This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
File:                     LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json)
Hash identifier:          SuscmgtGTbHF1i77CVz7mn4RIfJynMq0VDXKP54qA5c=
Subject key identifier:   3C:49:59:09:F2:E4:E9:7A:D5:4C:7A:34:0E:A5:C6:40:48:68:DD:1B
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
Manifest number:          72
Signing time:             Tue 23 Dec 2025 05:46:05 +0000
Manifest this update:     Tue 23 Dec 2025 05:46:04 +0000
Manifest next update:     Tue 30 Dec 2025 05:46:04 +0000
Files and hashes:         1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: RGBQoaImoGuHuF1OjQxaht0c9gkIy7xxTbqlEY/tAVs=)
                          2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: 0xN1bZnq0dM0T8Sd8GlQedW1EDR0bZx7h7KAIQ4CSgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 05:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Dec 23 05:46:04 2025 GMT
            Not After : Dec 30 05:46:04 2025 GMT
        Subject: CN=694a2c9d-6426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:69:d4:d4:8e:bd:db:6a:97:64:0c:64:39:
                    fe:2e:e6:ac:68:b8:ce:d4:6a:f5:2a:8e:cf:a3:71:
                    fe:d1:43:d7:7c:b8:0e:7c:f5:30:b5:35:56:5e:b0:
                    cb:79:6e:d7:d9:82:0e:48:4e:99:ec:f6:34:52:5d:
                    54:97:0f:b8:9a:2c:fd:b1:82:e9:ab:54:79:6b:99:
                    2e:b2:4b:8a:c2:39:82:8e:e5:2c:ca:65:b9:56:71:
                    7c:10:00:b1:e9:55:02:df:b6:19:97:c3:82:40:63:
                    88:69:1c:99:5c:f1:71:66:b6:6f:2c:77:7f:1b:0e:
                    e2:43:55:69:0e:fd:d2:3c:7f:18:44:b3:fc:a4:c1:
                    0b:36:54:0e:c7:c3:94:7f:92:3a:74:7c:17:4a:28:
                    43:0f:fa:4f:57:5b:68:9b:8c:07:11:6f:47:fb:70:
                    2f:32:14:ef:d7:3a:65:e5:51:1a:f5:ae:97:33:e1:
                    7d:51:80:08:f6:a7:68:a3:6b:97:6e:85:3f:f8:04:
                    4f:b1:eb:eb:48:31:1b:cc:78:8a:8c:0d:f5:8f:f5:
                    36:44:0f:8a:4b:13:55:3f:ba:6c:fb:ad:38:85:63:
                    f8:e5:d3:e8:92:b4:98:f7:6e:25:62:d1:49:82:46:
                    6d:db:41:df:76:62:48:96:86:f5:76:28:9f:a8:81:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:59:09:F2:E4:E9:7A:D5:4C:7A:34:0E:A5:C6:40:48:68:DD:1B
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:84:f0:2e:61:8c:50:2c:73:07:41:b9:d0:97:37:40:e2:
         6e:cd:d0:54:83:a6:55:30:68:53:95:64:c3:60:3f:cf:58:18:
         f1:b1:97:88:db:a4:3c:c4:bf:e5:ed:76:68:d7:c8:e8:83:57:
         27:19:61:df:99:06:c2:75:86:63:f6:4e:f3:dd:cd:91:10:b9:
         80:4d:b1:c3:50:37:12:87:39:4b:38:20:ef:d1:c9:ff:82:fc:
         fb:7d:4a:96:2c:e7:43:9b:8f:cc:d1:f4:3c:e1:29:ec:a1:17:
         50:c4:18:c0:df:e1:90:17:82:34:3e:d9:fa:12:5a:56:0f:3d:
         6a:85:a0:21:c5:d4:89:af:08:21:a9:6f:04:01:5b:3b:6e:84:
         42:fb:de:e6:ef:98:8d:3b:e1:71:30:b2:76:63:8e:e9:35:d4:
         73:86:a5:e2:0e:a2:2a:ba:37:c8:20:df:17:9e:3a:63:d0:65:
         5c:5d:13:92:fa:9d:97:fa:8c:67:b9:60:02:b9:03:3c:bd:a2:
         df:2c:55:ee:66:98:52:ec:03:a1:cb:fa:65:e9:de:3d:86:e1:
         7b:bb:75:3d:ea:99:c0:66:d3:c9:1c:4c:52:dd:5d:99:8d:23:
         ad:1e:b0:5c:bb:23:4a:de:97:f2:25:2b:22:c0:f6:a8:88:ae:
         92:15:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:53 2025 by rpki-client