This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
File:                     len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json)
Hash identifier:          hhE/k0NVfgBGyk1B44IF/i6X/XkUXf81cwArmMGEI/A=
Subject key identifier:   8E:A0:C2:A6:E4:30:61:D2:73:93:01:42:A2:90:C2:44:44:FE:78:3D
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       067F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
Manifest number:          067A
Signing time:             Mon 22 Dec 2025 21:44:33 +0000
Manifest this update:     Mon 22 Dec 2025 21:44:33 +0000
Manifest next update:     Mon 29 Dec 2025 21:44:33 +0000
Files and hashes:         1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: YGw8Eu5YIHlp+adqcDOnet44dzPS0NGWUlO9HgoHlSU=)
                          2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Dec 22 21:44:33 2025 GMT
            Not After : Dec 29 21:44:33 2025 GMT
        Subject: CN=6949bbc1-0b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:83:f9:97:ad:72:ce:cf:08:e1:4f:d5:a9:
                    60:9e:6f:fe:91:6e:5d:c3:11:f3:4a:31:07:33:49:
                    d2:24:c4:91:10:d2:ee:84:23:7b:d0:27:64:03:2c:
                    f1:41:4d:d4:30:69:e8:61:0d:25:4a:36:71:5d:f4:
                    13:80:c1:17:2d:14:22:bc:23:da:07:e4:4c:c9:37:
                    d3:d1:8c:68:f8:dd:50:d5:1b:43:33:89:ef:7e:de:
                    c3:56:5b:0f:f0:bb:c8:66:ea:fa:56:8e:cf:d2:30:
                    9b:e0:2a:07:d6:eb:0f:61:7f:7e:76:de:57:79:56:
                    fa:e5:eb:01:59:62:93:50:9c:a1:e8:c6:2f:63:2a:
                    86:3e:8b:de:3c:32:1f:09:96:8c:0d:59:12:0e:e5:
                    42:c1:17:36:44:33:f7:fa:a4:89:00:8f:75:a7:9c:
                    95:b3:4b:24:68:55:dc:0b:34:76:d1:eb:03:17:18:
                    bb:0b:e8:2c:05:00:c2:03:af:3c:3f:3b:21:e0:09:
                    24:3f:1e:6c:e6:ee:81:61:7c:7d:b7:d9:f7:4a:9f:
                    f4:0c:80:92:cb:96:d8:08:7c:1a:3a:5b:aa:ab:23:
                    67:53:53:2f:ac:0f:3d:2e:c7:ad:1c:6d:9c:e7:78:
                    66:31:36:22:ba:77:dd:b4:a9:61:bc:55:17:35:58:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A0:C2:A6:E4:30:61:D2:73:93:01:42:A2:90:C2:44:44:FE:78:3D
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ee:6c:ad:72:3f:b8:4b:59:b1:3b:a9:35:c1:61:2f:84:bc:
         94:2d:d6:0a:13:b6:a3:bd:c9:22:e2:9a:0f:d0:59:18:74:71:
         73:18:06:92:43:20:f1:64:09:ba:9f:00:7f:d1:f2:0f:9f:78:
         c2:3a:45:a4:7d:eb:0f:1b:db:a5:0b:a1:aa:51:34:d9:c8:be:
         d1:12:0a:e3:70:3e:3f:15:70:1b:9f:65:96:b3:f5:0f:ec:e7:
         ae:90:b2:f1:96:5c:22:e5:65:87:a7:04:c0:29:f0:6a:22:25:
         17:6f:b8:79:1a:c9:d6:4c:85:ef:ab:43:66:5f:76:10:97:fb:
         a4:99:3b:41:86:69:53:3f:5d:3b:44:51:67:2d:21:61:5e:dd:
         72:6e:83:fc:07:8f:1e:7c:d4:cc:95:a9:a5:80:49:65:8a:32:
         a9:45:7a:98:fc:5d:41:15:2f:6d:4e:c2:7e:9c:b9:25:05:64:
         4b:3d:78:e4:94:f7:51:91:9e:5d:88:f9:bc:d8:0f:63:e1:c8:
         6e:b5:fc:99:a4:f4:9f:a5:50:85:8a:56:2f:8a:a1:8b:a6:27:
         fb:ed:e0:21:87:35:10:90:38:fd:e3:03:d3:76:3c:8d:88:2b:
         ce:3d:17:4f:26:42:01:da:0e:89:25:00:ab:f2:c0:9e:b3:55:
         8c:0c:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:33 2025 by rpki-client