This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File:                     Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier:          bLfKroYoGE/aoLh0WteAEGZ4qShbSI/HjWhCl6elgmA=
Subject key identifier:   DB:31:73:FA:A6:C6:11:54:1A:BF:28:5D:7A:99:83:F9:AE:87:62:69
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer:       /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial:       3566
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number:          352B
Signing time:             Sat 06 Dec 2025 14:15:32 +0000
Manifest this update:     Sat 06 Dec 2025 14:15:32 +0000
Manifest next update:     Sat 13 Dec 2025 14:15:32 +0000
Files and hashes:         1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: NTjwypEjmu77jzYajulhQtlP28f+bfJhQEHSWIMnQQI=)
                          2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
                          3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
                          rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13670 (0x3566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
        Validity
            Not Before: Dec  6 14:15:32 2025 GMT
            Not After : Dec 13 14:15:32 2025 GMT
        Subject: CN=69343a84-024c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:bb:73:6e:1b:9a:2d:78:d6:a9:c9:d0:ba:
                    32:16:8d:68:eb:46:7a:57:42:a9:1c:3e:cf:9b:e2:
                    5a:e6:47:98:ea:be:d4:45:22:d0:fb:10:f7:60:4f:
                    f4:1e:18:20:71:59:66:07:09:ed:92:41:57:e6:36:
                    7f:ec:c7:df:35:39:99:5d:fe:0d:54:b7:37:e8:2b:
                    a7:7c:8f:0d:3f:b1:d5:9e:a0:ef:44:1a:42:97:47:
                    30:49:cc:49:4c:84:ed:ec:ea:1d:28:dd:ac:be:a9:
                    33:42:23:0f:ae:a4:31:49:d4:a3:6e:06:29:54:ad:
                    cb:eb:56:93:89:4d:ea:c0:5b:95:31:c0:f8:03:60:
                    53:bd:a4:f4:80:67:c4:6c:8b:56:31:76:4f:38:6c:
                    82:79:bf:89:ce:cd:f5:f2:f4:68:94:a9:f7:fe:68:
                    6a:89:d5:83:11:3b:aa:f1:57:1d:df:ab:ba:dc:0c:
                    d8:03:e4:cd:30:7b:eb:7a:b3:d3:f0:bd:71:71:fc:
                    4e:b1:bd:67:3a:71:0b:c9:a3:5d:e3:5e:6f:93:04:
                    9c:18:c5:f7:56:fb:2a:82:3c:3a:81:54:97:fe:f8:
                    bd:3f:b0:1b:b3:53:4e:2e:f1:ba:8b:1b:1d:f5:4b:
                    03:6c:d4:19:62:b9:ce:5d:aa:db:43:af:59:f8:9d:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:31:73:FA:A6:C6:11:54:1A:BF:28:5D:7A:99:83:F9:AE:87:62:69
            X509v3 Authority Key Identifier:
                keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:74:49:ea:df:14:d5:22:e9:d0:1b:7b:59:78:d5:0d:b1:27:
         4b:74:c3:62:32:fe:5c:a2:62:28:d7:fc:57:35:32:27:cf:23:
         06:c4:c9:8d:85:b1:b4:f3:86:29:f7:8a:44:96:2f:7d:10:8f:
         9e:76:e9:28:19:08:7c:17:cb:c4:55:91:c5:c3:d7:0f:10:54:
         09:3d:6c:d7:e1:c1:73:45:3f:bf:05:8d:40:fd:6f:27:89:4b:
         cd:e8:5c:22:0a:8d:fb:a2:e4:60:f0:fe:2b:fc:cd:2e:23:d8:
         96:f9:15:cb:a5:6f:ee:07:de:a3:71:e8:c8:0b:27:70:36:f4:
         46:23:ba:51:3e:2d:41:e5:54:06:4e:24:00:76:33:5a:96:f4:
         26:a3:e9:f1:87:73:0b:48:f1:c4:9d:06:0a:2d:25:a4:95:8b:
         f7:df:a7:12:ec:f7:ea:cf:c8:c7:ce:c3:43:4c:62:64:d9:d1:
         ab:41:6d:33:1b:42:2a:ea:ac:1f:ac:fc:0c:7d:ce:5b:68:ac:
         b7:2c:27:2a:49:1b:bb:63:50:c4:e9:9f:0c:d6:08:26:1a:60:
         1d:17:1e:e8:7d:dd:df:c7:15:41:85:e3:f3:9a:60:2b:5d:89:
         e6:b7:3d:54:15:5a:5b:06:65:c6:c3:40:4e:a7:77:38:1a:14:
         56:f3:6a:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC
Mjg3MTI2QTEwHhcNMjUxMjA2MTQxNTMyWhcNMjUxMjEzMTQxNTMyWjAYMRYwFAYD
VQQDEw02OTM0M2E4NC0wMjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsS7c24bmi141qnJ0LoyFo1o60Z6V0KpHD7Pm+Ja5keY6r7URSLQ+xD3YE/0
HhggcVlmBwntkkFX5jZ/7MffNTmZXf4NVLc36CunfI8NP7HVnqDvRBpCl0cwScxJ
TITt7OodKN2svqkzQiMPrqQxSdSjbgYpVK3L61aTiU3qwFuVMcD4A2BTvaT0gGfE
bItWMXZPOGyCeb+Jzs318vRolKn3/mhqidWDETuq8Vcd36u63AzYA+TNMHvrerPT
8L1xcfxOsb1nOnELyaNd415vkwScGMX3Vvsqgjw6gVSX/vi9P7Abs1NOLvG6ixsd
9UsDbNQZYrnOXarbQ69Z+J17EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsxc/qm
xhFUGr8oXXqZg/muh2JpMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE
NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4
RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTdEnq3xTVIunQG3tZeNUNsSdLdMNiMv5comIo1/xXNTInzyMGxMmN
hbG084Yp94pEli99EI+edukoGQh8F8vEVZHFw9cPEFQJPWzX4cFzRT+/BY1A/W8n
iUvN6FwiCo37ouRg8P4r/M0uI9iW+RXLpW/uB96jcejICydwNvRGI7pRPi1B5VQG
TiQAdjNalvQmo+nxh3MLSPHEnQYKLSWklYv336cS7Pfqz8jHzsNDTGJk2dGrQW0z
G0Iq6qwfrPwMfc5baKy3LCcqSRu7Y1DE6Z8M1ggmGmAdFx7ofd3fxxVBhePzmmAr
XYnmtz1UFVpbBmXGw0BOp3c4GhRW82p3
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:46:11 2025 by rpki-client