This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
File:                     0LR5KL_bnbNR4dQlatArZyj5XPU.mft (raw, json)
Hash identifier:          V6rP073XRs/wnHndMAJfcTrj1TlbDBU0EHsYJzP6O2o=
Subject key identifier:   0F:EA:D4:D4:88:50:5A:3F:73:D2:40:8D:7D:59:43:54:5B:23:3B:E8
Authority key identifier: D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5
Certificate issuer:       /CN=A9174306/serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
Manifest number:          0178
Signing time:             Tue 23 Dec 2025 02:49:56 +0000
Manifest this update:     Tue 23 Dec 2025 02:49:55 +0000
Manifest next update:     Tue 30 Dec 2025 02:49:55 +0000
Files and hashes:         1: 0LR5KL_bnbNR4dQlatArZyj5XPU.crl (hash: k3td/UXcXb7ex71lLq2tErxjECBE+bCEeE4/2p8yPZc=)
                          2: 511C5136A2F011EEBBE10D80C4F9AE02.roa (hash: 7696MMuvciabX1nFuz0iuQ3b+zF4t5sdAPgAUCluYpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl
                          rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 02:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174306, serialNumber=D0B47928BFDB9DB351E1D4256AD02B6728F95CF5
        Validity
            Not Before: Dec 23 02:49:55 2025 GMT
            Not After : Dec 30 02:49:55 2025 GMT
        Subject: CN=694a0353-b6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:50:ee:d5:fd:88:8b:64:25:70:7c:a5:4b:
                    a3:de:e7:cd:9f:ff:31:7b:d0:0c:cc:30:11:63:d8:
                    03:a3:b9:90:58:44:ef:b2:fd:c5:3c:ff:b7:bc:ea:
                    7e:ae:2d:ae:bd:e3:d4:dc:86:af:8b:4a:b2:f5:68:
                    35:71:f8:61:d4:20:04:49:20:b9:aa:2a:8e:23:f6:
                    46:75:8c:4a:5e:90:bf:a5:08:31:c0:87:b2:96:0d:
                    73:9a:44:27:4b:7c:d4:de:c9:ec:1c:a2:b7:db:0d:
                    73:12:bc:3e:a5:d3:40:c1:c8:bb:c2:ea:c2:6d:6c:
                    b3:a8:0b:28:a0:fe:f1:50:e4:a1:0b:73:2b:4d:24:
                    20:9f:89:c5:4e:cc:df:11:2b:b6:72:30:a1:95:80:
                    53:1d:f2:cf:23:c4:0c:6d:5b:cd:5d:a3:b5:51:9b:
                    80:45:8a:09:95:31:12:79:76:99:a5:c8:49:f3:37:
                    0f:84:f4:b0:1d:63:10:8c:02:14:26:5e:10:ed:f3:
                    6c:2b:b1:ba:25:ff:c1:84:74:4c:01:95:1e:57:b3:
                    c8:3c:b9:f2:30:6f:a8:43:f2:ff:19:12:f4:4e:83:
                    42:5a:dd:5c:f0:34:24:63:be:68:d3:58:94:af:26:
                    ed:f7:ca:cd:5e:4e:2f:f3:32:c7:57:b8:9d:3c:e6:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:D4:D4:88:50:5A:3F:73:D2:40:8D:7D:59:43:54:5B:23:3B:E8
            X509v3 Authority Key Identifier:
                keyid:D0:B4:79:28:BF:DB:9D:B3:51:E1:D4:25:6A:D0:2B:67:28:F9:5C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0LR5KL_bnbNR4dQlatArZyj5XPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174306/2B5AEC70A2EE11EEA6354F5EC4F9AE02/0LR5KL_bnbNR4dQlatArZyj5XPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:55:89:3f:5f:39:8d:ae:e5:04:7b:65:7f:41:27:25:59:
         fd:37:68:62:0e:68:b0:0c:f2:00:b5:92:46:4a:41:d7:6c:ee:
         1e:7e:83:6b:b7:6b:54:fe:c3:8a:05:82:7f:78:14:62:e4:df:
         f7:0e:19:12:3c:a4:ee:1e:03:e6:37:17:b7:74:50:c0:fb:50:
         ce:c4:af:b1:c5:74:36:32:52:25:ce:ba:8d:42:44:40:db:cb:
         58:50:a6:23:5a:84:4e:5b:02:35:09:f6:cc:25:01:6e:5f:65:
         e6:b2:04:e5:81:55:ee:d0:c7:df:11:4f:09:32:62:ba:10:1c:
         a2:56:d0:e0:a4:2d:3d:0d:80:44:1c:67:9f:d3:13:92:53:c6:
         3f:d8:c3:cc:45:72:58:72:fc:ff:81:c1:41:04:f4:90:04:20:
         3d:c3:25:6f:8d:9c:e4:62:4a:bb:a4:1b:8c:6c:9b:cf:18:d1:
         4d:09:d8:0c:b4:81:cd:d9:60:23:22:83:26:f2:c4:9a:46:78:
         01:7e:41:bf:6d:fe:26:70:fb:7d:9a:dd:c8:d0:6d:2b:78:9c:
         8b:da:f5:c7:84:e8:31:13:c4:97:f1:f1:79:6a:9a:d0:27:82:
         ff:10:7c:9c:72:4f:09:ef:99:7f:ba:b2:a7:c0:58:df:82:e2:
         e7:cc:33:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQzMDYxMTAvBgNVBAUTKEQwQjQ3OTI4QkZEQjlEQjM1MUUxRDQyNTZBRDAyQjY3
MjhGOTVDRjUwHhcNMjUxMjIzMDI0OTU1WhcNMjUxMjMwMDI0OTU1WjAYMRYwFAYD
VQQDDA02OTRhMDM1My1iNmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDlQ7tX9iItkJXB8pUuj3ufNn/8xe9AMzDARY9gDo7mQWETvsv3FPP+3vOp+
ri2uvePU3Iavi0qy9Wg1cfhh1CAESSC5qiqOI/ZGdYxKXpC/pQgxwIeylg1zmkQn
S3zU3snsHKK32w1zErw+pdNAwci7wurCbWyzqAsooP7xUOShC3MrTSQgn4nFTszf
ESu2cjChlYBTHfLPI8QMbVvNXaO1UZuARYoJlTESeXaZpchJ8zcPhPSwHWMQjAIU
Jl4Q7fNsK7G6Jf/BhHRMAZUeV7PIPLnyMG+oQ/L/GRL0ToNCWt1c8DQkY75o01iU
rybt98rNXk4v8zLHV7idPOYytwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/q1NSI
UFo/c9JAjX1ZQ1RbIzvoMB8GA1UdIwQYMBaAFNC0eSi/252zUeHUJWrQK2co+Vz1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDMwNi8yQjVBRUM3MEEy
RUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5iTlI0ZFFsYXRBclp5ajVY
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBMUjVLTF9ibmJOUjRkUWxhdEFyWnlqNVhQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDMwNi8yQjVBRUM3MEEyRUUxMUVFQTYzNTRGNUVDNEY5QUUwMi8wTFI1S0xfYm5i
TlI0ZFFsYXRBclp5ajVYUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATflWJP185ja7lBHtlf0EnJVn9N2hiDmiwDPIAtZJGSkHXbO4efoNr
t2tU/sOKBYJ/eBRi5N/3DhkSPKTuHgPmNxe3dFDA+1DOxK+xxXQ2MlIlzrqNQkRA
28tYUKYjWoROWwI1CfbMJQFuX2XmsgTlgVXu0MffEU8JMmK6EByiVtDgpC09DYBE
HGef0xOSU8Y/2MPMRXJYcvz/gcFBBPSQBCA9wyVvjZzkYkq7pBuMbJvPGNFNCdgM
tIHN2WAjIoMm8sSaRngBfkG/bf4mcPt9mt3I0G0reJyL2vXHhOgxE8SX8fF5aprQ
J4L/EHycck8J75l/urKnwFjfguLnzDOE
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:34:59 2025 by rpki-client