This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
File:                     luWqcIJLjRPdz-YfzJogytZeYME.mft (raw, json)
Hash identifier:          X21D1Bm/wttqXryT7pRFr0Af1Ig1kKdrezhVPt4DFR4=
Subject key identifier:   9D:78:DD:8D:61:DF:B1:C6:B8:DF:18:23:00:F7:36:8B:37:51:C4:0A
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Certificate issuer:       /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
Manifest number:          06CF
Signing time:             Mon 22 Dec 2025 21:22:46 +0000
Manifest this update:     Mon 22 Dec 2025 21:22:46 +0000
Manifest next update:     Mon 29 Dec 2025 21:22:46 +0000
Files and hashes:         1: luWqcIJLjRPdz-YfzJogytZeYME.crl (hash: 0UJ43rJwZqU26zbjlmOV4UHn+SjTKTm43YBwDDLTlkc=)
                          2: 69FB4E726DC511F08948D952C4F9AE02.roa (hash: 7THfaaI2xr5bkDyTmWI45Sy1DSF1UxvdqjKUDobmspg=)
                          3: 6656B366814C11EB913AEC78C4F9AE02.roa (hash: hWmIjVl3wq2WAFI85MCQWSOZgmGgPc2bb2Ktcia7bs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
                          rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
        Validity
            Not Before: Dec 22 21:22:46 2025 GMT
            Not After : Dec 29 21:22:46 2025 GMT
        Subject: CN=6949b6a6-3391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:07:1c:97:5d:8e:61:6f:16:58:d7:05:86:
                    28:9f:0b:61:34:06:f2:d9:c1:c6:4e:7e:a5:4a:eb:
                    fc:1f:bc:25:4e:55:62:ae:78:e6:d6:a3:7d:89:e2:
                    ba:05:ce:cd:59:60:33:df:f5:fd:10:98:a3:65:b8:
                    f4:69:f6:20:76:5a:41:36:47:9e:1b:e4:57:f5:e3:
                    a6:79:63:15:fa:a6:40:6c:fb:0e:85:10:b3:b9:b6:
                    c6:ac:e4:1b:45:6c:ff:d2:04:db:60:e1:57:47:82:
                    81:32:75:1b:74:31:d9:ed:84:9c:4e:ce:e6:0f:5c:
                    00:41:85:44:02:5e:54:3f:f7:10:e2:6e:5b:1f:49:
                    29:a0:10:74:56:06:ad:0a:6c:f7:c1:e7:39:47:b3:
                    ca:d4:2c:b1:1b:f6:3e:ec:e9:08:af:50:15:f8:c5:
                    65:61:b6:69:f4:a9:08:e6:52:91:b2:0a:61:7d:b9:
                    6d:63:f9:2b:7b:d0:ca:0b:6f:c4:75:12:56:64:db:
                    b1:59:ea:f9:f0:34:50:ea:8d:d0:91:c7:62:3d:23:
                    da:cb:ce:21:12:dc:e4:73:e4:b3:4e:e7:e2:1e:fd:
                    12:01:2e:7d:cd:d9:84:68:8b:fe:0b:3a:b5:c8:04:
                    cb:9a:5f:09:e0:20:4e:7d:f8:80:f9:25:93:ff:78:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:DD:8D:61:DF:B1:C6:B8:DF:18:23:00:F7:36:8B:37:51:C4:0A
            X509v3 Authority Key Identifier:
                keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:e5:98:11:d8:e3:c8:b9:14:c5:13:9f:c2:64:d5:ed:5b:
         48:2c:8f:56:5b:5d:57:b4:bd:cc:d5:c9:1c:6e:55:50:4c:50:
         66:ed:46:a4:66:58:d4:cd:d9:24:4b:81:fe:43:8c:34:d6:59:
         ca:8f:3f:b6:d7:13:9f:c8:f9:7e:a5:2a:c9:4e:16:10:c6:ce:
         bd:4c:6c:0a:9d:bd:16:af:b3:89:2a:70:fd:8c:ff:0b:76:b2:
         81:23:1e:9e:b0:32:b5:70:dc:4c:08:43:8f:1f:cb:94:c9:ec:
         66:2d:58:e3:83:ba:39:fc:de:92:af:b8:45:a9:7f:b0:1e:67:
         05:4a:fe:d1:d4:6c:89:21:be:68:e0:09:00:a4:74:a1:ae:91:
         64:30:e2:4b:17:4b:df:ce:af:90:82:73:13:e0:3e:8a:96:62:
         ba:c7:f3:33:60:2a:73:c6:31:4d:b9:e6:ae:c6:16:d8:11:e9:
         3f:2f:0b:44:b7:08:e3:8e:7e:6b:f8:ad:f1:42:df:56:2f:c2:
         99:84:94:7d:84:00:59:55:5f:ce:d2:2e:a6:17:de:fa:db:95:
         7d:c2:c1:53:55:42:8b:04:bc:e1:b5:f8:ad:04:eb:24:8e:21:
         91:1f:22:63:5d:bf:46:3a:90:8f:ad:8d:e5:88:42:30:01:92:
         61:9d:ff:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:06 2025 by rpki-client