e3:61:09:da:bd:04:2b:
         74:2c:ff:d2:93:25:d4:45:d5:74:49:7e:c5:fa:3d:67:1b:1c:
         f3:9d:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:19 2025 by rpki-client