This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
File:                     LGuMf4thDokcucv2zb2ZmKqThgs.mft (raw, json)
Hash identifier:          UN8dvTyabIo8zohr2ulGF1LnY9IL2FzD7xzoagg/iqQ=
Subject key identifier:   D7:6D:05:14:5A:8C:B9:ED:52:F6:F4:83:7B:1A:A7:A3:CA:EA:F0:6A
Authority key identifier: 2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B
Certificate issuer:       /CN=A91EA742/serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
Manifest number:          0157
Signing time:             Fri 05 Dec 2025 02:16:37 +0000
Manifest this update:     Fri 05 Dec 2025 02:16:36 +0000
Manifest next update:     Fri 12 Dec 2025 02:16:36 +0000
Files and hashes:         1: LGuMf4thDokcucv2zb2ZmKqThgs.crl (hash: o1R7BHo+o1iivOt+KhBQ+KkvIuxt0sapiby79WfdKMs=)
                          2: F8B45382C05811EE8A040C16C4F9AE02.roa (hash: 9aD9MOI/POVIQ6uNZALTtWvg8bFsGYj1bzTi/aW5HI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA742, serialNumber=2C6B8C7F8B610E891CB9CBF6CDBD9998AA93860B
        Validity
            Not Before: Dec  5 02:16:36 2025 GMT
            Not After : Dec 12 02:16:36 2025 GMT
        Subject: CN=69324084-1082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:3e:cb:a7:d5:04:15:5d:64:86:a1:32:b9:
                    86:29:52:66:e1:77:2a:1f:e4:5f:d8:77:47:c3:2b:
                    64:e0:a7:8f:ff:c6:24:2e:da:d8:bc:41:34:a2:a1:
                    43:83:18:7e:f8:09:ab:b1:4b:30:bf:96:56:43:9a:
                    3a:ad:65:0c:69:5c:03:42:2a:7c:c8:9c:47:6c:34:
                    eb:99:32:91:18:57:fa:7c:9a:5a:0f:b0:38:0c:73:
                    83:43:5c:03:7f:2e:d6:1a:7a:5e:e0:43:b3:81:a4:
                    b0:12:f2:f1:ea:11:12:99:c6:1f:e1:5f:b3:c7:24:
                    4e:bb:16:44:42:60:13:75:0c:4b:f2:4b:1b:51:be:
                    a3:64:4b:ab:f9:3f:78:e0:40:64:94:62:59:bb:68:
                    24:57:c9:89:55:c6:47:a7:4f:a3:d1:00:ac:6a:c5:
                    72:27:84:63:a6:e5:b6:b7:47:ba:b7:df:74:ee:44:
                    6b:96:e8:47:82:f6:eb:b7:11:20:2b:4c:10:f2:a0:
                    77:35:4a:4e:29:d7:ff:36:44:98:a6:4c:94:f9:84:
                    a5:50:b8:89:2d:6e:47:75:99:89:7f:c1:9e:19:a4:
                    14:15:1f:5f:f2:a2:fd:9c:37:15:1b:f0:33:b4:bb:
                    ec:e5:85:9a:19:f2:f3:65:f2:89:4d:cc:ff:f9:d6:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6D:05:14:5A:8C:B9:ED:52:F6:F4:83:7B:1A:A7:A3:CA:EA:F0:6A
            X509v3 Authority Key Identifier:
                keyid:2C:6B:8C:7F:8B:61:0E:89:1C:B9:CB:F6:CD:BD:99:98:AA:93:86:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LGuMf4thDokcucv2zb2ZmKqThgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/D20559FEC05611EE97157810C4F9AE02/LGuMf4thDokcucv2zb2ZmKqThgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:7e:fb:84:b6:8c:09:d7:ee:26:1d:0f:dd:5c:49:15:8f:40:
         04:ce:b7:c1:00:71:97:40:ff:f8:9e:99:9f:89:8e:96:a1:b1:
         e7:18:6a:4c:5d:74:4b:bc:54:5b:38:78:fb:0f:ac:1b:b7:e4:
         7b:7f:96:23:92:e0:9d:b2:d2:61:df:9b:be:84:4b:47:9c:7f:
         83:e6:ab:18:bf:e5:b6:ff:3f:89:0b:57:29:73:61:02:8f:25:
         4f:05:6d:ec:8b:cd:75:c4:fc:9a:63:1e:e3:b4:f7:1e:6d:2e:
         07:06:7d:07:75:d6:ff:de:5b:b3:b6:54:82:a6:63:c1:a5:bd:
         6c:c1:f6:28:ec:af:88:50:9c:ac:bb:28:a9:bb:02:aa:5a:83:
         ed:82:5c:47:3b:93:ef:b5:0f:cf:49:c6:fb:f0:27:64:ad:19:
         a1:05:ac:13:4c:6c:c8:9e:26:35:e1:98:df:2b:7d:7f:5b:8e:
         1d:c0:95:24:04:13:53:92:61:16:52:2b:66:db:bf:49:0a:7e:
         80:18:58:59:e4:53:51:0c:37:f2:62:e9:16:1e:f5:e6:b0:76:
         7e:d9:c9:df:f4:37:18:bb:f4:22:0f:ea:30:6b:05:c0:63:26:
         6c:39:97:13:9e:11:bb:52:0a:4d:66:36:a5:03:7c:1b:a9:46:
         36:45:11:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3NDIxMTAvBgNVBAUTKDJDNkI4QzdGOEI2MTBFODkxQ0I5Q0JGNkNEQkQ5OTk4
QUE5Mzg2MEIwHhcNMjUxMjA1MDIxNjM2WhcNMjUxMjEyMDIxNjM2WjAYMRYwFAYD
VQQDEw02OTMyNDA4NC0xMDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVg+y6fVBBVdZIahMrmGKVJm4XcqH+Rf2HdHwytk4KeP/8YkLtrYvEE0oqFD
gxh++AmrsUswv5ZWQ5o6rWUMaVwDQip8yJxHbDTrmTKRGFf6fJpaD7A4DHODQ1wD
fy7WGnpe4EOzgaSwEvLx6hESmcYf4V+zxyROuxZEQmATdQxL8ksbUb6jZEur+T94
4EBklGJZu2gkV8mJVcZHp0+j0QCsasVyJ4RjpuW2t0e6t9907kRrluhHgvbrtxEg
K0wQ8qB3NUpOKdf/NkSYpkyU+YSlULiJLW5HdZmJf8GeGaQUFR9f8qL9nDcVG/Az
tLvs5YWaGfLzZfKJTcz/+da9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdtBRRa
jLntUvb0g3sap6PK6vBqMB8GA1UdIwQYMBaAFCxrjH+LYQ6JHLnL9s29mZiqk4YL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EMjA1NTlGRUMw
NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERva2N1Y3YyemIyWm1LcVRo
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xHdU1mNHRoRG9rY3VjdjJ6YjJabUtxVGhncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTc0Mi9EMjA1NTlGRUMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9MR3VNZjR0aERv
a2N1Y3YyemIyWm1LcVRoZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCzfvuEtowJ1+4mHQ/dXEkVj0AEzrfBAHGXQP/4npmfiY6WobHnGGpM
XXRLvFRbOHj7D6wbt+R7f5YjkuCdstJh35u+hEtHnH+D5qsYv+W2/z+JC1cpc2EC
jyVPBW3si811xPyaYx7jtPcebS4HBn0Hddb/3luztlSCpmPBpb1swfYo7K+IUJys
uyipuwKqWoPtglxHO5PvtQ/PScb78CdkrRmhBawTTGzIniY14ZjfK31/W44dwJUk
BBNTkmEWUitm279JCn6AGFhZ5FNRDDfyYukWHvXmsHZ+2cnf9DcYu/QiD+owawXA
YyZsOZcTnhG7UgpNZjalA3wbqUY2RRE7
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:03 2025 by rpki-client