This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
File:                     lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json)
Hash identifier:          f2mP3BDEuP+d9xoKM8XejDT86/oivIJ10SWJeQNJu+A=
Subject key identifier:   99:21:2C:CB:38:2E:A5:F4:8D:B0:03:A4:75:86:C9:E0:E3:05:5B:98
Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0
Certificate issuer:       /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
Manifest number:          011B
Signing time:             Fri 05 Dec 2025 02:50:45 +0000
Manifest this update:     Fri 05 Dec 2025 02:50:44 +0000
Manifest next update:     Fri 12 Dec 2025 02:50:44 +0000
Files and hashes:         1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: cZ2L3grpqXpHyiwViteT1KoRoNGPtemomnSv7YzZIc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0
        Validity
            Not Before: Dec  5 02:50:44 2025 GMT
            Not After : Dec 12 02:50:44 2025 GMT
        Subject: CN=69324885-b1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2f:5c:3f:df:8f:cf:e2:49:06:30:ab:06:4b:
                    d3:f9:b3:02:a5:b0:54:d9:5a:f6:6c:d6:4c:48:a5:
                    5f:fb:92:88:f0:23:d9:f9:b3:44:2a:a9:88:57:44:
                    19:bf:ca:ad:1e:bb:82:25:5d:45:f8:56:ab:13:83:
                    30:40:1b:6a:73:83:19:12:7e:49:dc:e1:c4:26:6b:
                    d2:6f:f5:2b:95:09:ba:f4:3c:d6:5b:50:0c:1b:d8:
                    f9:fa:15:43:e8:0c:db:aa:b1:76:b4:15:fe:d4:24:
                    0a:9a:ab:c5:95:74:24:2a:ad:22:75:42:65:d8:b1:
                    e4:6f:a6:79:9b:01:63:ab:8e:55:d8:97:64:62:0e:
                    df:45:02:ad:45:81:bb:ad:c6:b3:50:ff:d6:24:f2:
                    50:d0:4d:84:37:65:a0:d4:5f:d0:b5:7f:26:f3:3a:
                    0f:2c:00:84:b8:43:ed:3e:a1:e7:44:ed:9d:1f:e4:
                    98:6c:c8:ed:91:78:27:af:4f:69:05:8f:6d:a0:af:
                    63:55:0d:f8:3e:3f:f5:0c:07:08:2c:ed:1a:2a:91:
                    f2:af:b6:35:b8:d9:86:15:e7:fb:b6:3d:7a:65:f4:
                    29:35:1d:71:2e:5f:9c:c2:f0:c0:2d:c1:ae:4f:ba:
                    7d:68:b8:14:8b:f3:3a:b7:bf:b1:48:f9:00:42:68:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:2C:CB:38:2E:A5:F4:8D:B0:03:A4:75:86:C9:E0:E3:05:5B:98
            X509v3 Authority Key Identifier:
                keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:49:3f:38:35:4f:5c:ac:75:20:c8:18:6d:9b:39:ba:9f:
         06:56:26:e7:76:79:4f:c2:0b:a9:94:58:ca:62:59:91:62:a7:
         0d:c2:39:2f:7b:a4:8f:8e:d5:a4:70:fc:1d:19:3f:5b:e0:9b:
         a5:40:2c:b3:51:93:30:0d:0d:dc:df:53:f8:d8:ee:d6:70:3e:
         b7:59:72:54:61:d5:e2:dc:de:a6:d5:ed:ae:23:7c:cd:22:c9:
         b9:e8:6c:0e:d6:90:3a:4a:d9:0e:cc:10:81:c6:7b:91:4d:be:
         1b:f3:f5:15:3d:85:1d:b8:77:08:cf:51:75:bd:cb:66:ce:3e:
         2c:0a:c7:44:9e:df:c3:87:6b:c5:5e:49:5f:8c:c6:96:87:6c:
         3a:9f:f2:28:36:13:87:dd:bb:17:c7:5e:95:14:89:b5:fd:c8:
         6d:e2:0b:50:43:3b:f8:f9:4d:89:25:1d:d0:70:45:a9:15:ae:
         d8:c6:89:f7:94:34:94:66:10:9b:28:1e:9f:32:ce:29:01:fe:
         dc:4e:67:80:22:c4:b2:47:af:55:6b:a1:87:1d:34:1a:95:47:
         a2:4f:7e:95:7a:6d:ed:bc:a0:6c:d2:62:b1:dc:4d:73:23:c4:
         e4:e2:56:6f:a5:45:7f:79:0b:b1:b8:1c:b3:dc:c2:9e:4b:60:
         4c:97:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:55:58 2025 by rpki-client