This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
File:                     LnG4umMF_9SMEx0IYK8sGs9tIrY.mft (raw, json)
Hash identifier:          Sxp1SXr3cl+j6uTXVSLeVizdIZR6148/AiLck9GL33I=
Subject key identifier:   BA:42:39:A5:0A:CC:F7:48:16:E7:2B:EC:A5:FC:D6:E7:88:3D:88:FA
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
Manifest number:          0226
Signing time:             Fri 05 Dec 2025 00:24:15 +0000
Manifest this update:     Fri 05 Dec 2025 00:24:15 +0000
Manifest next update:     Fri 12 Dec 2025 00:24:15 +0000
Files and hashes:         1: LnG4umMF_9SMEx0IYK8sGs9tIrY.crl (hash: 39qqY55Tf39/3xi0+ntc6oDaWVWiVtz21jtUCvvbRVo=)
                          2: D08310DE94C511EDB2732947C4F9AE02.roa (hash: Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Dec  5 00:24:15 2025 GMT
            Not After : Dec 12 00:24:15 2025 GMT
        Subject: CN=6932262f-88f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:ae:b7:c0:af:09:60:72:c3:d3:35:66:f5:
                    4c:a6:55:ac:cd:c2:fd:19:02:5d:ae:64:71:3d:5c:
                    c2:1a:3f:a3:1f:6b:cb:82:d5:b0:cf:bd:e4:64:45:
                    e9:c4:22:a9:fa:fb:84:2b:77:01:01:76:13:45:f6:
                    df:4f:e4:42:0b:69:1f:c2:03:a2:09:73:86:06:21:
                    45:5d:28:89:56:8d:9f:73:cf:de:28:87:54:f8:c3:
                    c9:a9:87:3f:49:da:50:9a:3e:0f:b8:cc:3b:70:91:
                    5d:d9:89:33:ec:b5:65:4a:7a:ee:f5:60:7a:b0:b0:
                    13:7a:da:83:73:24:4d:e0:e8:d5:23:41:61:77:14:
                    8d:8d:a5:d1:e5:0a:5d:56:2e:73:64:e5:32:8b:4c:
                    c0:6d:70:88:11:7a:85:83:45:1e:d2:aa:52:30:00:
                    9b:60:39:93:c4:38:e0:2a:f9:56:8a:36:6c:c9:6a:
                    9c:d8:3b:70:3f:39:a2:62:9e:50:ce:61:e4:77:ef:
                    09:1b:17:94:27:13:bc:c4:35:fe:d5:04:25:5b:07:
                    56:fe:8d:fa:d0:88:03:41:f4:b6:a3:e0:b6:90:48:
                    5a:ee:15:3e:47:f0:9f:c8:2c:4f:85:80:34:56:3a:
                    ae:78:da:c1:87:ea:51:bf:89:7e:59:19:01:2c:fe:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:42:39:A5:0A:CC:F7:48:16:E7:2B:EC:A5:FC:D6:E7:88:3D:88:FA
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:9f:05:d3:07:df:31:42:ba:19:d5:1a:ce:fa:02:22:84:
         31:8d:52:df:79:48:ec:7e:c3:aa:1f:01:8b:92:6f:cf:b2:5d:
         cb:7a:08:c2:b4:1e:8d:8e:01:f6:a6:15:d4:c9:04:26:24:fe:
         12:2a:d3:35:71:36:ec:bf:c8:1f:ef:c2:d5:45:d5:33:c2:5e:
         6f:53:a2:2c:0b:c8:a2:05:c0:85:84:1f:22:83:9a:4a:2f:95:
         19:c8:4c:7e:d5:5c:7b:05:a7:20:1a:29:0c:8b:e2:c1:0c:a2:
         9a:98:1c:33:bb:10:df:a8:d3:19:19:63:62:bd:c7:b9:ad:43:
         02:3d:c7:92:d7:6a:47:09:bf:d6:89:cf:5a:05:a4:92:f3:3b:
         25:7a:e2:54:72:14:fd:e7:77:82:51:fe:93:36:c5:12:53:6e:
         f8:e1:ba:e4:74:22:78:06:b0:5f:3b:76:be:3c:0a:08:d1:10:
         7e:02:e8:3c:c1:0a:1b:e6:7b:87:84:f5:a6:17:37:db:87:49:
         64:49:db:93:27:49:42:84:6f:69:99:10:75:18:43:99:79:27:
         3e:0a:b0:ae:41:91:9d:f6:9d:ee:3f:63:72:6e:ee:45:ac:4b:
         7f:78:5e:7c:fd:de:b5:cb:54:48:f8:59:c4:80:e8:3a:35:53:
         28:8c:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:28:31 2025 by rpki-client