This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
File:                     Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft (raw, json)
Hash identifier:          ErdcYvCOVOMxBmrxg4ZVOBHYe/Bi9PAoNaYXwSpnTxo=
Subject key identifier:   39:C4:48:38:CB:6D:B0:CB:1D:35:45:69:69:D3:BD:A1:5A:AC:97:05
Authority key identifier: 2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98
Certificate issuer:       /CN=A91CDF83/serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
Certificate serial:       032A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
Manifest number:          0324
Signing time:             Thu 04 Dec 2025 23:29:01 +0000
Manifest this update:     Thu 04 Dec 2025 23:29:01 +0000
Manifest next update:     Thu 11 Dec 2025 23:29:01 +0000
Files and hashes:         1: Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl (hash: 8AzaIO6GyPoRHONlnIKSqZtajF8jrJ+3+AarLEedPWY=)
                          2: A8A44B84F13511ECB096F867C4F9AE02.roa (hash: qa15tYjyvK+v+9+dFGqhDZRxQn9RFba+Z/+v8OfQMJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF83, serialNumber=2EF876A664E5D8B6CDE01CF08410DBAD96BC4998
        Validity
            Not Before: Dec  4 23:29:01 2025 GMT
            Not After : Dec 11 23:29:01 2025 GMT
        Subject: CN=6932193d-4dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:d4:df:9a:ae:5e:bf:8d:b2:88:7d:f8:32:
                    d5:49:dc:cf:62:68:09:e2:87:42:e4:27:0f:36:81:
                    03:40:06:f2:02:0d:0f:8d:c0:38:82:0f:f9:91:ca:
                    97:e6:3c:ff:bf:7b:46:8b:fb:6b:f1:c4:dd:89:ef:
                    74:ff:fd:c6:cf:13:3b:e3:67:c1:b0:28:34:02:d6:
                    ed:47:81:5a:2c:da:92:03:9c:99:07:00:1b:e3:41:
                    be:e0:40:52:ef:a6:57:0c:83:51:b6:1b:d0:9d:55:
                    f3:8d:1e:70:4f:42:59:44:80:86:0e:55:01:9f:2b:
                    31:12:46:bf:9b:08:4d:4a:60:91:a0:18:10:35:f2:
                    39:ae:9b:be:1d:3d:06:49:09:12:70:41:81:33:ff:
                    31:c4:65:1d:e4:5a:20:81:d8:80:4f:81:42:ff:59:
                    68:0a:02:d8:7c:6f:13:35:09:bd:9f:af:78:e6:87:
                    eb:09:87:aa:15:eb:cc:b6:e3:b0:fb:73:74:3f:34:
                    47:19:4d:c8:46:84:aa:84:7a:68:24:05:79:94:08:
                    0b:c6:4f:03:64:5a:d9:a0:0a:31:86:67:b6:33:8e:
                    91:1e:62:dd:c8:bd:1f:2a:30:18:ff:e2:25:35:6b:
                    48:80:d8:c3:56:f4:e7:40:24:a0:94:55:91:4d:35:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C4:48:38:CB:6D:B0:CB:1D:35:45:69:69:D3:BD:A1:5A:AC:97:05
            X509v3 Authority Key Identifier:
                keyid:2E:F8:76:A6:64:E5:D8:B6:CD:E0:1C:F0:84:10:DB:AD:96:BC:49:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF83/E2AE3B0AF13011EC86DE7D63C4F9AE02/Lvh2pmTl2LbN4BzwhBDbrZa8SZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:61:8c:60:ae:89:a3:79:51:96:50:87:99:5b:cb:e3:b1:b7:
         08:2c:e9:75:38:c4:e8:e3:50:88:cd:6a:04:0b:f8:fa:4a:27:
         42:18:87:1b:11:b1:cf:94:2e:78:94:20:20:0f:53:55:48:f8:
         d4:2c:1e:6d:2f:cc:e0:b7:3b:38:5b:13:f9:cb:df:7a:84:69:
         f4:e2:05:69:8d:3b:7c:e6:2f:41:eb:fe:b1:d2:77:a9:86:d5:
         99:02:1c:3b:3c:e2:ae:32:34:a3:53:4c:b1:7c:f6:dd:5a:bb:
         80:7e:34:d6:fe:1f:58:13:c1:ea:66:c1:5f:9e:51:19:d1:f2:
         b0:7b:b3:cb:7d:52:9e:9e:5c:d9:54:d9:2b:73:9f:37:42:f4:
         14:03:43:c5:16:dd:f7:7f:c7:f8:38:1e:1f:c7:2e:c2:6b:c6:
         77:35:2c:58:c8:06:ff:62:4f:42:15:af:22:e5:70:36:d8:18:
         87:20:c3:25:0e:1f:31:3b:11:41:42:09:6d:87:fc:f7:39:8c:
         fb:08:3e:0a:97:1d:8d:9a:03:23:78:f8:87:6c:88:be:ef:64:
         47:64:77:8c:d1:6f:61:5a:2c:91:76:c7:d7:fa:4b:bf:d9:b6:
         ae:fe:4a:44:40:69:c9:4e:a3:a5:99:b7:3b:ac:f7:1f:a1:59:
         f7:93:a7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:47 2025 by rpki-client