This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
File:                     myLG633MM4A245rlSn0qAlkDsRM.mft (raw, json)
Hash identifier:          WK/oSj5G1+cKeD9SkPsZp+/pYTqXEgMq8rzmwdc1WyE=
Subject key identifier:   76:B1:FD:C2:9B:15:AF:83:6F:C8:A7:60:D8:9F:DA:8D:56:98:B9:7C
Authority key identifier: 9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13
Certificate issuer:       /CN=A91559AC/serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
Manifest number:          0B71
Signing time:             Mon 22 Dec 2025 18:53:18 +0000
Manifest this update:     Mon 22 Dec 2025 18:53:17 +0000
Manifest next update:     Mon 29 Dec 2025 18:53:17 +0000
Files and hashes:         1: myLG633MM4A245rlSn0qAlkDsRM.crl (hash: 6Jg5/7QQXp1esorhUlzKa2yC44a20MdzD7ftjhntRjw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl
                          rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91559AC, serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113
        Validity
            Not Before: Dec 22 18:53:17 2025 GMT
            Not After : Dec 29 18:53:17 2025 GMT
        Subject: CN=6949939e-a085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1d:46:5c:03:1c:7c:ba:e4:63:b8:f0:87:c0:
                    f1:88:7b:aa:8c:02:2e:7a:c2:a8:15:64:86:c8:ca:
                    08:45:2f:9d:ec:d1:d0:67:3c:96:93:0a:0f:35:5b:
                    53:73:4f:1b:d1:6c:6f:85:06:de:05:5f:83:18:dc:
                    fe:79:a3:09:44:6b:3a:8d:f6:70:15:03:f6:b1:45:
                    d3:1a:5b:9f:3f:3b:96:27:8b:92:cd:92:19:08:85:
                    bf:70:f5:4d:25:68:b8:d1:31:dc:a7:18:00:7c:37:
                    24:ff:10:aa:38:ec:ce:1b:ff:5a:75:8f:13:34:40:
                    76:3d:c3:ad:3e:d6:b3:ad:02:d9:f6:cb:67:ff:76:
                    be:44:66:b1:e5:17:84:23:bc:86:a6:5d:d7:96:f2:
                    6a:ca:f5:c5:2f:12:ea:2e:ba:47:98:d6:cd:b8:1d:
                    7a:a4:97:cd:e2:0f:eb:5f:75:85:44:1e:99:bb:a5:
                    36:54:e8:7e:b1:ed:f2:07:70:27:ff:67:f5:52:9b:
                    72:0d:ef:1c:a7:7c:92:7b:42:2b:d7:06:10:81:a6:
                    c0:f0:f9:7d:15:8d:af:cb:43:e5:f5:ec:ea:06:34:
                    b0:34:de:2c:07:6f:23:44:62:b4:ca:c6:94:9d:ff:
                    eb:7c:e8:71:e4:c9:42:de:30:10:61:88:8f:6d:5f:
                    52:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:FD:C2:9B:15:AF:83:6F:C8:A7:60:D8:9F:DA:8D:56:98:B9:7C
            X509v3 Authority Key Identifier:
                keyid:9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:c1:e0:58:bb:d3:81:74:ea:14:6e:aa:0f:94:00:d5:6a:
         78:33:1f:d7:d3:3c:7c:c6:f8:14:2f:c5:1d:4b:28:20:a0:95:
         1e:98:84:7e:ef:7b:83:6f:e2:a0:56:66:67:cc:3f:02:75:41:
         41:f6:52:65:e4:ef:45:1b:11:bf:cd:4a:de:24:64:03:70:66:
         51:cb:cf:73:2d:f1:40:26:30:64:6c:45:a2:13:ab:43:f8:59:
         25:75:f1:49:6d:95:49:9a:95:82:ee:7c:08:7d:10:4e:79:3c:
         8c:35:c5:f3:47:d7:ad:62:62:d6:7a:8b:bc:e9:89:9a:e9:10:
         a8:ba:2b:40:0f:20:4a:e7:ca:74:0e:45:8a:05:83:d3:bb:18:
         29:fd:0d:eb:cf:59:e6:4a:14:d4:72:ee:4c:97:78:2e:30:f1:
         ef:eb:d5:6a:da:5e:32:be:5c:b1:5f:4d:1b:be:57:e7:0b:85:
         ca:79:f3:85:94:c2:fc:9a:6e:7f:6f:da:03:a5:9a:69:16:17:
         48:79:c0:35:d2:d8:73:e2:60:e7:e2:72:af:15:ab:7e:28:d8:
         e6:73:eb:c3:ba:90:84:a4:81:d3:f9:e5:de:a6:88:38:87:7c:
         08:f8:4a:a7:9f:b7:a0:cb:43:ee:a4:35:62:cb:f7:fd:c8:4c:
         0f:7e:75:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU5QUMxMTAvBgNVBAUTKDlCMjJDNkVCN0RDQzMzODAzNkUzOUFFNTRBN0QyQTAy
NTkwM0IxMTMwHhcNMjUxMjIyMTg1MzE3WhcNMjUxMjI5MTg1MzE3WjAYMRYwFAYD
VQQDDA02OTQ5OTM5ZS1hMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvx1GXAMcfLrkY7jwh8DxiHuqjAIuesKoFWSGyMoIRS+d7NHQZzyWkwoPNVtT
c08b0WxvhQbeBV+DGNz+eaMJRGs6jfZwFQP2sUXTGlufPzuWJ4uSzZIZCIW/cPVN
JWi40THcpxgAfDck/xCqOOzOG/9adY8TNEB2PcOtPtazrQLZ9stn/3a+RGax5ReE
I7yGpl3XlvJqyvXFLxLqLrpHmNbNuB16pJfN4g/rX3WFRB6Zu6U2VOh+se3yB3An
/2f1UptyDe8cp3ySe0Ir1wYQgabA8Pl9FY2vy0Pl9ezqBjSwNN4sB28jRGK0ysaU
nf/rfOhx5MlC3jAQYYiPbV9S6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHax/cKb
Fa+Db8inYNif2o1WmLl8MB8GA1UdIwQYMBaAFJsixut9zDOANuOa5Up9KgJZA7ET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG
OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9teUxHNjMzTU00QTI0NXJsU24wcUFsa0Rz
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL215TEc2MzNNTTRBMjQ1cmxTbjBxQWxrRHNSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9teUxHNjMzTU00
QTI0NXJsU24wcUFsa0RzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjysHgWLvTgXTqFG6qD5QA1Wp4Mx/X0zx8xvgUL8UdSyggoJUemIR+
73uDb+KgVmZnzD8CdUFB9lJl5O9FGxG/zUreJGQDcGZRy89zLfFAJjBkbEWiE6tD
+FkldfFJbZVJmpWC7nwIfRBOeTyMNcXzR9etYmLWeou86Yma6RCouitADyBK58p0
DkWKBYPTuxgp/Q3rz1nmShTUcu5Ml3guMPHv69Vq2l4yvlyxX00bvlfnC4XKefOF
lML8mm5/b9oDpZppFhdIecA10thz4mDn4nKvFat+KNjmc+vDupCEpIHT+eXepog4
h3wI+Eqnn7egy0PupDViy/f9yEwPfnVP
-----END CERTIFICATE-----
Generated at Tue Dec 23 20:04:02 2025 by rpki-client