This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
File:                     L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft (raw, json)
Hash identifier:          cXnzrX+1X93kC67OpIo2Omd0BdqQsActb8XZA7VeTKU=
Subject key identifier:   4E:83:EF:6E:C1:F4:41:76:A9:12:1F:51:55:E0:2A:93:87:AE:DB:B9
Authority key identifier: 2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59
Certificate issuer:       /CN=A918049D/serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
Manifest number:          16
Signing time:             Fri 05 Dec 2025 05:41:24 +0000
Manifest this update:     Fri 05 Dec 2025 05:41:23 +0000
Manifest next update:     Fri 12 Dec 2025 05:41:23 +0000
Files and hashes:         1: L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl (hash: ePhQ1+hHv+V/Rtn4xpbKl4khTvWlglu50TnDTuMDHnI=)
                          2: 541D17D2B2C811F092F27081C4F9AE02.roa (hash: Bo/+kZ5KOHNuiEOOVJQGjVbjfu7e6AaHxR3mGm0eu6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl
                          rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918049D, serialNumber=2F6BCB5C5EBF736736656844B116C48DA5511259
        Validity
            Not Before: Dec  5 05:41:23 2025 GMT
            Not After : Dec 12 05:41:23 2025 GMT
        Subject: CN=69327083-0963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:97:4f:15:a4:bf:36:99:8d:4b:0a:5c:4f:
                    57:80:b9:e8:0c:d1:e3:50:ef:80:36:33:51:75:2e:
                    64:21:cf:1f:48:30:2a:ec:be:f3:02:36:25:fb:2f:
                    d0:f5:cf:7e:d7:c1:35:c7:68:2d:cd:ba:c7:a6:e8:
                    5e:07:a9:86:af:ac:84:45:f2:40:fe:ed:ba:0f:7c:
                    da:7b:c6:37:c9:fc:7f:c4:57:22:c3:d7:19:6c:a5:
                    8b:e9:64:f0:62:03:cd:16:07:28:ec:64:a9:be:ba:
                    b3:62:53:99:10:ea:3b:c4:c5:88:a6:d2:e9:01:1c:
                    61:63:33:52:a6:14:f3:d2:75:e9:d5:97:f1:83:22:
                    96:cd:75:f0:51:9c:24:ff:3d:ed:69:d8:74:c0:34:
                    05:f5:7d:09:09:81:ec:f1:66:b2:fb:7b:95:d1:3f:
                    69:20:ca:83:ac:4b:8a:a9:4e:90:87:89:f0:42:e3:
                    9a:00:ba:3d:fc:9e:19:da:42:1b:38:e5:0d:b6:5e:
                    b2:7e:a2:a3:0f:3c:75:27:3c:62:ec:b1:cf:da:b9:
                    9e:31:fc:fd:d0:9b:94:49:d1:8f:93:31:c4:a5:b2:
                    41:86:4d:78:49:0c:91:d8:cf:0a:36:37:77:cd:b8:
                    b1:17:22:6f:ea:ad:26:6a:2f:35:3e:cc:df:b6:63:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:83:EF:6E:C1:F4:41:76:A9:12:1F:51:55:E0:2A:93:87:AE:DB:B9
            X509v3 Authority Key Identifier:
                keyid:2F:6B:CB:5C:5E:BF:73:67:36:65:68:44:B1:16:C4:8D:A5:51:12:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L2vLXF6_c2c2ZWhEsRbEjaVRElk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/AB66E092B2C611F09134BA6DC4F9AE02/L2vLXF6_c2c2ZWhEsRbEjaVRElk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:71:06:1c:58:b2:1c:65:c3:da:d3:c4:b1:33:8b:c9:0e:19:
         71:41:e3:03:e8:5c:03:01:15:64:58:e4:70:35:09:9f:3b:07:
         3d:1f:b6:7a:9a:1f:47:ca:71:8d:52:b7:2c:e2:3e:8c:f0:c6:
         5c:99:eb:c7:ae:29:f8:20:0a:4b:dc:7f:97:bc:38:be:05:2f:
         5d:a8:70:62:4d:fa:03:06:fe:fa:36:c1:4a:e4:af:3f:dd:27:
         74:c7:fe:f4:1d:69:21:21:15:61:0c:95:43:98:32:f1:d8:8b:
         83:4e:d9:b0:05:83:33:ea:8d:b2:f0:a3:6c:21:63:fd:b2:ca:
         6b:27:78:c2:f4:58:59:8a:03:7f:e1:cb:5b:3c:6d:a8:1f:0f:
         b8:3b:dc:10:93:85:20:d1:cb:89:53:48:2d:ba:f8:ea:a0:16:
         0b:9c:7c:02:6b:24:5a:38:e8:0f:1b:30:ca:20:19:5c:0f:69:
         c7:9b:3f:4d:73:c3:59:8d:3c:dd:d2:98:f4:db:d5:c9:7f:93:
         24:72:06:4b:35:a9:47:e6:41:fc:60:ef:75:3c:47:8b:ee:64:
         68:fb:86:cd:5b:9e:d8:8d:a0:d3:79:2a:a7:d6:13:dc:01:f3:
         6b:1c:b4:4a:51:e3:f1:d6:e3:94:fa:1f:54:27:fe:2b:d9:fe:
         34:ed:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:22:03 2025 by rpki-client