This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File:                     lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier:          JSVyCycfV4RN4GghYOC2Jj9Ka0DamOX1xQ7JDCx/SWc=
Subject key identifier:   EB:1D:17:35:F0:23:63:55:39:EB:11:A2:6B:AC:B8:ED:32:B5:8C:A5
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer:       /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number:          6158
Signing time:             Sat 06 Dec 2025 14:15:25 +0000
Manifest this update:     Sat 06 Dec 2025 14:15:25 +0000
Manifest next update:     Sat 13 Dec 2025 14:15:25 +0000
Files and hashes:         1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: M8jTX4pgScNpWwx7SoZAlZGtl0+o6PkPfhGXyar4ZT0=)
                          2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 5XIGAWBdKItIK52ECdH5hYRYWf2CTjmbyPBWgm/ArQs=)
                          3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: TBXM5JKe9WQFg+eymDKm9rzq3YFGl2pFt087HO+fACs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
        Validity
            Not Before: Dec  6 14:15:25 2025 GMT
            Not After : Dec 13 14:15:25 2025 GMT
        Subject: CN=69343a7d-a9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:78:ff:60:89:68:5b:a3:f1:f6:de:32:5e:
                    bb:d1:2c:8f:b8:6a:64:3f:d4:19:ff:6b:e2:54:6a:
                    bd:f9:6d:18:7b:fa:32:dd:44:b1:93:09:62:36:9d:
                    77:75:c5:f6:53:0b:37:63:cb:1b:a1:b9:22:b7:48:
                    0d:b9:ee:d5:55:3b:28:7a:f5:bc:64:0e:eb:32:e5:
                    53:11:9d:39:d2:56:8d:7e:dc:2c:92:96:f9:56:b4:
                    d5:60:72:8e:34:44:94:56:8f:ce:04:ac:79:76:a7:
                    32:51:36:0e:45:8d:71:e3:be:63:8c:31:0c:0b:8a:
                    58:67:bf:93:73:cb:01:7a:db:9c:32:fe:d4:6d:12:
                    01:11:4d:d7:cd:0d:6c:67:c0:f5:2a:12:11:cb:d6:
                    a7:41:cf:68:22:f4:06:bc:35:9c:8c:0b:57:96:c3:
                    d8:86:ae:6d:15:50:6a:02:bb:45:d2:2a:5a:7c:9e:
                    3a:33:c2:3d:32:5c:0b:fa:30:40:06:ab:4d:04:9d:
                    7d:5b:e1:0e:77:10:93:3a:c9:32:41:70:ba:36:1e:
                    eb:7e:57:df:6b:18:0d:30:64:27:b4:65:f4:56:66:
                    1f:fb:6a:77:b0:e9:71:97:43:9f:9e:ac:3e:4f:f2:
                    c4:c4:34:63:99:35:69:99:bb:7a:68:2d:d1:fb:9e:
                    6b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1D:17:35:F0:23:63:55:39:EB:11:A2:6B:AC:B8:ED:32:B5:8C:A5
            X509v3 Authority Key Identifier:
                keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:42:91:a6:b3:75:ca:29:dd:47:dc:e0:3f:63:c9:aa:ca:78:
         ed:33:f7:55:16:66:29:97:6b:41:66:27:4b:dd:54:84:1f:eb:
         e1:17:fd:d2:ab:f6:f7:3d:26:45:0b:84:51:50:8d:37:c4:88:
         f5:8e:49:d8:7a:d7:6d:4b:97:fb:46:0a:bd:03:3a:72:91:e5:
         a5:00:e9:3e:85:ce:fb:d8:3d:8e:83:d0:f2:30:2a:47:04:e1:
         fc:e7:5d:a9:42:71:fe:85:74:61:fa:bb:8a:79:fd:75:9e:48:
         0e:37:2c:15:a1:94:83:aa:19:1d:fc:88:84:70:7c:d3:e9:a4:
         73:a5:f2:0d:40:b2:5c:dd:a1:aa:8b:33:04:f8:88:4e:57:fa:
         66:e6:2e:09:9e:cc:05:08:76:50:a7:81:e8:34:4c:5e:6d:ed:
         da:23:f9:d2:30:d3:82:be:3e:79:af:41:62:78:e0:8c:ec:18:
         f9:2c:f6:4d:76:62:13:02:d5:d2:d8:e3:4f:7b:d1:3d:9d:7d:
         57:09:32:94:41:00:e3:7b:ef:07:e4:39:c0:bb:28:b9:fb:bc:
         a1:5c:b0:26:85:e2:13:36:a7:d2:bd:8c:9b:b3:24:11:f6:13:
         4b:b7:89:9d:42:ab:d3:88:1a:da:51:d2:db:25:45:b6:92:97:
         b0:e5:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:29 2025 by rpki-client