This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
File:                     LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft (raw, json)
Hash identifier:          H1FA69x5eLPto3eJZp9xl7uAjoyDVIwaGs0FOsO6uXI=
Subject key identifier:   76:6E:8D:95:4A:AE:E9:57:FE:A8:1A:70:5D:0E:AF:41:95:01:AD:AF
Authority key identifier: 2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25
Certificate issuer:       /CN=A914B462/serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
Manifest number:          69
Signing time:             Fri 05 Dec 2025 04:52:38 +0000
Manifest this update:     Fri 05 Dec 2025 04:52:37 +0000
Manifest next update:     Fri 12 Dec 2025 04:52:37 +0000
Files and hashes:         1: LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl (hash: 7PXpt9xTmxSdE1+tUleIgVvPie63N3hkZ0gOccuScKg=)
                          2: 5176F30C330911F0B6109345C4F9AE02.roa (hash: 2CjDcwjgwp6gOmqeOjKh58gY5ezLWgyuFkjz5k3OnLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=2D7D5C5F76CA3A68F649802C9D8B66A7F26F6525
        Validity
            Not Before: Dec  5 04:52:37 2025 GMT
            Not After : Dec 12 04:52:37 2025 GMT
        Subject: CN=69326516-a372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:a1:1c:03:e7:88:7d:98:02:12:17:a4:05:
                    71:87:39:d9:58:5b:e0:fd:ff:fe:a4:d5:94:72:ca:
                    d1:23:2c:9d:e5:85:cf:62:41:6a:6e:0b:c4:69:71:
                    c6:ce:c9:7b:6a:6f:fa:62:70:a5:1b:43:e0:a5:ef:
                    ff:f1:f5:02:e8:1e:10:02:78:a8:85:c6:7f:71:f6:
                    ed:23:16:e8:ef:c2:ff:ee:c4:90:26:52:25:15:2b:
                    96:e1:63:31:c4:97:c1:44:49:c3:20:61:e0:25:fd:
                    5e:c2:1d:8e:5b:5e:25:c7:91:78:e6:3f:c2:d1:3e:
                    e5:dc:4c:87:8c:9d:da:bb:d8:4a:0c:cd:9a:48:17:
                    1f:96:41:b5:0e:65:9e:93:c2:bf:eb:6b:9a:db:4b:
                    35:0a:ff:ca:f7:64:53:51:e8:58:ea:61:a3:63:69:
                    2f:2c:73:fe:d4:74:b7:26:ff:60:47:54:b8:b2:86:
                    8d:96:f7:ac:19:c3:b7:4c:f6:1d:9a:f3:bd:bf:ac:
                    04:76:7e:97:ae:b5:2c:9f:aa:fe:15:40:b2:78:86:
                    04:a9:60:8c:15:65:23:75:46:4a:3a:1d:2a:01:c2:
                    6d:ad:fa:20:e8:37:65:a1:66:67:74:3e:7d:44:b3:
                    36:e5:3e:0d:f7:64:45:ef:98:6b:b0:c2:ab:fa:44:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6E:8D:95:4A:AE:E9:57:FE:A8:1A:70:5D:0E:AF:41:95:01:AD:AF
            X509v3 Authority Key Identifier:
                keyid:2D:7D:5C:5F:76:CA:3A:68:F6:49:80:2C:9D:8B:66:A7:F2:6F:65:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LX1cX3bKOmj2SYAsnYtmp_JvZSU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/A27CC3E432FF11F0859B5A2DC4F9AE02/LX1cX3bKOmj2SYAsnYtmp_JvZSU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f2:c5:d8:f3:7c:b4:5d:53:32:35:34:93:63:06:6c:b9:09:
         4a:d6:92:52:76:7c:0f:ab:48:63:cc:e0:11:64:9a:38:0d:50:
         b8:bd:75:7b:8e:14:af:83:23:7b:ec:3e:d5:07:21:0d:b9:9c:
         97:da:b2:85:d6:91:3d:f8:b5:d8:41:c5:f7:70:90:0f:5e:72:
         48:3d:6e:24:3e:76:fe:fe:82:23:84:19:71:ef:84:4f:29:19:
         4c:9e:39:ff:40:b8:31:fe:85:cf:0a:c1:63:6c:4f:fc:a1:9c:
         fa:7f:8d:16:78:6a:ee:cf:92:e0:75:f0:54:fd:a6:2e:e1:7f:
         84:42:29:63:58:4b:2b:d0:ae:a8:58:7e:05:96:a3:19:4e:27:
         49:cc:2c:ea:e7:57:8b:a0:6b:25:4a:0f:98:a4:a4:7d:d8:31:
         5e:86:7f:b0:ae:3a:24:b3:e8:79:1c:48:5f:c8:d2:54:65:53:
         eb:a8:2f:76:fe:be:8c:d1:63:1d:3b:e5:76:e6:1f:12:b6:d1:
         c0:47:19:00:73:8f:71:00:94:74:cb:c2:3f:bb:0f:d3:62:5d:
         04:cf:d6:7a:02:fa:a7:39:83:12:0d:5a:a5:33:28:1c:c3:d9:
         a0:b6:65:d7:45:80:8b:9c:f7:39:97:a2:82:43:aa:95:58:26:
         a2:1f:81:b0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjQ2MjExMC8GA1UEBRMoMkQ3RDVDNUY3NkNBM0E2OEY2NDk4MDJDOUQ4QjY2QTdG
MjZGNjUyNTAeFw0yNTEyMDUwNDUyMzdaFw0yNTEyMTIwNDUyMzdaMBgxFjAUBgNV
BAMTDTY5MzI2NTE2LWEzNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXIKEcA+eIfZgCEhekBXGHOdlYW+D9//6k1ZRyytEjLJ3lhc9iQWpuC8RpccbO
yXtqb/picKUbQ+Cl7//x9QLoHhACeKiFxn9x9u0jFujvwv/uxJAmUiUVK5bhYzHE
l8FEScMgYeAl/V7CHY5bXiXHkXjmP8LRPuXcTIeMndq72EoMzZpIFx+WQbUOZZ6T
wr/ra5rbSzUK/8r3ZFNR6FjqYaNjaS8sc/7UdLcm/2BHVLiyho2W96wZw7dM9h2a
872/rAR2fpeutSyfqv4VQLJ4hgSpYIwVZSN1Rko6HSoBwm2t+iDoN2WhZmd0Pn1E
szblPg33ZEXvmGuwwqv6RIWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdm6NlUqu
6Vf+qBpwXQ6vQZUBra8wHwYDVR0jBBgwFoAULX1cX3bKOmj2SYAsnYtmp/JvZSUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0EyN0NDM0U0MzJG
RjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21qMlNZQXNuWXRtcF9KdlpT
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTFgxY1gzYktPbWoyU1lBc25ZdG1wX0p2WlNVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
NDYyL0EyN0NDM0U0MzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL0xYMWNYM2JLT21q
MlNZQXNuWXRtcF9KdlpTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAITyxdjzfLRdUzI1NJNjBmy5CUrWklJ2fA+rSGPM4BFkmjgNULi9dXuO
FK+DI3vsPtUHIQ25nJfasoXWkT34tdhBxfdwkA9eckg9biQ+dv7+giOEGXHvhE8p
GUyeOf9AuDH+hc8KwWNsT/yhnPp/jRZ4au7PkuB18FT9pi7hf4RCKWNYSyvQrqhY
fgWWoxlOJ0nMLOrnV4ugayVKD5ikpH3YMV6Gf7CuOiSz6HkcSF/I0lRlU+uoL3b+
vozRYx075XbmHxK20cBHGQBzj3EAlHTLwj+7D9NiXQTP1noC+qc5gxINWqUzKBzD
2aC2ZddFgIuc9zmXooJDqpVYJqIfgbA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:22:04 2025 by rpki-client