This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
File:                     Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft (raw, json)
Hash identifier:          81S6cKZ2UDkOwLUgI7tKIfDUn7DGquHcTTFott/aNNU=
Subject key identifier:   3B:3C:59:79:A1:2A:F7:F2:29:89:A2:97:41:BF:10:8A:B0:9D:0B:8E
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Certificate issuer:       /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
Manifest number:          5C
Signing time:             Fri 05 Dec 2025 05:01:36 +0000
Manifest this update:     Fri 05 Dec 2025 05:01:36 +0000
Manifest next update:     Fri 12 Dec 2025 05:01:36 +0000
Files and hashes:         1: Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl (hash: DaCY+KhNPoRvrRVEKGGxEtrxPnExQSCibpLcYtFnO4A=)
                          2: 780B9CF8867811F0AA0D2534C4F9AE02.roa (hash: X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=)
                          3: 78817658867811F0AA0D2534C4F9AE02.roa (hash: XWnPSEphd3JYQ8zrDoJg7cr7D+uDeG7GtgQZULFil08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
                          rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
        Validity
            Not Before: Dec  5 05:01:36 2025 GMT
            Not After : Dec 12 05:01:36 2025 GMT
        Subject: CN=69326730-66f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:34:a0:87:11:5b:36:09:1b:4b:55:d2:0b:
                    23:2d:81:29:7a:6c:55:dd:ff:b8:17:27:eb:34:74:
                    c9:76:10:84:f1:7e:c6:51:b9:90:c3:2b:e7:9c:63:
                    33:e3:22:0f:ed:45:b4:86:95:6c:35:70:e5:8d:84:
                    7e:c9:e3:53:d7:57:e9:f2:56:00:90:66:b2:d6:25:
                    88:f1:34:9b:42:c1:30:b7:e2:42:22:cf:ed:eb:0b:
                    75:6a:b0:6e:aa:72:73:6e:b6:66:a2:71:54:da:96:
                    44:79:b6:40:e8:33:f9:4d:71:09:52:e8:29:73:43:
                    d0:b1:3d:93:37:a6:b3:3c:e2:7e:fb:67:74:e6:73:
                    51:07:b1:f9:64:bb:b2:f3:e1:93:5a:23:39:00:32:
                    b4:9b:32:0e:1b:cb:67:57:4a:05:56:e7:60:cc:50:
                    14:6f:44:10:94:ec:5d:14:02:49:d8:ad:dd:2f:e2:
                    c0:8a:59:d2:97:ae:a0:6d:1a:a3:a7:2e:77:22:39:
                    7d:3f:a8:81:8e:69:ef:e9:c6:09:b6:9f:99:b8:b2:
                    d6:ed:10:c8:55:5a:1f:de:69:13:d5:29:69:0f:8b:
                    62:b3:43:26:78:da:4c:c2:5f:a6:20:40:5e:cd:f1:
                    cd:02:7d:9f:95:33:f5:94:b0:8e:6c:e9:23:bd:81:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3C:59:79:A1:2A:F7:F2:29:89:A2:97:41:BF:10:8A:B0:9D:0B:8E
            X509v3 Authority Key Identifier:
                keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:9d:c3:97:35:89:01:88:be:eb:ec:75:bc:3c:12:74:36:
         e9:b9:f5:1c:11:72:3e:c7:59:cb:b6:bb:63:65:14:6b:89:a4:
         33:09:f5:28:d8:2b:7d:bb:98:e7:10:4e:af:92:e4:a7:c5:5d:
         87:aa:7f:27:60:6e:8c:fe:d5:02:f5:50:2a:ff:56:dd:58:25:
         d4:14:dc:bf:ea:a8:2c:33:dc:30:fc:a7:d2:21:40:36:1a:1b:
         7d:c4:93:b0:4f:d0:bb:ff:45:28:91:98:6f:3b:20:2a:df:5f:
         e5:b8:95:5b:c1:62:47:31:54:a4:48:dc:7c:5d:bc:75:ba:88:
         dc:5b:be:91:9b:94:d1:82:f8:bb:23:f5:57:99:df:24:27:d2:
         97:a2:19:4b:95:4b:51:03:db:90:d9:52:a2:50:2c:17:cd:6d:
         d6:76:5a:ec:eb:43:01:bf:1e:67:f3:71:43:f4:a6:e6:ca:57:
         9f:7e:73:45:00:04:6a:82:d6:08:f5:ab:6e:9e:1c:e7:8e:3e:
         35:28:27:cd:b1:e0:52:5f:81:0d:d9:5d:06:4d:97:d8:ff:12:
         10:53:d5:9f:6b:32:fa:86:40:0c:9f:1d:31:c6:02:9c:2e:c0:
         d8:2c:19:9b:8a:51:a5:7c:4a:11:ab:35:67:7d:72:b3:99:5b:
         bd:2a:7e:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
REZERDExMC8GA1UEBRMoMTI1OUJGMkNFMkUxNkVERTRCQjY1NTkxMzA0MTgxNTU2
MTRCQTNFQTAeFw0yNTEyMDUwNTAxMzZaFw0yNTEyMTIwNTAxMzZaMBgxFjAUBgNV
BAMTDTY5MzI2NzMwLTY2ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDaOzSghxFbNgkbS1XSCyMtgSl6bFXd/7gXJ+s0dMl2EITxfsZRuZDDK+ecYzPj
Ig/tRbSGlWw1cOWNhH7J41PXV+nyVgCQZrLWJYjxNJtCwTC34kIiz+3rC3VqsG6q
cnNutmaicVTalkR5tkDoM/lNcQlS6ClzQ9CxPZM3prM84n77Z3Tmc1EHsflku7Lz
4ZNaIzkAMrSbMg4by2dXSgVW52DMUBRvRBCU7F0UAknYrd0v4sCKWdKXrqBtGqOn
LnciOX0/qIGOae/pxgm2n5m4stbtEMhVWh/eaRPVKWkPi2KzQyZ42kzCX6YgQF7N
8c0CfZ+VM/WUsI5s6SO9gXi1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOzxZeaEq
9/IpiaKXQb8QirCdC44wHwYDVR0jBBgwFoAUElm/LOLhbt5LtlWRMEGBVWFLo+ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZERkRELzk3RUUwQUMwNEE5
MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1THRsV1JNRUdCVldGTG8t
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRWxtX0xPTGhidDVMdGxXUk1FR0JWV0ZMby1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE
RkRELzk3RUUwQUMwNEE5MDExRjBCMjg4QUM1OUM0RjlBRTAyL0VsbV9MT0xoYnQ1
THRsV1JNRUdCVldGTG8tby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJoVncOXNYkBiL7r7HW8PBJ0Num59RwRcj7HWcu2u2NlFGuJpDMJ9SjY
K327mOcQTq+S5KfFXYeqfydgboz+1QL1UCr/Vt1YJdQU3L/qqCwz3DD8p9IhQDYa
G33Ek7BP0Lv/RSiRmG87ICrfX+W4lVvBYkcxVKRI3HxdvHW6iNxbvpGblNGC+Lsj
9VeZ3yQn0peiGUuVS1ED25DZUqJQLBfNbdZ2WuzrQwG/HmfzcUP0pubKV59+c0UA
BGqC1gj1q26eHOeOPjUoJ82x4FJfgQ3ZXQZNl9j/EhBT1Z9rMvqGQAyfHTHGApwu
wNgsGZuKUaV8ShGrNWd9crOZW70qfuk=
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:37:42 2025 by rpki-client