This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
File:                     LhWWOMt5D3lFFyLlKs602oBfi5c.mft (raw, json)
Hash identifier:          8Ai5/Ak5exHK+BXIEiPOgremawfcy6Qfm0/+VBxxicI=
Subject key identifier:   3A:13:48:74:AD:75:64:62:C8:B6:77:94:51:36:85:A8:0B:EB:7E:58
Authority key identifier: 2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97
Certificate issuer:       /CN=A91A1E13/serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
Certificate serial:       06B6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
Manifest number:          06B4
Signing time:             Sat 06 Dec 2025 21:09:18 +0000
Manifest this update:     Sat 06 Dec 2025 21:09:17 +0000
Manifest next update:     Sat 13 Dec 2025 21:09:17 +0000
Files and hashes:         1: LhWWOMt5D3lFFyLlKs602oBfi5c.crl (hash: 8BBgoWHEA4KisTgaiXy6ezhFH0L1+WVo72GjRf7i6cY=)
                          2: 6981A2B8879A11F0A06BE519C4F9AE02.roa (hash: zJFBrogxJmrgFn6KndJfwEvlPnHVGLhKeq6Q6YowlNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl
                          rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1E13, serialNumber=2E159638CB790F79451722E52ACEB4DA805F8B97
        Validity
            Not Before: Dec  6 21:09:17 2025 GMT
            Not After : Dec 13 21:09:17 2025 GMT
        Subject: CN=69349b7e-2aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:09:b3:f3:7b:9e:38:a0:88:38:bc:2b:ca:
                    44:a6:36:70:0f:0b:66:e1:82:6a:12:4d:52:ef:38:
                    bf:b6:bb:74:bf:b3:db:95:11:16:68:0e:b4:5c:f0:
                    f6:db:41:b1:d8:d8:08:6e:b5:56:8e:b1:e3:95:0f:
                    98:7e:66:fb:9b:a6:e2:13:bc:5b:4b:63:71:55:d3:
                    81:55:44:3c:c1:64:bb:ca:b1:3d:36:79:fd:92:d7:
                    67:91:95:fe:64:05:02:7d:a4:3c:da:54:9b:a6:ac:
                    4e:a7:06:2d:7f:7f:d8:8c:4a:7f:c4:9e:ba:97:2b:
                    51:d2:29:38:dd:e0:29:f6:28:20:ed:64:ad:04:0f:
                    ad:8d:00:75:af:53:52:fd:5d:2c:e2:dc:92:b3:43:
                    17:58:cd:f4:7d:5d:25:80:a4:b3:50:51:4d:10:3c:
                    a0:38:95:dc:95:5c:f9:b5:28:56:22:55:2f:03:fc:
                    e9:d0:f7:47:fd:39:97:e4:6e:c6:f6:27:14:fe:e7:
                    9d:4f:1b:ce:03:fb:4c:a0:74:f5:55:6b:23:28:f0:
                    dd:50:0f:68:32:c6:de:81:7e:d6:ae:46:89:aa:bb:
                    cd:3e:68:d0:21:33:7a:8f:85:39:57:d0:09:fb:f5:
                    cd:8f:3f:a7:65:e1:c4:45:f5:ec:3b:12:b5:a6:62:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:13:48:74:AD:75:64:62:C8:B6:77:94:51:36:85:A8:0B:EB:7E:58
            X509v3 Authority Key Identifier:
                keyid:2E:15:96:38:CB:79:0F:79:45:17:22:E5:2A:CE:B4:DA:80:5F:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/LhWWOMt5D3lFFyLlKs602oBfi5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/0FA5F0D0866B11EB9BFD4F32C4F9AE02/LhWWOMt5D3lFFyLlKs602oBfi5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:6b:ec:9d:90:9e:b0:90:a7:5c:88:78:52:bd:2e:60:55:
         cd:a8:69:eb:cc:59:dd:83:8d:fa:4c:9a:85:9a:ab:2c:5c:a1:
         73:93:91:46:73:6f:22:f1:73:02:93:94:b6:4d:bf:f7:26:67:
         08:33:0e:a0:f3:56:97:eb:b5:5e:a9:4a:ca:21:06:39:04:55:
         2a:6c:b7:1e:06:d6:96:75:8d:4b:cb:99:2e:0e:cf:26:c3:12:
         f8:90:08:de:75:73:60:9f:ad:68:2d:a7:7f:94:d3:65:ff:bc:
         a0:46:89:b0:06:1e:d3:44:ca:8c:c2:ca:42:92:1a:61:e4:e0:
         c2:07:47:66:f6:11:c1:79:72:77:5a:fc:5a:de:f3:2b:cd:a6:
         93:20:f7:81:87:95:1c:91:97:a5:87:39:5b:a4:66:66:09:03:
         a2:63:49:2c:ae:c3:cb:2a:41:8d:49:4a:71:fe:27:60:67:38:
         55:06:f0:ed:03:b9:dc:30:38:9d:cf:ba:cf:3f:e7:8a:38:ae:
         8c:2e:08:20:26:86:fe:96:5e:1d:ec:1e:95:e0:35:c2:dc:f8:
         ba:5d:18:79:2e:1f:9b:f4:0e:28:c9:98:2a:b2:fb:83:31:1f:
         b3:da:aa:30:b3:b7:4a:52:5f:21:7a:b9:41:19:b8:59:50:95:
         dc:56:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:55:13 2025 by rpki-client