This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
File:                     LgUrNwETMSqpiD2X7a0jDKFmIWI.mft (raw, json)
Hash identifier:          x/h5oRUcOuwl7bqyILYrL7t2tAigMMNaOzJa0GqqE/4=
Subject key identifier:   4D:CE:BB:27:A9:21:D8:ED:3F:F4:AE:43:8D:D2:82:BE:92:A5:E0:50
Authority key identifier: 2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62
Certificate issuer:       /CN=A917E968/serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
Manifest number:          012E
Signing time:             Tue 23 Dec 2025 03:36:48 +0000
Manifest this update:     Tue 23 Dec 2025 03:36:48 +0000
Manifest next update:     Tue 30 Dec 2025 03:36:48 +0000
Files and hashes:         1: LgUrNwETMSqpiD2X7a0jDKFmIWI.crl (hash: osbCqBkRcNvpNrCPyC7MKz2/b/AuJ81fITR9m8AQpkg=)
                          2: 919148B2169911EF9DA1992BC4F9AE02.roa (hash: eq/kGWgomEiw4pMKrPya4BqnBXJsYemvIJbRjqP6JSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl
                          rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 03:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E968, serialNumber=2E052B370113312AA9883D97EDAD230CA1662162
        Validity
            Not Before: Dec 23 03:36:48 2025 GMT
            Not After : Dec 30 03:36:48 2025 GMT
        Subject: CN=694a0e50-277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:81:a7:8b:1e:f4:23:e8:fa:73:95:01:65:
                    09:51:17:58:b0:41:94:9d:35:3e:85:88:3e:0e:64:
                    84:ae:67:dd:25:36:70:d9:dd:3c:f2:68:bc:bf:93:
                    ef:09:bd:e0:4c:29:92:0f:2d:5c:cf:fa:cd:6e:49:
                    21:6a:45:14:56:5b:43:8c:40:a6:4a:23:82:01:eb:
                    4c:f8:af:e4:12:f6:7e:88:0b:d7:73:22:61:f0:d1:
                    27:e0:55:4b:16:1e:52:33:e6:35:c8:5d:4e:ac:6f:
                    f0:bb:65:f9:c1:4b:18:c8:43:de:3a:21:94:24:9d:
                    c5:fc:1e:94:e3:84:3f:af:cc:88:c1:c8:d4:45:41:
                    55:a7:f4:03:57:67:dc:6e:d0:29:e2:9f:34:7d:05:
                    6d:8e:00:2e:60:1f:a5:fa:d5:b7:2e:81:05:c6:30:
                    28:72:2e:42:62:8f:82:7e:4a:ec:69:39:8d:ff:f8:
                    7c:78:46:45:cb:55:c8:9e:b8:2d:fb:d3:7a:c5:0b:
                    8b:82:bc:76:00:39:3a:ef:cd:22:c4:28:c1:7e:e0:
                    12:0c:1a:ae:6f:e5:8e:24:13:af:33:9c:4b:c8:10:
                    98:00:94:0d:21:fc:96:b1:ab:b1:5f:66:de:18:19:
                    c0:6b:76:77:08:09:a9:21:63:60:d1:19:e0:8e:21:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:BB:27:A9:21:D8:ED:3F:F4:AE:43:8D:D2:82:BE:92:A5:E0:50
            X509v3 Authority Key Identifier:
                keyid:2E:05:2B:37:01:13:31:2A:A9:88:3D:97:ED:AD:23:0C:A1:66:21:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgUrNwETMSqpiD2X7a0jDKFmIWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E968/2BA2EC0E169911EFBA40C92AC4F9AE02/LgUrNwETMSqpiD2X7a0jDKFmIWI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:db:32:c0:8a:48:4a:5c:ac:08:b2:6b:6b:b0:84:a6:67:
         a7:6d:d2:af:08:63:56:38:42:f7:95:f5:be:f5:d7:d4:0d:f1:
         8a:6b:b2:3b:ab:e1:ce:41:1b:55:f3:fd:45:5a:e0:ca:77:12:
         85:2e:1e:fc:7b:1b:0a:c4:02:7b:e1:f2:50:bc:c8:a9:c6:e7:
         ae:45:d0:94:7d:16:42:c3:0c:4d:51:f0:c4:3d:1b:1c:94:d7:
         13:e9:19:87:21:b3:94:cb:37:a9:88:62:a9:4a:69:25:e8:fb:
         a0:5e:2d:e8:e9:4e:89:9c:3a:8d:bb:39:1b:7b:0a:2d:7e:1f:
         49:f5:5e:5d:5a:1c:f2:a7:e8:d6:7f:f9:02:23:ac:cb:2f:59:
         be:0b:51:bc:9a:c0:a6:5f:91:44:6e:e8:7d:1c:73:29:ef:d4:
         84:57:32:47:6c:6d:ec:a5:71:b4:c6:f3:a8:d6:f3:e5:99:37:
         cc:41:b2:3b:b5:8d:3a:75:b1:8e:a4:d6:66:c7:ac:3e:4f:d3:
         4d:83:9e:ab:bc:18:61:34:df:8d:a3:67:27:07:d0:b5:18:89:
         4a:21:30:c8:66:da:a2:3a:5c:64:93:c6:6a:7c:01:0f:99:36:
         63:6d:30:0b:21:47:b4:7e:4d:b7:bc:8d:20:d4:ae:63:d7:48:
         7b:12:79:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:27:09 2025 by rpki-client