This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          WGvltwpE4tPf/NVZLKXM5tsSb2RlyWnq2c9FT4rjlzQ=
Subject key identifier:   5C:DB:40:B7:09:CE:E4:9B:AF:B6:5E:56:3F:AD:93:17:60:DC:8B:23
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          0767
Signing time:             Sat 06 Dec 2025 20:58:37 +0000
Manifest this update:     Sat 06 Dec 2025 20:58:37 +0000
Manifest next update:     Sat 13 Dec 2025 20:58:37 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: 0gp0ct+U/wewoPK5E+9STT4V2zzEcvNuzzjmCZqxhBI=)
                          2: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: rJtIFizn/sQTm217EeawbIANI0Uxj/WGOrOl2uJ5f2c=)
                          3: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: jo8N5VR8/QXYCNwECV0F0gpGSCFYJ9bVaNaPjx3t5DQ=)
                          4: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6XffBxe23SAqk8mZhlvHVbw6Cbg+lycUE8a5p6bfPGE=)
                          5: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: l/lqNDUiyb5NZKhLLNIq7WZOuz2szj0dEY8tsSYQa68=)
                          6: 15434774090211EEA1C06509C4F9AE02.roa (hash: dzvzv1MDGjHRHVHiGPmML1F3imLu7s8q7tD+NO4TDds=)
                          7: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: rSNBIXkV3cHTqpqHK191W8K7lRyWQtgcWXUGkAW+h84=)
                          8: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hJIP3vaCxaXSerzNVIz2IckZKnqrBprCPLaUe55Jaxk=)
                          9: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: JzLTfh+GciE2ubQPVVJG4EzQllt5nNHJ0s9t7GZNzHw=)
                          10: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: InXUcvdRUa1rt2SL0tMM3Hgfi86gvB0qmAGoxlh6kYc=)
                          11: 168FD534090211EEA1C06509C4F9AE02.roa (hash: 56ghv9vhYovbphtcZh0pFu9WFqM/EpFjTMqOzB0oI+U=)
                          12: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: psfjW3LbfsqjUORRddKlOh9lmY1USdZrWQkZoOrVeIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Dec  6 20:58:37 2025 GMT
            Not After : Dec 13 20:58:37 2025 GMT
        Subject: CN=693498fd-d57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:ae:6e:04:57:20:6b:b7:78:ae:58:d7:41:
                    b2:c2:af:86:e7:a8:4a:a4:d2:66:63:19:23:85:5b:
                    44:11:62:8c:76:2a:75:79:cf:f7:0a:3b:ce:53:5c:
                    f7:fe:d7:90:d3:bb:ad:c1:89:50:b9:b7:e2:c9:05:
                    d4:33:30:92:fc:10:a7:15:6d:23:8e:ef:26:16:00:
                    99:9b:0c:45:20:91:2c:50:e2:a8:ce:9c:6c:e2:20:
                    38:4d:87:46:ac:60:77:67:66:e6:72:71:68:3e:c7:
                    f1:1d:31:39:f0:8b:36:9d:df:30:75:d9:c8:29:9f:
                    1f:f3:f7:99:57:6d:33:0f:ab:e2:01:44:bb:dc:0a:
                    aa:a2:8a:4d:26:da:e3:71:10:2a:8a:1e:4c:35:a3:
                    26:d3:9c:c0:3a:eb:71:9b:57:e4:4a:36:af:8c:17:
                    b3:4b:c8:fa:d8:8f:06:14:7e:35:c7:a3:bf:48:4c:
                    6c:b4:f8:c6:a6:e2:16:d5:e2:b4:20:93:b5:2a:2f:
                    41:8b:6b:94:ac:59:9c:5c:78:ad:44:f8:8b:a2:c0:
                    60:f8:22:62:91:9c:37:e2:dc:4b:f3:8d:e7:6c:d2:
                    a1:6b:93:90:c0:1f:ad:f0:7a:88:be:4b:d4:99:49:
                    eb:33:e0:b4:43:36:81:ab:44:5e:42:1b:80:3e:78:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DB:40:B7:09:CE:E4:9B:AF:B6:5E:56:3F:AD:93:17:60:DC:8B:23
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:34:a5:6f:e6:64:38:b8:32:df:5d:14:27:01:f1:80:4b:76:
         08:07:e2:bc:db:e8:c4:a1:8a:27:50:0b:f0:55:ad:a2:8d:e7:
         d9:bf:3d:80:06:76:6b:50:d1:76:37:87:c7:f2:d7:ae:ed:fb:
         72:83:f6:f2:b5:f2:57:fe:93:68:17:65:8c:df:8c:08:06:82:
         c0:8e:44:e1:bd:cc:70:18:27:42:af:3a:b9:e9:ff:0b:24:80:
         3e:1a:ac:b7:ab:97:43:9f:c0:05:89:e0:19:3f:04:57:77:30:
         dd:d3:3b:a4:f9:86:28:50:dd:90:be:4d:fe:0e:31:f3:a3:a9:
         dc:27:ac:83:f1:ca:58:e5:79:d6:86:3d:e3:12:42:82:34:78:
         d8:b3:57:06:c1:73:a6:66:95:10:1d:a9:36:6a:e4:6f:7e:eb:
         c0:5f:19:c8:20:a1:b5:73:1a:66:63:2b:0c:c0:4c:e8:73:e7:
         fa:ba:72:f0:c4:e8:8b:c2:33:fd:60:74:58:5c:a1:2a:72:59:
         d9:44:16:6b:55:33:41:64:9c:92:28:41:2c:8d:70:d6:63:5e:
         66:c7:0e:18:c5:c9:31:96:5c:b7:1b:86:1d:71:48:49:15:f5:
         83:2c:e3:12:df:86:49:6c:38:0f:d9:6e:e0:db:2e:a2:d1:48:
         a8:c8:d0:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjUxMjA2MjA1ODM3WhcNMjUxMjEzMjA1ODM3WjAYMRYwFAYD
VQQDEw02OTM0OThmZC1kNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4maubgRXIGu3eK5Y10Gywq+G56hKpNJmYxkjhVtEEWKMdip1ec/3CjvOU1z3
/teQ07utwYlQubfiyQXUMzCS/BCnFW0jju8mFgCZmwxFIJEsUOKozpxs4iA4TYdG
rGB3Z2bmcnFoPsfxHTE58Is2nd8wddnIKZ8f8/eZV20zD6viAUS73AqqoopNJtrj
cRAqih5MNaMm05zAOutxm1fkSjavjBezS8j62I8GFH41x6O/SExstPjGpuIW1eK0
IJO1Ki9Bi2uUrFmcXHitRPiLosBg+CJikZw34txL843nbNKha5OQwB+t8HqIvkvU
mUnrM+C0QzaBq0ReQhuAPngmcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzbQLcJ
zuSbr7ZeVj+tkxdg3IsjMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01
UzlIMkRjdTkyNV9lQnl0X00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPNKVv5mQ4uDLfXRQnAfGAS3YIB+K82+jEoYonUAvwVa2ijefZvz2A
BnZrUNF2N4fH8teu7ftyg/bytfJX/pNoF2WM34wIBoLAjkThvcxwGCdCrzq56f8L
JIA+Gqy3q5dDn8AFieAZPwRXdzDd0zuk+YYoUN2Qvk3+DjHzo6ncJ6yD8cpY5XnW
hj3jEkKCNHjYs1cGwXOmZpUQHak2auRvfuvAXxnIIKG1cxpmYysMwEzoc+f6unLw
xOiLwjP9YHRYXKEqclnZRBZrVTNBZJySKEEsjXDWY15mxw4Yxckxlly3G4YdcUhJ
FfWDLOMS34ZJbDgP2W7g2y6i0UioyNB5
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:52 2025 by rpki-client