This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
File:                     lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft (raw, json)
Hash identifier:          kUrZGOM5DBWacgySlZWDNOxHigXDn2IhoMAwihClSSQ=
Subject key identifier:   56:6E:1A:7F:6D:B8:72:1C:79:07:0A:B2:9C:2C:30:73:96:7A:DD:B0
Authority key identifier: 96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39
Certificate issuer:       /CN=A90DC5BE/serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
Certificate serial:       4827
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
Subject info access:      rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
Manifest number:          481C
Signing time:             Sat 06 Dec 2025 15:11:43 +0000
Manifest this update:     Sat 06 Dec 2025 15:11:43 +0000
Manifest next update:     Sat 13 Dec 2025 15:11:43 +0000
Files and hashes:         1: lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl (hash: mb63jRf19Tt5/hh3DEwTFL8w5qOPm/mAq0fnB61iAY4=)
                          2: Ak2PFao5dyF1iDou3BZQFOGSiho.cer (hash: NRcDr6REbVzbTiHoNzZyK4YoKwtLqg9UeS+C5SRci4o=)
                          3: 4kPzvoJVabsWrLN0vJjavmkLF8E.cer (hash: fxyUaruAjaaco/fzq2Q5nRs7XM9NtVdLWIcLFflk+gY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18471 (0x4827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=96A85EF4B8CAF5D4C35A157F4E125EE494BAF939
        Validity
            Not Before: Dec  6 15:11:43 2025 GMT
            Not After : Dec 13 15:11:43 2025 GMT
        Subject: CN=693447af-87cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:87:22:18:76:af:5a:60:f5:75:f4:7b:e7:06:
                    8d:ab:b2:f3:5d:ee:bd:0c:d0:70:3c:50:7a:72:55:
                    a9:b5:e9:2b:d4:10:c2:17:2a:d6:da:4c:3e:e9:52:
                    45:8c:6e:33:27:8e:d5:75:4c:79:f6:92:bf:2c:0e:
                    ad:ca:1e:f6:df:2c:8b:fa:69:14:45:37:67:07:c8:
                    06:6e:87:b7:31:b2:a1:01:71:1c:07:98:c1:e2:bb:
                    40:4e:d2:92:95:e6:1d:f2:97:b0:2f:b6:3f:fe:f8:
                    d8:cc:9c:e9:5e:f9:12:dd:66:29:4e:67:ea:c4:58:
                    31:cb:49:36:84:ab:7d:ba:1c:4d:47:c2:63:93:2b:
                    ee:1a:6c:af:a5:d7:1d:66:c7:b1:98:dc:ce:39:39:
                    d3:df:71:d2:c3:68:ba:79:69:a3:2a:f0:04:ed:84:
                    44:d9:84:75:4f:b2:4d:8f:f5:2e:1f:76:dc:a2:8e:
                    5c:e1:5d:92:b4:86:f6:23:8a:76:87:6d:a7:69:22:
                    77:71:da:c0:a7:02:39:96:ac:2d:b5:2a:93:dd:cd:
                    5e:5d:4e:5f:e2:12:9f:ac:e3:e8:98:dc:d2:41:74:
                    50:ad:54:fa:d6:a6:1d:91:6f:12:40:9c:2d:71:7f:
                    4e:5b:2c:73:ae:85:32:bb:9a:13:48:9a:38:1c:0a:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:1A:7F:6D:B8:72:1C:79:07:0A:B2:9C:2C:30:73:96:7A:DD:B0
            X509v3 Authority Key Identifier:
                keyid:96:A8:5E:F4:B8:CA:F5:D4:C3:5A:15:7F:4E:12:5E:E4:94:BA:F9:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:b7:68:7b:83:43:1a:c7:d0:9c:00:53:21:90:18:ff:83:
         ae:85:ed:da:d0:09:68:02:4e:f7:aa:83:28:27:d0:c0:7e:04:
         11:4e:55:f7:6d:e0:0a:ad:97:e3:0c:f5:66:26:2d:96:b6:9a:
         81:e7:d2:c3:12:23:e3:4f:4e:8d:40:1e:18:ec:88:bb:1b:40:
         dd:52:24:fa:34:04:3e:b4:17:e4:e8:18:35:fd:4e:2f:c7:be:
         17:ed:b4:40:08:16:2e:fb:71:a6:3a:0b:a4:db:24:4b:04:d0:
         1c:11:d4:53:71:6a:c0:8f:e0:30:29:5b:f8:c6:c7:87:6e:73:
         8a:96:4c:83:f0:e4:59:49:14:97:32:d8:6a:14:dd:87:cb:93:
         62:ee:0d:6f:ab:d9:09:b8:72:d5:2d:6f:2b:ef:9c:c6:a2:c0:
         cc:48:b4:05:b1:73:d6:85:3d:9c:60:38:0f:39:1b:ec:16:ce:
         c7:c6:0f:b2:97:97:29:19:d2:fa:94:0f:c5:ff:e3:70:6d:8a:
         10:bd:cc:51:b3:26:00:1f:34:52:53:73:1f:66:5a:a4:41:2f:
         8c:8a:e8:44:60:15:60:a4:ae:61:86:17:f2:5a:d7:08:88:5f:
         f4:80:4a:a7:d5:93:0f:6d:86:6d:4d:33:e9:07:e7:de:db:06:
         46:2b:45:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:37:47 2025 by rpki-client