This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
File:                     llSi8IRZeiuRrAAqdgfhPBXQlJE.mft (raw, json)
Hash identifier:          Fr6ZecgK7yE/s8PRd78eSh7lBAZV8CDD2qUSTzfkb6A=
Subject key identifier:   3D:36:3A:80:97:EB:47:C2:F2:5B:6D:F6:E1:BB:FF:4F:66:13:59:67
Authority key identifier: 96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91
Certificate issuer:       /CN=A9153303/serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
Manifest number:          010F
Signing time:             Tue 23 Dec 2025 03:54:59 +0000
Manifest this update:     Tue 23 Dec 2025 03:54:58 +0000
Manifest next update:     Tue 30 Dec 2025 03:54:58 +0000
Files and hashes:         1: llSi8IRZeiuRrAAqdgfhPBXQlJE.crl (hash: mKCs25EM7/LR0t+2fu7YTPCFgrNzHX1LyppfyAggvQg=)
                          2: 29A436623FE111EFB5A50814C4F9AE02.roa (hash: 6fHZUduLlppKNeQyv7MyGz7d2EPeIy77Os8/ALcrrKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=9654A2F084597A2B91AC002A7607E13C15D09491
        Validity
            Not Before: Dec 23 03:54:58 2025 GMT
            Not After : Dec 30 03:54:58 2025 GMT
        Subject: CN=694a1292-64ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:5f:c8:5b:fa:de:c3:86:da:2d:09:6b:7e:
                    a3:1c:34:7c:5e:d6:ab:37:fa:18:e4:f2:91:f3:27:
                    91:90:59:32:23:b2:8b:87:88:25:1b:b1:08:f4:f6:
                    3b:56:0a:58:65:78:70:13:3e:f7:fc:49:59:fa:1e:
                    af:91:69:18:27:d9:8a:e5:67:38:64:36:a4:2f:a6:
                    e5:80:a1:17:0e:db:4c:07:49:36:b7:bb:41:7c:0e:
                    30:fe:5a:a8:ca:05:7c:7f:2e:41:6c:66:f8:12:26:
                    7f:66:ba:72:81:e6:f2:fa:b5:dd:8f:61:bc:5f:eb:
                    8e:ad:9e:5f:39:d0:87:a8:17:98:3c:15:46:0d:99:
                    4f:67:86:5b:09:08:b4:ee:4a:eb:bb:72:1c:35:76:
                    0f:b5:c2:c7:8f:4c:eb:01:44:28:22:39:dc:6f:9c:
                    da:99:f3:a9:bf:2a:15:2a:28:f5:e4:87:60:20:8b:
                    47:10:60:98:c2:e5:1b:c0:72:5d:5c:0a:07:60:a7:
                    81:be:b4:9a:4a:eb:a7:d3:e4:33:b2:33:76:8a:62:
                    41:29:4f:2a:5a:29:ff:1d:4b:9b:25:2d:43:07:11:
                    de:b8:10:c4:4f:26:f8:e2:7b:ed:a8:7d:10:4e:f4:
                    30:ad:fd:75:12:a9:98:11:19:0a:64:7e:50:8b:bc:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:3A:80:97:EB:47:C2:F2:5B:6D:F6:E1:BB:FF:4F:66:13:59:67
            X509v3 Authority Key Identifier:
                keyid:96:54:A2:F0:84:59:7A:2B:91:AC:00:2A:76:07:E1:3C:15:D0:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/llSi8IRZeiuRrAAqdgfhPBXQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/80BF1A623FE011EF8635D712C4F9AE02/llSi8IRZeiuRrAAqdgfhPBXQlJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:70:0a:b9:eb:f6:82:d8:7c:85:f9:c7:90:f1:b0:9f:b7:12:
         de:f0:e1:dc:4b:71:c1:99:31:c4:0d:cd:8c:0c:01:ea:51:da:
         bf:0e:fb:80:7b:7c:48:c8:6c:d3:a1:98:b2:b3:ca:05:61:6c:
         e9:73:35:d6:75:aa:72:20:07:97:6a:c2:90:c6:d1:0a:a4:b1:
         60:04:17:9d:ed:51:d8:48:70:3c:1a:0a:86:58:74:8d:77:79:
         db:06:e0:f8:69:c3:53:8a:02:60:12:5f:b0:07:f0:ac:c8:47:
         4d:2d:ba:18:d8:d7:92:05:7b:07:23:9d:fb:c8:47:93:29:86:
         87:1d:b9:cf:b3:14:f0:99:3d:09:a6:84:df:3f:5a:62:94:83:
         ba:85:dc:c6:ff:b7:eb:8b:36:8f:c4:49:76:04:0d:7a:08:5c:
         d6:d6:12:47:b5:0d:e2:d7:59:eb:da:b5:c2:b8:95:78:60:fb:
         87:66:64:99:ba:e1:a8:7a:77:6b:43:46:6a:b7:8b:67:d5:25:
         d7:65:c5:e8:bd:c7:07:34:04:c4:94:77:d7:6c:de:88:86:d0:
         7e:a6:4b:a6:92:d1:70:fe:92:f2:4d:ae:b0:63:20:19:7c:82:
         4d:02:a8:cd:06:82:ab:bf:72:a9:b9:2b:e8:50:d1:fa:6b:99:
         8f:f6:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:20:59 2025 by rpki-client