This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          Dm+Gf8EDA377lGKdu7rfj6RSl5eer5hKuKODw7frubc=
Subject key identifier:   60:3F:1D:50:AC:EB:CD:F1:8C:FB:2F:EA:76:E3:AF:26:BC:87:1F:10
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          12
Signing time:             Fri 05 Dec 2025 05:46:00 +0000
Manifest this update:     Fri 05 Dec 2025 05:45:59 +0000
Manifest next update:     Fri 12 Dec 2025 05:45:59 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: U1DfdHsjkGXy7PWmgE46kht+kUbhTIPxGUpcnk1iwkA=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: dbVpIHNueZer+oUS1RXNpDIo/TCVZYavEBd3HqBZ7S8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Dec  5 05:45:59 2025 GMT
            Not After : Dec 12 05:45:59 2025 GMT
        Subject: CN=69327197-5c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6d:4e:43:bf:da:29:16:6f:71:13:cd:44:7f:
                    27:0f:8a:09:3e:65:1e:fd:a4:20:c4:3f:74:fb:a2:
                    dd:ac:35:cd:a0:b8:5b:21:a1:5e:db:9f:fd:ba:4f:
                    8d:92:61:1a:28:05:ca:3b:f3:27:e3:5d:0c:f0:9f:
                    36:24:0c:fb:c4:a6:30:42:f8:86:c4:7b:8d:cf:39:
                    fc:8c:97:8a:70:60:98:f1:76:3f:67:78:f6:a0:4a:
                    3a:a7:86:37:23:33:b3:57:fc:2c:84:52:a1:36:43:
                    62:af:6d:78:6a:a6:3b:d8:ae:15:0e:84:2a:07:14:
                    7e:9d:7c:6e:bd:82:b7:1e:38:5b:92:47:19:4b:cf:
                    78:c5:ea:6f:3c:53:60:6a:3e:5b:32:32:2b:3f:7f:
                    54:e7:b3:4e:34:b7:a3:c2:fa:64:2f:b0:65:c3:3f:
                    b6:f5:92:cc:b2:94:7a:4a:36:cb:52:cd:27:09:93:
                    ed:c4:13:3a:6d:8a:46:ce:75:a1:89:b9:4f:33:34:
                    79:f7:f6:62:94:4e:a4:86:f0:3e:0b:70:d1:ea:0d:
                    f3:41:07:2a:56:f5:e8:ef:47:f4:82:ef:cc:ca:bd:
                    f5:96:9c:1f:b3:c9:8a:dd:0f:31:ef:41:23:a6:47:
                    3f:ac:fc:1c:a6:88:9f:9f:a8:e4:dd:5e:7a:aa:10:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3F:1D:50:AC:EB:CD:F1:8C:FB:2F:EA:76:E3:AF:26:BC:87:1F:10
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:52:94:8c:bb:28:17:5a:7d:8f:48:50:e6:a4:5a:49:80:
         4f:0e:b8:0f:7c:e1:dd:3d:ed:62:1d:f2:02:21:6b:27:e4:a7:
         a1:c3:23:b0:44:bb:23:22:e5:75:28:01:01:a5:fe:db:f4:63:
         33:91:7c:e0:a5:ce:70:01:02:5d:09:1a:ca:be:73:77:d6:40:
         cf:a2:a9:cb:d8:a7:1e:bc:ea:4c:06:95:13:44:8d:c7:ee:f0:
         c7:02:fd:5e:31:84:38:1a:39:42:93:8e:97:9f:c4:50:d2:5e:
         b8:64:51:46:9c:83:0a:62:05:0c:0e:22:d9:99:da:59:ff:60:
         bf:04:06:cb:0e:ef:33:6b:ec:1f:42:b6:4e:e2:5f:bb:6b:bb:
         6e:ac:c4:43:c4:b2:9d:22:32:e3:07:98:c9:c8:2b:3f:94:33:
         44:01:2a:2d:c3:87:42:d6:13:a0:ac:2a:4d:08:f9:a4:1a:4f:
         0d:44:38:9c:91:ad:20:64:06:2f:77:2f:5b:30:1b:b1:e3:c9:
         8c:95:52:d8:85:00:01:e3:ab:d9:ee:62:f8:b1:74:53:2c:67:
         6f:cb:2e:6b:f1:a7:2f:3b:b7:c1:34:3c:0b:ac:01:09:65:70:
         a3:bb:a5:64:79:36:69:a1:df:43:47:60:db:31:6d:35:cb:94:
         d3:fe:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:38:28 2025 by rpki-client