This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File:                     LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier:          ui9Qq+m8bkaLMPZOEoBLiQwS5wVm8FKBm6N7n5D30MQ=
Subject key identifier:   E7:0E:E7:DA:58:7B:E4:7F:CD:B8:43:3F:0C:91:CD:08:03:01:77:81
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer:       /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number:          F5
Signing time:             Fri 05 Dec 2025 03:15:48 +0000
Manifest this update:     Fri 05 Dec 2025 03:15:47 +0000
Manifest next update:     Fri 12 Dec 2025 03:15:47 +0000
Files and hashes:         1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: dJwYgQXZsOEFKX3CfHUc/hWBZffWfkweRH+CXaRYbQQ=)
                          2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
        Validity
            Not Before: Dec  5 03:15:47 2025 GMT
            Not After : Dec 12 03:15:47 2025 GMT
        Subject: CN=69324e63-1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:c2:27:5b:72:63:9c:1e:62:50:26:09:90:
                    09:87:91:09:43:54:77:b4:01:ba:96:fa:0a:ca:93:
                    12:21:63:25:47:22:11:fa:d5:7e:b6:65:95:f0:b6:
                    bd:6f:4d:87:6a:d9:be:30:f3:86:d7:db:30:75:d8:
                    d1:ae:57:bb:ea:92:b6:43:87:53:cc:37:2c:7d:2b:
                    8b:a9:2f:f9:31:7e:f7:fc:36:35:89:07:92:86:c5:
                    05:0a:78:df:dc:ed:eb:0e:cd:52:0b:39:57:fd:7e:
                    5d:f3:b6:a9:09:f0:55:37:38:c3:0a:ee:ab:0f:d4:
                    96:2a:4a:3a:5f:0b:af:21:18:6b:3a:56:0e:87:3b:
                    4a:66:28:3c:f8:42:07:3c:84:55:00:94:6f:5c:6e:
                    02:8e:48:94:09:2d:21:c6:35:df:e9:e0:e6:e3:89:
                    3a:d4:8d:fa:0f:22:79:70:e5:67:7c:61:5f:f3:a0:
                    13:50:68:54:08:9f:7d:4b:5e:09:bf:34:14:b2:2c:
                    4b:b3:61:db:55:28:32:d8:09:e4:77:16:fd:73:1f:
                    43:16:ea:87:37:90:7f:f3:24:da:03:27:48:59:b3:
                    77:3e:3e:4f:41:86:b3:e3:2f:1e:eb:67:e5:89:28:
                    14:ac:71:79:64:bb:a0:54:d2:2f:1c:9a:93:71:98:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:E7:DA:58:7B:E4:7F:CD:B8:43:3F:0C:91:CD:08:03:01:77:81
            X509v3 Authority Key Identifier:
                keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:23:10:36:ad:9c:cb:08:f1:a1:b1:fe:23:3c:14:26:d2:77:
         e6:67:60:b6:44:71:3d:57:ae:bc:a6:3f:39:d0:60:0e:c7:ec:
         82:25:eb:19:19:05:e8:de:33:59:2f:8a:12:ce:71:e4:85:28:
         96:fa:0d:0d:eb:cb:58:e1:54:e4:3e:9d:40:51:19:77:6b:34:
         d5:62:02:72:10:1b:57:e6:2c:a5:fa:6a:07:be:64:4b:b7:bf:
         ef:4a:e9:f3:6f:13:65:19:f2:50:e1:e7:e9:91:f6:e6:92:62:
         f4:4c:e4:a3:9f:eb:07:44:06:f1:f2:0f:9d:ed:43:1d:0f:41:
         b0:c6:60:40:48:23:3a:1c:5b:95:8a:b1:69:86:e8:51:4e:9a:
         9f:9a:ca:66:e7:4e:9e:84:ae:ff:d9:01:7f:31:b8:34:08:92:
         90:de:63:23:51:25:d4:59:74:4d:7b:33:92:03:b8:58:0f:a2:
         f3:44:b4:da:b3:3d:1d:ea:f0:f7:9f:98:f5:67:29:d1:64:45:
         77:11:32:53:66:d9:1b:b6:f6:ec:b2:c1:fd:85:e4:d0:c4:2b:
         c9:c1:b7:45:7e:c3:f1:15:1f:54:fc:db:37:44:3d:d0:0f:e1:
         a1:2b:25:ea:ae:45:d3:34:78:a0:fa:1a:35:49:22:2b:4f:86:
         00:7a:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:10 2025 by rpki-client