This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
File:                     LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json)
Hash identifier:          bRUEeyWwcFg0WdL5ebo9RStk7XepROD8Ixe+A7WYd0k=
Subject key identifier:   E1:77:C4:71:A7:AA:64:EF:AE:11:D9:A4:36:47:1B:4D:01:35:4C:64
Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5
Certificate issuer:       /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
Certificate serial:       0A15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
Manifest number:          0A03
Signing time:             Sat 06 Dec 2025 19:06:06 +0000
Manifest this update:     Sat 06 Dec 2025 19:06:05 +0000
Manifest next update:     Sat 13 Dec 2025 19:06:05 +0000
Files and hashes:         1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: v7pmAz6BgU+AfqGFZsWuvf0yBbEk+08kSmNupK9UD1A=)
                          2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl
                          rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2581 (0xa15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5
        Validity
            Not Before: Dec  6 19:06:05 2025 GMT
            Not After : Dec 13 19:06:05 2025 GMT
        Subject: CN=69347e9e-59c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:12:6b:14:55:9b:d0:e4:c6:6f:e5:27:e3:
                    5b:63:cc:f3:2a:bb:d1:b6:76:e3:7e:49:ae:bf:a5:
                    7e:ac:a9:42:df:3c:1d:f9:f8:fc:ec:3a:3e:3d:d5:
                    f4:5d:1d:0b:9d:7e:c2:da:4b:60:aa:fb:1f:75:9e:
                    d7:71:fb:61:14:ba:8c:6a:89:6f:79:93:56:4b:2e:
                    ae:11:81:af:d8:13:85:31:13:ae:32:f0:33:57:69:
                    f2:84:ed:b1:69:6f:da:ab:c3:26:6a:dc:a5:af:b0:
                    f4:be:2f:2f:41:03:d1:ae:4e:73:46:e4:10:29:1e:
                    a9:7c:97:fb:47:69:c9:70:f6:6b:ef:57:20:a1:22:
                    e5:69:50:3c:77:73:f2:eb:e9:1a:d0:3c:bc:a1:6b:
                    a5:49:29:6f:b9:87:d0:61:df:e5:5e:13:e8:80:a3:
                    d9:90:0b:af:bb:b6:d4:94:da:88:67:1a:b5:4b:2c:
                    d9:ca:0c:af:9b:c1:8b:a8:90:ce:a6:28:53:63:93:
                    c1:40:bb:78:13:72:a3:8a:1c:82:4a:53:d6:27:92:
                    7b:49:bb:fc:ec:e9:65:37:0a:90:68:3c:68:2c:a8:
                    67:2a:3e:91:91:98:48:ec:94:81:30:93:cb:ad:38:
                    a4:03:d6:2f:10:23:c3:e5:c9:e6:44:b4:58:58:64:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:C4:71:A7:AA:64:EF:AE:11:D9:A4:36:47:1B:4D:01:35:4C:64
            X509v3 Authority Key Identifier:
                keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:9e:05:26:a4:5d:86:d2:8f:d3:c6:07:d9:cf:17:5d:e2:f9:
         fe:54:a5:6b:99:4a:84:9e:a5:9b:0d:b2:2e:fa:29:eb:e9:b6:
         ca:b9:d9:5f:1c:9a:af:23:e0:b0:d0:57:46:d2:6c:dc:4c:39:
         30:fd:c0:46:0d:9d:8f:95:cf:fb:96:23:72:b7:fc:e7:22:8f:
         21:15:2d:79:27:90:29:49:7b:03:1a:4d:42:65:3a:ff:87:9c:
         ec:fb:28:fb:7b:dc:dd:29:8e:bf:b0:0f:be:ec:90:7c:a4:f5:
         3d:02:34:65:1b:90:ce:fa:83:ca:0e:3c:9d:3c:f7:94:77:66:
         a5:ad:dd:5d:2f:4c:99:b6:08:1a:b2:39:cd:a1:d7:e5:7c:02:
         30:7b:0f:90:cd:f5:1a:00:0a:0a:f0:22:39:9d:92:41:cb:75:
         f2:86:4a:f5:ee:86:ea:e5:25:46:ff:04:98:2e:d2:6c:65:44:
         d0:fc:83:c0:a5:da:a4:b6:03:17:2c:68:fd:ca:67:fa:06:25:
         17:c1:5d:3e:02:38:56:8a:ef:be:69:da:e7:54:dc:ef:9f:4f:
         e6:74:16:15:6e:a3:14:5c:64:05:b5:51:ea:03:dc:5a:91:dd:
         8c:29:b6:5a:dc:5a:48:7e:4c:2e:9e:d8:24:3c:b8:f5:71:a3:
         84:06:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:24 2025 by rpki-client