This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
File:                     lLA392-iN6eOqVSONVel4W7WJJo.mft (raw, json)
Hash identifier:          Y5pnQn3O6YM9UqHeq1w88u7Ut/wacZyOcgBcCgegyOs=
Subject key identifier:   7C:76:76:AF:5A:B3:9D:C8:F2:8C:11:4A:62:1D:09:11:93:B6:72:D6
Authority key identifier: 94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A
Certificate issuer:       /CN=A9147BF1/serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
Manifest number:          01AB
Signing time:             Tue 23 Dec 2025 02:16:27 +0000
Manifest this update:     Tue 23 Dec 2025 02:16:27 +0000
Manifest next update:     Tue 30 Dec 2025 02:16:27 +0000
Files and hashes:         1: lLA392-iN6eOqVSONVel4W7WJJo.crl (hash: sszEKRCr0cKduPUSGuKjRtYGSz1q8N7TJWcVY+KeUds=)
                          2: 26C760F002EA11F0836EF72FC4F9AE02.roa (hash: /0dTnWT2FRET+08FVC1mUWomcC2kAcAYkpb9MNNV3d8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl
                          rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BF1, serialNumber=94B037F76FA237A78EA9548E3557A5E16ED6249A
        Validity
            Not Before: Dec 23 02:16:27 2025 GMT
            Not After : Dec 30 02:16:27 2025 GMT
        Subject: CN=6949fb7b-2928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:71:6a:06:40:de:8d:0b:e2:15:d8:f6:89:
                    65:cb:ed:40:b6:e3:a9:70:36:89:35:2f:b1:33:d0:
                    f4:f8:54:06:e6:63:ba:f8:ea:cf:2e:6f:91:8c:79:
                    2c:a5:b5:68:24:25:f3:34:31:e8:bc:f1:59:f6:13:
                    12:03:32:97:e0:60:b7:f2:0c:ad:40:30:ce:98:62:
                    b7:87:d2:b2:c9:e0:01:0a:bb:b3:6a:15:5c:07:01:
                    72:fc:40:19:01:06:f0:39:ed:7b:5e:95:e9:c7:42:
                    09:e7:60:e9:51:85:6c:1f:85:7b:d5:6e:f4:bb:09:
                    07:1c:08:3b:99:33:4c:c8:4f:f9:5d:66:d3:22:38:
                    9e:24:a4:05:ed:08:e4:46:ca:05:48:b2:97:d1:de:
                    60:6e:a6:f7:03:44:57:c3:de:91:3f:a1:70:81:d8:
                    9e:6c:04:a7:c1:96:17:ac:6e:0b:aa:30:86:af:56:
                    1e:f7:ec:48:c9:30:9f:ca:fc:04:be:4d:19:80:55:
                    a2:3b:f4:78:8d:65:7c:a5:7b:eb:37:da:c6:35:81:
                    8d:0b:f4:50:ad:0c:7a:1a:22:8b:c2:34:fa:80:ab:
                    ca:99:a9:ad:9e:e4:52:c0:ce:93:c4:15:1f:c7:cb:
                    55:4e:05:d8:3a:c5:e5:f6:7e:25:1f:f3:02:cf:9a:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:76:76:AF:5A:B3:9D:C8:F2:8C:11:4A:62:1D:09:11:93:B6:72:D6
            X509v3 Authority Key Identifier:
                keyid:94:B0:37:F7:6F:A2:37:A7:8E:A9:54:8E:35:57:A5:E1:6E:D6:24:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lLA392-iN6eOqVSONVel4W7WJJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BF1/7D16E4FA57B811EEAE18B568C4F9AE02/lLA392-iN6eOqVSONVel4W7WJJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:41:3e:93:ec:6a:55:d0:74:89:9b:2a:54:79:46:60:37:
         55:82:f4:82:f2:94:06:b9:be:45:5b:fb:8e:b7:e0:55:02:28:
         71:4c:f2:b5:a1:3f:e0:5f:3a:5a:d8:9c:8c:f2:3c:b9:8c:71:
         e0:30:03:ca:6b:76:b6:e5:66:89:82:f4:a6:d1:b8:72:f5:ab:
         14:a4:0c:59:65:f6:38:a3:ce:56:e9:70:42:05:5b:37:43:14:
         cc:5c:d2:19:5d:ac:2d:ef:c0:49:cd:52:0d:43:0c:6c:6f:bf:
         5f:4e:f5:78:b1:cf:f3:11:2b:48:67:5e:24:49:25:39:97:ea:
         ac:a0:be:90:f5:80:ee:ce:56:1b:80:78:89:6d:f6:56:6c:43:
         5a:68:89:d4:b7:0d:30:89:01:cc:5a:ad:ee:af:07:5e:5c:9d:
         b5:62:f7:b0:94:b4:f5:0a:15:dd:9d:e3:e3:b5:d3:66:94:7e:
         e3:30:35:9d:ae:16:69:14:5b:eb:5b:bc:c9:e0:4e:e2:4e:59:
         03:ad:07:04:d9:78:c6:aa:8b:71:c3:6c:85:29:ca:bd:78:6a:
         53:1f:d3:6c:2b:64:24:fe:5e:4e:dd:6f:f0:3f:71:36:ec:99:
         d6:3e:e3:9d:5a:32:26:1f:34:1e:7c:56:b9:3a:23:4a:e5:60:
         03:15:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:23:50 2025 by rpki-client