This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
File:                     L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json)
Hash identifier:          d7op+/835wQD8lpzlx2w/ImUpBzaSyee+b2cdTj0oUw=
Subject key identifier:   B2:97:47:1D:5F:9E:72:BB:AE:75:C8:B0:C8:26:05:6E:15:3E:35:AD
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Certificate issuer:       /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial:       0338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
Manifest number:          0310
Signing time:             Thu 04 Dec 2025 23:36:46 +0000
Manifest this update:     Thu 04 Dec 2025 23:36:45 +0000
Manifest next update:     Thu 11 Dec 2025 23:36:45 +0000
Files and hashes:         1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: fQM4RzrboaiXCWI4vkD5+2/O2UcyrMBrv1wt2wgWarY=)
                          2: 88E1581E93C611F093DD4E26C4F9AE02.roa (hash: 3ZU7uxKO/t/DcPW4C30weX2MJ8vKNau0nNzc4ySxziM=)
                          3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=)
                          4: 880B53F493C611F093DD4E26C4F9AE02.roa (hash: kI7hR0gi82H4tGr9L9+N926LnNI7bRFFE0ZznH05Fqo=)
                          5: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=)
                          6: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=)
                          7: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
                          rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
        Validity
            Not Before: Dec  4 23:36:45 2025 GMT
            Not After : Dec 11 23:36:45 2025 GMT
        Subject: CN=69321b0e-7c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:ce:cc:04:da:15:9b:1e:c4:57:58:c1:8b:
                    8a:78:8e:34:8d:4a:5f:63:7a:ba:a4:7d:6a:d3:99:
                    d6:c7:71:68:81:00:fa:ff:f8:d9:12:34:b4:f0:a1:
                    18:89:2e:4d:46:58:d2:32:91:5b:3a:2d:f7:e0:95:
                    11:e0:c8:d5:d4:6b:63:72:b5:0a:60:ae:1d:2d:17:
                    cd:b5:a4:ff:a3:fb:dc:65:bb:2d:ae:03:c2:91:b9:
                    d1:e2:bd:9f:29:53:0d:1e:9b:41:52:e0:d4:fe:d9:
                    4f:8f:19:2c:01:f2:17:70:95:82:94:76:69:67:1f:
                    fd:ad:fb:34:a1:02:49:62:43:9a:b2:c0:06:68:51:
                    31:f0:b7:4d:e8:86:9f:c2:7f:1e:45:ce:af:4c:bf:
                    68:c5:b1:9c:fd:84:99:9b:0b:5e:db:64:0c:67:48:
                    fc:fd:b7:f5:aa:c0:4d:e4:1d:5b:36:c3:73:b4:7b:
                    f0:32:09:1d:61:db:37:d7:8a:f2:fd:d1:b4:26:71:
                    40:a6:0b:68:22:f1:97:2e:2e:55:ac:30:5b:17:be:
                    2a:ac:ad:68:bd:15:0a:4e:e0:19:12:0d:cc:c4:b5:
                    b2:40:05:dc:44:f6:a1:4a:82:c3:a6:77:8b:18:b4:
                    0c:70:2a:d9:2d:03:6e:7e:7d:ae:85:96:86:43:e3:
                    3d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:97:47:1D:5F:9E:72:BB:AE:75:C8:B0:C8:26:05:6E:15:3E:35:AD
            X509v3 Authority Key Identifier:
                keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:0e:3f:08:dc:8e:2f:31:31:d7:a2:6f:ad:b3:56:ca:7c:
         d6:1b:cf:08:09:85:cd:ab:3c:70:2b:1a:61:3a:14:de:ed:5d:
         ec:f6:08:be:fb:36:71:f1:39:89:e8:ea:cc:dd:3b:35:5e:76:
         01:0b:3b:38:fd:b9:7a:15:ab:02:b0:01:d7:48:60:88:ce:93:
         f9:ac:fe:29:d2:e7:86:4b:42:30:1e:c3:5b:86:a3:3c:2e:c0:
         c5:1d:fd:42:0e:a4:0f:6b:b6:a0:70:68:22:8f:7a:29:58:ce:
         67:3b:bc:af:5e:6a:47:e2:cb:0c:be:ea:ce:1f:99:85:a1:c6:
         fd:92:a5:29:0b:4b:5a:a2:82:8a:89:09:29:bc:c0:27:8d:3f:
         56:9a:b0:d4:d7:9d:3b:6b:98:6d:bf:55:c5:81:8d:2d:17:78:
         9f:53:33:af:ee:86:1e:4c:5d:a3:6b:f9:13:c1:b5:dd:78:54:
         90:d9:d7:8e:ba:c1:ca:04:74:84:db:1c:cd:a4:4d:bb:cb:12:
         14:26:5b:85:c3:91:1b:20:20:68:e5:e0:ca:59:8a:64:d9:b5:
         ac:60:95:fa:07:6a:a1:94:60:b3:70:98:4f:e4:1c:f1:1d:6c:
         de:09:56:bf:c9:45:d7:9a:3b:53:ef:d7:6b:99:5f:71:69:d7:
         f4:11:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:20 2025 by rpki-client