This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
File:                     lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json)
Hash identifier:          qIJM8AzWNgRE9yM3+H3Gr/OBOV8ggrE3iYApSOFSZDE=
Subject key identifier:   61:6A:9C:6D:A9:E5:2A:5C:82:C4:C6:64:FE:6D:A6:04:13:75:75:9D
Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F
Certificate issuer:       /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
Manifest number:          0135
Signing time:             Fri 05 Dec 2025 02:37:59 +0000
Manifest this update:     Fri 05 Dec 2025 02:37:58 +0000
Manifest next update:     Fri 12 Dec 2025 02:37:58 +0000
Files and hashes:         1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: b3eWfUJ+16pKbrqP0VDp6dGUc70ndyju9wELBbsuwSw=)
                          2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl
                          rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F
        Validity
            Not Before: Dec  5 02:37:58 2025 GMT
            Not After : Dec 12 02:37:58 2025 GMT
        Subject: CN=69324587-2ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:63:10:f6:71:b7:4c:11:3b:10:1c:d0:21:
                    b1:47:6e:d2:e5:d6:ad:16:fb:36:95:22:ea:c6:a8:
                    89:70:0d:3f:f3:79:ac:66:65:2c:cc:d3:a8:f4:c4:
                    d2:5f:dd:23:84:8e:07:42:c2:3f:fe:94:24:ab:4a:
                    76:df:d4:7e:51:a8:42:7f:6e:2f:cc:77:57:b5:10:
                    30:72:c8:82:dd:e0:d5:22:9a:01:f4:37:94:bc:d5:
                    59:5c:fe:d4:70:70:a7:07:8d:15:cb:8a:4d:43:a3:
                    ed:93:bc:50:c8:82:01:32:ad:7e:fd:14:ae:ee:4a:
                    33:d4:c1:20:ff:da:de:08:52:23:89:73:cd:74:14:
                    28:9b:d0:82:6e:8a:d1:ae:9e:ca:9e:bb:61:9f:2a:
                    e1:31:28:ae:df:67:31:3d:07:a8:05:f8:bb:41:c1:
                    34:57:c5:87:25:6b:03:33:a8:32:0d:46:f6:27:5e:
                    84:cd:36:c1:4b:38:9c:a0:69:6e:80:0e:cf:fa:e8:
                    7b:38:cd:74:87:bf:65:27:62:4e:07:ae:2e:95:88:
                    ef:0e:86:9f:16:66:ab:6f:49:83:08:64:e6:76:43:
                    a1:7b:50:49:9a:85:0a:86:c5:09:d6:b4:74:48:0e:
                    15:49:fe:4a:05:d5:21:fb:b9:32:68:00:7d:82:b7:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6A:9C:6D:A9:E5:2A:5C:82:C4:C6:64:FE:6D:A6:04:13:75:75:9D
            X509v3 Authority Key Identifier:
                keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:98:be:50:bc:6d:ac:0f:7e:3c:55:bc:9b:cc:f2:d7:a7:a1:
         72:ad:ff:7e:59:c6:fa:bc:cb:d7:5a:d8:58:2a:0b:8f:c2:ce:
         43:7d:2e:f5:2f:ed:1f:83:5d:d3:83:42:d0:23:ff:7c:8d:f3:
         04:24:c8:f5:f8:d7:b3:c2:27:e1:99:9c:93:22:dc:b3:64:9e:
         a2:78:a3:ba:81:8e:3e:f2:27:89:d3:1b:9c:d7:73:3d:8d:f8:
         e0:ed:90:3f:bb:47:4e:47:35:09:ed:95:e7:d0:6f:da:2e:fe:
         d4:2c:e8:59:7c:86:f6:69:c7:4c:5b:bd:91:2a:87:cb:a9:3c:
         8a:8b:b8:eb:b5:1f:22:56:d0:b0:5e:89:98:64:a0:f8:b1:a9:
         59:f1:4d:85:45:fc:a6:11:0c:bd:6c:a4:6b:f3:80:b0:15:6f:
         43:50:5f:5d:93:35:ca:a4:20:50:d5:40:39:63:f6:07:7a:f6:
         ec:4e:e8:d9:38:a7:41:95:e0:c4:77:d8:4b:61:a2:4c:a8:eb:
         d0:68:2d:d6:9b:45:da:01:b6:ee:95:72:6a:0b:44:e2:55:2f:
         51:6c:fb:94:19:33:0d:f1:45:fd:de:2e:e2:5a:ea:e6:b8:68:
         45:58:94:98:03:c8:1c:e9:61:d7:51:90:4f:1e:3c:3c:90:ca:
         d7:71:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:47 2025 by rpki-client