This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
File:                     jLlvDcqEsgtJoHEo53c3IFimkFM.mft (raw, json)
Hash identifier:          uTPAxRMGClUjbGmHssVPwhjU4GEj5EVBc79GxtO1kFQ=
Subject key identifier:   7C:41:3F:00:B9:CA:0B:12:98:30:DC:93:6E:64:90:44:D9:6B:4A:BE
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Certificate issuer:       /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
Manifest number:          015F
Signing time:             Fri 05 Dec 2025 02:13:10 +0000
Manifest this update:     Fri 05 Dec 2025 02:13:10 +0000
Manifest next update:     Fri 12 Dec 2025 02:13:10 +0000
Files and hashes:         1: jLlvDcqEsgtJoHEo53c3IFimkFM.crl (hash: 4MSPQwu5SdbOdrobsqUSz6MyhJGmmmexh0rt6TyyrPo=)
                          2: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (hash: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
                          rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
        Validity
            Not Before: Dec  5 02:13:10 2025 GMT
            Not After : Dec 12 02:13:10 2025 GMT
        Subject: CN=69323fb6-af4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:d1:38:89:fa:3d:35:db:c5:36:d9:f4:46:
                    bf:90:d6:85:f8:d5:b5:2f:9d:71:c0:c6:90:39:d3:
                    60:53:41:a8:27:ed:05:d4:54:10:8c:86:4b:9a:59:
                    78:81:99:bf:1d:30:c3:bc:81:fd:57:0a:94:c8:cb:
                    39:28:bb:25:6f:bc:17:a2:e9:a7:3f:1d:84:22:e6:
                    1b:bd:58:84:9c:7b:57:cc:c9:8d:6d:8d:af:c5:31:
                    c7:3a:9e:99:eb:7c:73:bc:83:ae:ee:a5:0f:46:42:
                    74:73:3b:e1:d0:34:93:ca:56:ea:f1:fc:fc:83:c4:
                    43:dc:ca:87:a9:95:91:c3:c7:5d:67:52:9c:3e:15:
                    aa:63:b2:26:b2:d6:3e:2a:72:e8:41:9d:bd:ae:a9:
                    39:6f:85:29:d7:b2:24:3a:04:f4:8b:99:37:49:0d:
                    a5:b1:f9:07:59:76:08:4c:5d:d6:df:7c:c0:56:79:
                    e8:84:c0:42:38:c8:f7:fd:66:51:a0:89:ad:30:59:
                    46:06:a2:49:bb:6b:7b:98:00:24:cd:e1:b9:aa:14:
                    b8:ab:1a:f0:70:cb:bb:4f:a1:e5:74:58:bb:c8:54:
                    bc:68:b0:aa:11:94:7a:66:7e:e6:69:42:71:00:21:
                    33:65:d2:21:46:dd:9f:bb:c0:df:fa:e8:63:be:f2:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:41:3F:00:B9:CA:0B:12:98:30:DC:93:6E:64:90:44:D9:6B:4A:BE
            X509v3 Authority Key Identifier:
                keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:5e:da:f5:55:be:d3:16:6e:16:ff:80:3e:37:b6:a7:ab:
         ed:50:a6:b5:65:5a:41:f9:31:1f:bb:19:03:80:89:98:5a:96:
         ba:53:55:7c:b8:2a:87:87:54:c7:e0:02:44:88:62:f5:4c:c8:
         f9:87:3f:af:1a:43:fa:62:63:54:80:0e:46:3e:0e:78:d9:69:
         52:09:24:ad:d3:ba:4a:af:d9:e2:4b:c9:59:35:4f:c2:aa:76:
         d8:a5:c5:c5:a5:ef:b4:43:bc:f5:aa:de:11:d9:6a:d5:fe:64:
         ce:b1:6f:85:24:e0:7e:ee:3e:ca:ff:ed:bd:d1:62:0c:47:f7:
         29:26:d0:32:3f:50:5a:b4:4d:05:14:2d:ee:b3:76:0a:94:d5:
         e1:a0:ca:8d:2d:4a:c3:57:3e:2b:88:a3:aa:08:17:20:31:6f:
         50:18:d0:31:5d:b1:b8:41:58:08:42:ee:de:0c:ac:65:9e:5b:
         7e:34:68:99:d2:ff:80:bb:20:53:ea:c9:b5:23:4f:8d:a6:87:
         aa:3a:41:49:36:82:56:2c:d4:63:24:54:a4:90:7a:95:db:de:
         5c:29:92:8d:bb:e0:3e:10:eb:cd:40:c1:31:44:03:18:41:21:
         e5:4f:b0:22:84:32:e6:1c:23:cf:a8:2b:34:b6:33:48:36:bf:
         ad:d0:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:24 2025 by rpki-client