This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
File:                     LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json)
Hash identifier:          sIZybtmYhCUR/1x9LXStM781/UsHv2br448pjd3ceVg=
Subject key identifier:   CA:4F:29:A1:E4:DE:58:0A:76:2A:F0:15:EA:3C:F1:65:05:FA:AA:E9
Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3
Certificate issuer:       /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
Manifest number:          B0
Signing time:             Fri 05 Dec 2025 04:05:10 +0000
Manifest this update:     Fri 05 Dec 2025 04:05:10 +0000
Manifest next update:     Fri 12 Dec 2025 04:05:10 +0000
Files and hashes:         1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: Xm1Yq2+HTMC1LLCGUPX8G3HfcH2eHOVhcv+86jezIr4=)
                          2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3
        Validity
            Not Before: Dec  5 04:05:10 2025 GMT
            Not After : Dec 12 04:05:10 2025 GMT
        Subject: CN=693259f6-22dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:cb:7d:31:0a:0a:9e:76:e0:a4:33:e6:81:
                    b8:55:ef:57:88:e9:79:12:c0:d3:70:ff:70:b9:e5:
                    09:29:12:e9:45:db:ae:3f:47:21:46:0b:65:09:53:
                    f9:0d:6a:d1:fc:29:b9:d9:66:28:be:ce:17:63:b8:
                    7e:16:03:c5:40:20:70:28:5f:b3:80:49:4c:d5:c9:
                    87:bb:67:0e:bc:68:77:b0:e9:bc:db:71:ae:86:51:
                    46:be:76:cf:78:e2:05:8b:0d:5b:3a:e8:54:71:7d:
                    29:3c:c6:6d:1f:36:8b:07:d8:84:41:a0:77:d1:41:
                    86:cb:18:1b:19:c1:fd:b6:e4:7b:d0:8c:f5:4a:70:
                    5e:f9:56:f7:b5:64:81:74:44:e1:b1:5a:4a:91:da:
                    62:bc:9e:1d:b8:b8:0f:15:b4:01:f2:d2:4e:ec:bd:
                    19:2c:6d:93:7d:96:61:ae:7d:a3:f6:d3:ef:58:ee:
                    88:72:7d:38:c9:c8:e8:e7:c3:75:b7:d0:5c:f4:31:
                    83:0a:c6:68:15:78:5c:8a:73:51:ef:16:c4:aa:f5:
                    72:71:48:ca:87:67:33:e6:34:7e:84:b8:30:4c:41:
                    26:2e:2c:14:64:5f:f8:50:10:36:54:b4:2e:88:36:
                    f0:dd:53:be:ef:59:cd:54:21:72:37:f0:c1:9b:03:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4F:29:A1:E4:DE:58:0A:76:2A:F0:15:EA:3C:F1:65:05:FA:AA:E9
            X509v3 Authority Key Identifier:
                keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ab:24:30:7a:32:5b:cb:50:73:05:d9:96:48:54:70:a5:10:
         4c:53:da:3f:4a:fa:ec:6e:fe:cc:f8:42:e7:f6:1e:17:d2:ba:
         f2:5a:2e:c3:d2:fa:09:69:8f:92:83:bd:47:4b:bb:59:a2:c3:
         65:2a:bf:8f:67:14:8c:af:54:af:9f:b3:e1:5c:a8:0b:c1:32:
         12:f6:c2:e3:0f:23:a4:72:34:1b:31:27:d5:f5:9f:b2:28:af:
         8e:ad:e0:37:6a:31:cb:9b:89:b8:2b:df:05:3f:75:a6:67:b4:
         dc:d0:1d:b8:4d:c7:52:d7:1e:fd:a4:48:2d:36:b5:bf:f1:25:
         c3:0b:0a:6c:8e:4b:71:2d:5e:59:e9:b2:57:d6:2e:dd:99:92:
         d7:11:3e:7d:96:9e:a1:22:9c:ce:e7:2d:bf:d6:cc:cd:97:a1:
         7e:ee:21:aa:75:e3:b6:14:ae:ca:85:db:d3:50:a3:9b:99:3b:
         41:7c:34:d4:8d:dd:fa:3e:cc:f7:46:ce:9f:8d:dd:c6:7f:d5:
         ea:6d:58:e0:75:66:a8:13:21:5e:1b:86:e9:0c:62:55:ce:5a:
         40:ed:ec:23:ad:ce:0a:4e:3d:b9:49:c2:1a:70:b6:ef:eb:15:
         ae:39:3d:6f:e4:be:2c:d0:83:32:db:87:1e:75:af:f0:c3:7c:
         04:37:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:12:49 2025 by rpki-client