This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File:                     ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier:          2qDzHliKFjMbuvYh7jaXU9DIhEMeQFsTQSVuTbDbYaY=
Subject key identifier:   08:55:04:DA:6F:CB:44:CE:C5:FF:27:E0:AF:DC:E6:E4:B9:C5:D8:F1
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       03DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number:          03D3
Signing time:             Sat 20 Dec 2025 23:50:09 +0000
Manifest this update:     Sat 20 Dec 2025 23:50:09 +0000
Manifest next update:     Sat 27 Dec 2025 23:50:09 +0000
Files and hashes:         1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: 8hG1xI1G0op2BpSXwpi1izu6BBYdQNsTR48yPTXJeFY=)
                          2: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=)
                          3: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 23:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Dec 20 23:50:09 2025 GMT
            Not After : Dec 27 23:50:09 2025 GMT
        Subject: CN=69473631-ead2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:fb:6c:52:b1:f7:9f:22:c1:db:77:e4:48:
                    ec:0e:7b:ed:08:4d:d8:9b:e0:37:4d:25:76:bd:77:
                    b7:fb:ef:55:70:3b:eb:1d:8e:0e:f9:77:c2:b0:f6:
                    93:3a:56:ed:38:56:72:75:74:0f:da:31:66:d5:d1:
                    b8:cb:97:8d:24:e3:5e:69:95:cf:fd:ed:2d:d6:ad:
                    47:f7:df:69:1d:f9:b9:7a:a6:e3:a8:6f:da:1c:ae:
                    d7:b6:fa:2c:02:b2:74:d2:89:f6:7b:ba:42:45:7e:
                    b1:de:6b:3e:35:48:99:f9:38:bc:df:5f:c0:90:67:
                    a6:68:d4:ee:2a:fe:13:42:1b:09:82:cd:b6:38:e5:
                    04:49:fd:23:14:73:01:8e:11:a3:ae:d7:08:82:f9:
                    6c:60:28:e9:e6:52:ca:60:ad:11:ba:63:0f:12:22:
                    50:88:c6:e5:2b:f0:e8:a0:ab:83:39:ae:76:d1:75:
                    07:11:05:8a:a3:2a:e7:a8:0f:5a:f0:73:5d:61:b3:
                    15:51:22:86:5c:9d:a0:90:32:03:cd:78:46:3c:55:
                    10:14:bd:53:e9:11:0d:78:be:c9:06:b3:a2:ff:f3:
                    6b:82:12:a9:c7:86:d9:4d:1a:a8:98:ec:84:df:d6:
                    33:ee:0f:82:a5:b5:02:b4:54:4d:e9:43:ed:10:e5:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:55:04:DA:6F:CB:44:CE:C5:FF:27:E0:AF:DC:E6:E4:B9:C5:D8:F1
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:15:7c:4e:4c:4b:dd:6a:bd:21:cd:68:b8:a0:87:66:62:
         41:98:be:db:a6:4d:b1:99:f2:83:a6:0e:e2:54:f8:88:d5:22:
         86:c9:a6:fd:f5:90:14:c8:ed:f3:6c:f6:83:e9:ca:e8:6c:78:
         9c:8a:67:8e:e5:18:f4:0b:5c:76:f0:b9:e4:0b:8f:7e:2e:32:
         b5:34:53:15:25:65:76:e6:a1:48:97:24:39:1e:7d:de:ef:89:
         c9:6e:5a:79:a7:43:3c:91:93:4e:44:cd:a6:20:79:cf:f4:40:
         6f:88:10:b6:e7:f6:9a:39:43:57:2c:30:63:16:6f:4c:3f:42:
         d6:ac:3a:1b:b9:0c:ba:b3:64:69:7a:0c:c1:bd:90:ca:6e:0a:
         7e:60:51:b9:e6:67:81:7c:76:90:84:5c:dc:d4:2d:ff:0a:5b:
         3f:7e:54:34:7b:b9:3e:26:be:af:e5:b2:86:08:64:d6:94:9f:
         68:ec:6d:9d:5c:4f:a1:9c:57:3a:58:77:38:41:9d:e8:70:69:
         fc:f9:2e:86:8e:72:23:91:4b:8c:4b:ec:0c:dd:ee:47:f2:88:
         1d:0e:1e:a5:18:a7:47:db:aa:11:d4:98:d2:45:59:0f:e0:1c:
         67:de:1a:95:c5:da:4e:8d:aa:7a:82:51:34:f6:13:33:a6:65:
         d1:73:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:48:59 2025 by rpki-client