This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
File:                     lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json)
Hash identifier:          +XRaDShRXq0AprmEixM02S8Y0D9Qinxsf2OPtr90HAw=
Subject key identifier:   23:2C:9C:C7:F8:27:7E:2C:BC:DE:20:85:00:52:F3:37:CC:F7:F3:68
Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76
Certificate issuer:       /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
Certificate serial:       0818
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
Manifest number:          0809
Signing time:             Thu 04 Dec 2025 20:06:29 +0000
Manifest this update:     Thu 04 Dec 2025 20:06:29 +0000
Manifest next update:     Thu 11 Dec 2025 20:06:29 +0000
Files and hashes:         1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: ds9ohLri7RystrGOITDmSmDWt03LkjKpQNj0ycWQ48Y=)
                          2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376
        Validity
            Not Before: Dec  4 20:06:29 2025 GMT
            Not After : Dec 11 20:06:29 2025 GMT
        Subject: CN=6931e9c5-9183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:f1:07:c4:ef:ad:57:d9:fc:0a:e1:ad:fe:
                    aa:05:4c:14:bc:4f:70:92:c1:52:42:91:20:ee:db:
                    78:a5:84:f3:5a:d3:c9:fb:a8:4a:04:3b:39:60:86:
                    1d:fc:dd:ed:4a:64:4e:20:36:0b:d7:a5:61:65:eb:
                    17:25:44:b3:7e:8d:01:49:4c:f4:b0:2c:ce:c5:4e:
                    01:14:6d:1a:22:c0:2d:bf:3e:5d:dd:a5:9f:ab:08:
                    83:2f:f7:ee:e3:66:85:6f:7d:03:f6:f5:e8:91:27:
                    b7:d7:4e:27:76:d9:a9:95:5c:45:60:1d:3d:5e:d7:
                    1e:98:8a:a1:e0:ed:a7:c4:4f:42:dc:ff:4f:96:4a:
                    72:9f:3d:63:d8:cb:e8:a8:cd:69:a3:cc:c5:55:f4:
                    58:dc:1f:06:da:cf:d1:99:dd:af:26:bd:e7:bb:47:
                    00:fc:b3:08:ce:2b:dd:90:e3:22:e7:73:d5:8b:a5:
                    a8:3d:e9:5e:b3:02:d7:bc:68:4e:de:09:f3:9d:37:
                    80:1c:ac:3b:3f:a8:9f:e7:97:01:34:71:10:9e:ee:
                    2e:f4:a0:11:c9:03:2f:de:ce:c0:86:09:e3:04:d2:
                    f7:20:0e:02:fd:44:53:6e:91:75:64:4f:37:90:ba:
                    25:66:6d:b0:a0:a6:f1:94:65:7e:b0:9a:b0:bf:b9:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2C:9C:C7:F8:27:7E:2C:BC:DE:20:85:00:52:F3:37:CC:F7:F3:68
            X509v3 Authority Key Identifier:
                keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:7f:e9:d8:35:60:32:13:89:7c:a4:95:ad:29:ae:4a:63:
         96:6c:dd:da:a3:6a:cc:10:22:3f:14:fe:6b:75:44:f0:62:17:
         fd:5a:34:13:31:dd:21:a6:59:35:6d:f7:11:c2:51:dd:f7:02:
         2d:fe:63:5b:cf:79:73:4a:35:09:22:09:40:97:e4:9f:67:da:
         3b:b7:5d:3d:b0:f9:cb:34:7a:a7:89:89:a6:7d:c5:bf:57:12:
         4a:ee:c3:54:d6:bf:84:90:1e:72:f3:e8:0c:6f:28:94:60:b3:
         6f:e8:83:4c:23:36:b4:c6:88:66:1b:35:13:8f:e3:0a:81:93:
         b8:b3:53:63:fc:bf:be:bd:15:c4:20:23:8a:c0:dd:96:9f:5e:
         69:3c:d1:ba:9d:ac:21:a8:5c:73:d4:70:4d:fc:f3:32:66:ff:
         7c:8e:09:8c:cd:1a:e8:18:49:a2:2b:e1:5b:d3:50:5b:60:e0:
         f5:b5:bc:ec:59:a8:42:4c:5e:52:6b:01:ff:15:b0:7d:60:90:
         16:b6:47:bb:eb:06:e9:42:e9:1f:c8:bd:d3:f7:c6:4e:ee:8e:
         ea:c0:eb:72:43:45:2f:42:c9:c4:46:8c:0c:ee:50:6f:d5:ef:
         ae:82:94:7f:96:f3:9e:46:0e:e0:f9:6a:41:e4:6e:dd:cf:3b:
         ca:1c:9c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:32:02 2025 by rpki-client