This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
File:                     LgN_IhyajV_cyIxDyosl1ENrsDk.mft (raw, json)
Hash identifier:          00cLaGNhm+SYYeKz9NEeZKerHT7uK36848EeqrS8no8=
Subject key identifier:   45:31:90:8D:A6:54:2F:5C:A7:E0:5E:C9:31:A1:0C:4A:74:88:94:42
Authority key identifier: 2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39
Certificate issuer:       /CN=A9196285/serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
Manifest number:          8A
Signing time:             Tue 09 Dec 2025 04:30:42 +0000
Manifest this update:     Tue 09 Dec 2025 04:30:41 +0000
Manifest next update:     Tue 16 Dec 2025 04:30:41 +0000
Files and hashes:         1: LgN_IhyajV_cyIxDyosl1ENrsDk.crl (hash: JbMmAlf8wuNHmduKUjD1tvgW6qaEYseMinPGBT2oawg=)
                          2: D3E69766027B11F0ACFB0B53C4F9AE02.roa (hash: rAyLEuhdwnMPn+ymXVwfBwimmdxQ/627KOj67XHuGHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl
                          rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 04:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196285, serialNumber=2E037F221C9A8D5FDCC88C43CA8B25D4436BB039
        Validity
            Not Before: Dec  9 04:30:41 2025 GMT
            Not After : Dec 16 04:30:41 2025 GMT
        Subject: CN=6937a5f1-f636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a9:c6:8e:bf:49:e6:70:cd:86:3e:23:3c:be:
                    df:01:a1:8c:b5:db:45:db:73:af:5e:b9:50:00:f4:
                    2d:60:57:d3:00:62:1e:a1:59:99:d3:8a:f4:51:e5:
                    76:2c:de:a3:f3:9f:84:eb:6c:35:8e:95:1a:b4:2c:
                    a5:7e:5f:4c:2e:0f:7d:1c:1d:ca:08:ae:fd:8f:e6:
                    f0:7a:2e:27:4e:88:86:0e:83:54:3a:db:5f:47:f8:
                    a3:d5:7c:3f:88:a6:55:8b:a9:87:88:08:05:75:e9:
                    06:c8:aa:fc:58:12:c3:a2:2d:b7:69:58:0c:b3:86:
                    02:77:11:ea:7d:f6:37:53:1b:a2:74:c3:20:89:b4:
                    47:37:f5:74:3d:03:3a:7c:80:4d:7b:cc:c2:4d:33:
                    de:e1:b2:9c:52:95:d7:65:ca:7e:a2:d8:85:6c:f0:
                    cd:46:be:b6:69:e2:b3:e8:cd:98:24:a0:62:70:4b:
                    b4:3f:8d:a9:99:4d:e3:3f:84:1e:59:9a:df:05:94:
                    3a:dd:26:16:73:5a:e1:8e:0a:b7:2a:56:3c:70:35:
                    21:77:62:22:c5:d5:25:de:32:19:3a:47:3e:4f:3d:
                    94:9d:c6:4c:06:60:ac:26:ea:5e:19:e5:d1:a0:bb:
                    34:75:5f:27:64:7b:18:90:e4:53:d7:97:3d:d8:11:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:31:90:8D:A6:54:2F:5C:A7:E0:5E:C9:31:A1:0C:4A:74:88:94:42
            X509v3 Authority Key Identifier:
                keyid:2E:03:7F:22:1C:9A:8D:5F:DC:C8:8C:43:CA:8B:25:D4:43:6B:B0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgN_IhyajV_cyIxDyosl1ENrsDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196285/8C258B12027B11F0A946ED34C4F9AE02/LgN_IhyajV_cyIxDyosl1ENrsDk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:3c:ce:6b:b5:e6:df:fb:92:6b:a9:67:6a:a6:2a:18:2b:
         ec:a3:a0:49:4e:20:0f:50:b9:37:3f:25:36:4e:e3:34:b4:97:
         cb:d7:2b:6c:bd:ac:02:18:26:7a:2e:ea:3c:5b:71:b1:26:be:
         3d:7c:f2:bd:65:77:f2:fd:f1:8f:66:70:b8:4c:f3:2f:58:14:
         7a:ee:ec:b8:8a:d9:09:17:ac:25:75:68:84:a3:d5:ba:c4:cd:
         47:f0:2a:35:57:cd:98:ae:9b:1e:19:28:26:c0:45:cd:5b:0e:
         86:e4:f3:cd:45:ab:74:ca:30:13:cb:12:ee:50:ea:04:6a:65:
         24:5d:c1:c8:93:1e:8b:3f:ef:06:b8:f2:f4:04:5d:37:0c:02:
         f5:a3:88:c9:c2:86:35:a6:f9:f0:2f:18:2d:74:0f:d6:2c:01:
         54:27:ca:f1:1e:c6:c5:4d:d8:79:12:3a:5b:76:5b:47:a7:c9:
         46:3f:45:b7:c0:70:8a:47:36:88:35:74:25:26:87:e6:99:86:
         aa:e9:c5:3c:7a:73:d5:f2:4a:5c:e4:7d:27:18:65:ed:2f:aa:
         5e:b6:79:ac:a1:8b:47:ff:2c:d8:17:59:95:8b:51:ef:9e:22:
         40:79:cf:f3:31:ad:86:21:f6:80:83:4c:be:10:19:fe:1f:9a:
         f3:94:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 11:25:48 2025 by rpki-client