This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
File:                     LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json)
Hash identifier:          BtPP3kNFhUsj4bOTb0Stsbr7+7OWzF00WMbE4awGoiY=
Subject key identifier:   5C:EF:E5:B0:8B:BA:78:25:F7:80:1A:EF:45:38:63:88:5B:97:58:72
Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54
Certificate issuer:       /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754
Certificate serial:       0C6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
Manifest number:          1498
Signing time:             Thu 18 Dec 2025 18:16:52 +0000
Manifest this update:     Thu 18 Dec 2025 18:16:51 +0000
Manifest next update:     Thu 25 Dec 2025 18:16:51 +0000
Files and hashes:         1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: nC5UFDB8ANrTWu1h2xC7ahwI+aJ5qDCEbLV/ktnrXjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 18:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3179 (0xc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754
        Validity
            Not Before: Dec 18 18:16:51 2025 GMT
            Not After : Dec 25 18:16:51 2025 GMT
        Subject: CN=69444514-5b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:a3:49:3f:a1:67:c5:5d:18:60:37:89:8a:
                    23:49:01:af:1a:db:36:1e:a9:1b:f3:99:3f:d8:b6:
                    fb:07:00:bd:c8:1c:27:19:e1:74:96:ec:8e:70:6a:
                    2e:cc:c5:86:7c:05:ab:1c:a2:fe:02:79:f6:98:ba:
                    49:f0:a8:fb:59:02:97:5b:b3:1b:5e:ee:22:60:ab:
                    ee:4c:27:3c:8f:d7:c9:df:d4:c0:44:ab:c6:ec:83:
                    8e:81:49:29:2b:46:61:16:e9:81:00:63:89:13:ae:
                    97:bc:35:1f:d5:7c:38:94:19:aa:62:6a:43:cb:3c:
                    7e:b6:e2:80:a8:c9:0d:1a:6e:1e:03:92:64:94:e7:
                    5a:32:ba:62:dc:bc:88:96:94:71:f6:38:9e:8d:de:
                    de:e6:29:60:fe:92:be:ca:9d:17:a5:05:0e:f8:30:
                    5b:b8:1c:2a:db:66:87:66:44:0c:67:49:1f:5a:ca:
                    01:f0:7d:60:2d:cc:f8:08:6e:c4:d1:c5:3d:b4:ce:
                    b3:93:81:2a:12:18:08:36:12:f2:9a:e9:78:87:d7:
                    20:eb:1a:75:d0:86:58:8b:67:11:fb:23:75:8d:e6:
                    57:cc:fb:e1:a7:b5:d0:c3:a3:09:cd:ac:e7:0d:a7:
                    05:0b:f7:d8:30:9d:aa:65:cb:cd:2e:d7:3a:1e:df:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:E5:B0:8B:BA:78:25:F7:80:1A:EF:45:38:63:88:5B:97:58:72
            X509v3 Authority Key Identifier:
                keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:21:da:ad:7e:13:e0:79:0e:fe:67:5e:09:f1:eb:89:e5:be:
         31:09:df:bb:53:59:ce:a0:5d:b7:9d:2c:b5:01:72:5f:09:c2:
         1e:ef:f8:ac:1a:c5:ec:38:2f:f4:ed:c0:aa:ac:d1:4e:8f:9d:
         8d:2b:54:42:54:9c:56:49:2a:df:3a:10:ab:e4:36:59:91:02:
         a4:1d:4f:45:e7:f3:ae:4a:27:c4:71:e9:f1:a8:fd:f0:bf:5e:
         bb:0e:8d:49:bb:c5:f5:cb:b0:cd:78:ea:e6:1d:55:fe:ac:d6:
         cc:7d:44:e9:7f:c8:1a:f7:45:94:0e:08:6a:5f:d3:3b:d0:b2:
         25:de:3c:f4:ae:69:23:43:24:7d:7a:49:82:36:28:e4:84:ad:
         bb:28:d1:cf:b9:3b:2c:25:e9:d5:aa:a7:08:a0:e8:27:bf:25:
         76:33:f8:22:5b:17:de:2e:4b:0d:82:57:53:7f:d3:26:aa:10:
         51:93:38:52:7a:22:0d:28:2a:24:db:0a:0a:8b:dc:c5:7f:fe:
         98:53:0c:af:78:9c:40:bf:87:83:d1:a2:b2:ad:d0:51:44:86:
         5d:63:53:ca:aa:8b:ce:30:35:7e:85:92:b9:53:9e:d8:ac:c5:
         cc:61:49:32:7e:a7:ba:de:69:7e:bf:79:90:d0:7a:2e:8e:5f:
         cc:07:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:50:03 2025 by rpki-client