This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
File:                     LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json)
Hash identifier:          eBmhmLE2kEO+UUhzCl3i+4ta/KU+Ye5kiDOiKxvriIE=
Subject key identifier:   05:FE:90:CD:2F:63:5B:2D:FD:3A:D4:D6:C8:32:AF:94:89:0B:0E:8E
Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34
Certificate issuer:       /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
Certificate serial:       34EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
Manifest number:          34E7
Signing time:             Sat 06 Dec 2025 15:07:38 +0000
Manifest this update:     Sat 06 Dec 2025 15:07:37 +0000
Manifest next update:     Sat 13 Dec 2025 15:07:37 +0000
Files and hashes:         1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: dpIOBC9QB8Vn6rGokx4iSWxAKtPUYPVxG2h68qfA4Sw=)
                          2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl
                          rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13547 (0x34eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734
        Validity
            Not Before: Dec  6 15:07:37 2025 GMT
            Not After : Dec 13 15:07:37 2025 GMT
        Subject: CN=693446ba-62f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:13:f9:2c:4a:30:d3:71:c6:9e:8b:ce:8c:
                    d9:fa:43:f6:1e:9f:d1:e4:2c:8a:4c:30:07:52:c2:
                    7b:ce:0e:25:2c:a2:08:ce:3f:ec:9c:34:94:a9:27:
                    af:08:57:f0:3e:39:92:a9:59:7f:42:52:21:24:09:
                    da:4e:77:ad:7a:0b:df:18:87:59:fa:16:3e:4d:96:
                    15:58:3a:bb:07:48:7f:71:73:3b:b9:7f:03:91:b6:
                    fc:a5:57:82:4d:03:53:ca:af:04:d3:bf:f9:57:42:
                    8c:73:84:e2:84:63:72:d4:7a:90:84:e5:af:f9:06:
                    19:61:29:19:c1:8a:dd:42:ac:e2:ab:32:fe:25:1f:
                    97:4a:e3:d3:84:cf:78:ad:38:d4:00:f6:15:50:a2:
                    07:60:f6:b7:3b:2e:16:9e:0a:d7:bc:3b:97:a7:e4:
                    26:f8:16:36:49:00:2e:de:fa:ab:28:6b:44:9a:84:
                    97:97:6b:e9:aa:ae:3f:03:2e:ab:e7:81:c2:ab:fb:
                    83:2e:36:06:18:89:91:d1:a7:1b:53:d1:37:55:a3:
                    82:bd:d9:cc:35:79:3f:1b:aa:4b:2a:5c:ac:dc:71:
                    90:3f:04:02:d8:c2:5a:64:9c:30:07:77:5b:fb:1d:
                    a0:f1:12:1e:4c:0c:0b:54:39:47:7c:32:87:7a:ea:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:90:CD:2F:63:5B:2D:FD:3A:D4:D6:C8:32:AF:94:89:0B:0E:8E
            X509v3 Authority Key Identifier:
                keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:85:91:8e:ee:a3:f5:d1:ba:db:18:31:99:72:79:aa:13:
         cf:61:eb:ab:46:cb:93:25:73:0c:5a:87:5a:1d:c9:b2:94:45:
         4e:1e:68:6f:0e:e5:d0:c3:f0:18:db:61:1a:b8:8e:0e:46:22:
         ed:74:b7:a2:80:6d:3b:28:f8:4f:60:fa:88:b1:e9:32:5e:76:
         1f:4c:4f:68:0d:93:1b:56:7a:87:63:e6:87:60:92:fe:36:35:
         4a:04:13:4d:62:b0:8a:46:26:bf:94:9d:15:3a:61:2c:bd:ca:
         15:e5:70:98:95:02:00:1e:f0:e5:ca:13:d8:b7:1f:bd:77:bf:
         dd:ee:e7:a5:25:17:33:6c:3b:e6:4e:ce:96:8e:a7:f7:09:81:
         29:e3:37:5f:2d:4b:fe:14:6f:47:dd:14:ec:40:b3:c8:c6:54:
         1e:3a:14:c5:f7:53:02:aa:b7:79:77:f7:69:40:3b:27:53:0f:
         3d:8c:cf:23:f7:20:5a:4a:4d:d7:4f:b4:25:d6:e5:0e:ba:59:
         86:5b:64:c8:cb:6f:9b:e6:bf:cd:e5:05:95:49:78:d3:f8:3d:
         94:95:6a:d9:ca:e8:bc:58:14:4f:46:a2:13:f1:cd:7a:d5:09:
         50:86:21:e3:fc:99:58:79:b4:53:39:b8:66:47:54:1e:58:ba:
         cc:82:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:15 2025 by rpki-client