This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
File:                     ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json)
Hash identifier:          0uK3+I+l7utVlDyY0+jzr0UHhaImtfAMV3WxYfvGghQ=
Subject key identifier:   E7:65:CE:F3:D8:63:07:8C:FA:A9:7D:5A:94:52:7E:A7:75:9A:26:E5
Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11
Certificate issuer:       /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
Certificate serial:       03D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
Manifest number:          03CC
Signing time:             Sat 06 Dec 2025 23:15:03 +0000
Manifest this update:     Sat 06 Dec 2025 23:15:02 +0000
Manifest next update:     Sat 13 Dec 2025 23:15:02 +0000
Files and hashes:         1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: 6dk8dsGY8uYkxz97K8DMJ01f7yZ1BRR1/qbuzhObLJw=)
                          2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=)
                          3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl
                          rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 23:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11
        Validity
            Not Before: Dec  6 23:15:02 2025 GMT
            Not After : Dec 13 23:15:02 2025 GMT
        Subject: CN=6934b8f6-961b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a1:a8:db:01:b8:0d:3b:22:9e:1b:ea:60:1f:
                    97:fd:7a:db:75:09:91:7b:d6:f7:aa:54:9c:92:85:
                    51:0f:fe:88:52:3d:f3:fb:33:ea:c4:7a:a0:03:15:
                    0b:aa:de:16:08:99:fb:27:98:50:11:f1:98:6a:17:
                    ef:f2:07:cc:00:45:ff:73:8a:2c:d6:e9:60:a6:34:
                    96:bf:4b:9a:3f:8c:77:43:fa:9f:b0:eb:9c:c2:6c:
                    76:7f:bf:1e:95:6d:fb:97:c0:0d:b6:22:cf:95:bf:
                    9e:2c:4e:b4:c1:59:4e:ef:aa:50:70:b3:d6:bc:e9:
                    e3:9b:a2:d4:64:67:9e:0f:99:70:b0:68:f7:ed:d6:
                    77:a6:80:42:5f:13:50:89:e5:07:01:87:2e:31:8a:
                    48:2f:1d:c6:3a:f2:1b:ee:fb:d9:7e:3b:f5:86:95:
                    ca:da:19:f0:71:5c:7e:f2:c7:08:e7:38:7e:6c:22:
                    80:5a:b1:c1:f9:b2:9b:28:4a:6b:c7:b0:af:b0:0d:
                    99:0d:14:5e:f6:57:2c:45:9b:a2:21:6f:85:d6:64:
                    79:ef:31:f5:d4:68:bf:3d:3c:06:7f:1a:33:83:c7:
                    1d:23:26:61:7a:86:46:ec:21:d5:24:b7:fc:44:33:
                    8a:98:d2:ba:3d:4f:40:ca:5c:9e:c7:9f:c7:b7:e4:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:CE:F3:D8:63:07:8C:FA:A9:7D:5A:94:52:7E:A7:75:9A:26:E5
            X509v3 Authority Key Identifier:
                keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f0:a4:48:ad:53:ff:c3:e6:30:39:aa:9f:37:fa:64:a6:41:
         e8:6a:09:aa:67:0c:10:79:2c:f0:01:1f:7c:4b:9e:ec:e7:d9:
         bf:6f:0f:7b:bb:6b:80:67:21:cd:d7:72:01:4a:b7:20:f2:fe:
         b0:73:13:cb:76:bf:63:1f:8a:7a:9a:33:30:1c:e4:66:3e:b5:
         b2:98:f1:d6:09:3c:d2:2c:3d:40:7e:90:ab:33:2c:43:f7:f6:
         fc:9c:9b:b0:0e:54:45:66:53:78:18:40:5d:46:08:a1:37:d3:
         b3:0e:93:b5:5a:eb:ad:db:4e:4a:3e:10:06:e5:9a:bf:63:5d:
         cf:c7:6d:d4:6e:40:07:a8:dd:35:a6:38:85:b9:00:3f:df:9b:
         6e:1a:62:a2:b8:a2:7a:6e:6c:d6:5a:1b:34:9b:76:dc:51:44:
         ff:ed:2a:de:7b:73:e9:7f:37:17:4f:62:88:c8:6d:35:b8:6f:
         b7:8f:04:89:2a:b1:04:21:27:e4:39:cf:07:38:6f:4d:56:3c:
         17:93:97:c5:38:fd:89:11:88:f4:61:73:d6:ef:c9:09:02:af:
         f7:99:78:cc:07:6f:89:a0:95:98:ec:98:97:49:af:ba:c8:fc:
         e2:02:94:56:e4:50:ff:36:90:bb:f6:3c:b1:01:20:eb:2a:4b:
         af:da:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:42 2025 by rpki-client