This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
File:                     LvRpVEOkwMezTqkbYqPY-OQUUX4.mft (raw, json)
Hash identifier:          MmAa2u+EgQ0PWt9aNxbljt/d1rKlvLFXlGueva+9nrk=
Subject key identifier:   70:B5:B7:F6:15:E4:84:B2:22:08:14:14:53:4B:68:20:D3:46:EF:4E
Authority key identifier: 2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E
Certificate issuer:       /CN=A9167A72/serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
Manifest number:          75
Signing time:             Fri 05 Dec 2025 02:26:50 +0000
Manifest this update:     Fri 05 Dec 2025 02:26:49 +0000
Manifest next update:     Fri 12 Dec 2025 02:26:49 +0000
Files and hashes:         1: LvRpVEOkwMezTqkbYqPY-OQUUX4.crl (hash: vq6wW7DPeL/C9L5kVnYUMxu5BUU9J5FB5bCmHe4M/48=)
                          2: 206BA2C4AA2A11F0B670463FC4F9AE02.roa (hash: b16d+2kTdbON2ixe1jCa6GapHvNF5ngdixgV1f1xSyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=2EF4695443A4C0C7B34EA91B62A3D8F8E414517E
        Validity
            Not Before: Dec  5 02:26:49 2025 GMT
            Not After : Dec 12 02:26:49 2025 GMT
        Subject: CN=693242ea-63b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:95:f2:59:52:3d:9a:f1:c0:23:da:56:70:
                    e7:a9:ac:e3:a8:90:33:55:dc:45:b9:0e:ed:71:07:
                    80:7f:ec:15:16:ab:eb:aa:95:8c:2d:35:6d:d3:95:
                    4c:8e:9c:7e:b2:08:6d:68:23:e1:84:46:90:aa:99:
                    ec:e1:4b:82:8e:64:65:54:2f:0e:60:be:a6:a8:d6:
                    06:6c:34:1a:a7:f7:de:e1:4e:8d:74:46:1e:86:f3:
                    5d:c4:80:ec:4f:29:e9:3a:3a:49:fc:85:2e:7b:31:
                    91:90:df:27:32:1d:cb:b2:e6:86:39:fd:d5:15:e6:
                    0c:4f:4e:a5:23:2a:dd:97:4b:9a:28:29:46:67:ab:
                    a7:e4:c2:a6:6d:79:af:d4:60:af:7d:f1:b5:83:56:
                    63:16:0f:cd:92:f0:ff:be:39:51:8b:b4:31:97:01:
                    fe:fe:b0:dc:e0:b1:4e:dd:46:8d:8f:5a:49:9f:93:
                    8a:1f:e3:69:0a:13:ca:11:ae:91:04:b4:ae:30:b9:
                    18:6d:8f:27:15:11:d0:49:f1:79:e6:59:6f:3f:38:
                    14:b1:d1:44:c4:e4:05:af:62:43:36:e6:9e:49:43:
                    fb:b0:1b:25:19:0b:01:27:ff:7c:79:7f:f0:0e:04:
                    90:83:bd:28:e6:a3:9c:82:0c:79:90:0f:5e:c1:5d:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B5:B7:F6:15:E4:84:B2:22:08:14:14:53:4B:68:20:D3:46:EF:4E
            X509v3 Authority Key Identifier:
                keyid:2E:F4:69:54:43:A4:C0:C7:B3:4E:A9:1B:62:A3:D8:F8:E4:14:51:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LvRpVEOkwMezTqkbYqPY-OQUUX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/44DE69CE2B1411F08523F26BC4F9AE02/LvRpVEOkwMezTqkbYqPY-OQUUX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:ff:22:e7:6d:4a:7b:ff:ea:f9:36:2a:43:0b:1b:c1:a6:
         11:55:29:23:38:50:25:37:15:53:8f:16:3f:c9:ec:ec:7d:c4:
         8d:6d:dd:76:bf:3d:66:d2:8b:4e:00:90:b4:13:2f:34:54:f4:
         74:c6:b7:e9:59:93:55:2c:89:51:f5:d5:d2:b9:a5:00:e0:68:
         0b:4e:79:1b:d7:26:fd:3a:d7:49:79:5d:5f:bc:55:60:d7:fd:
         92:4e:7c:bf:f7:50:46:f5:11:86:f8:8f:0f:dc:80:34:68:fc:
         7a:4f:fd:86:67:f7:ee:4f:fe:31:9b:f6:90:d6:17:89:cd:08:
         18:2e:29:fd:e6:de:b9:75:24:72:36:c9:88:a5:d1:ca:8c:b1:
         2b:17:df:77:7b:c5:df:63:71:ff:7b:43:99:07:b0:b3:24:1e:
         ae:a3:90:e9:e4:c1:97:9c:f8:5f:8d:59:a8:81:b8:36:cc:0b:
         39:5f:a9:15:47:de:9f:c1:d4:e3:ca:e1:15:6e:ae:94:0d:40:
         82:bd:8e:7e:b6:a7:88:ec:57:19:48:37:5d:05:c6:72:a8:9f:
         df:d2:ec:41:c1:11:00:35:3c:96:37:77:03:72:81:56:24:40:
         34:5c:4c:1d:e6:53:6f:75:a9:9f:a6:e1:4d:e6:4a:e9:e3:0e:
         dc:2c:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:45:26 2025 by rpki-client