This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
File:                     LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft (raw, json)
Hash identifier:          UD2DY4vPtZR0Kc4TIh9aS/I4oWVtNMailQeMuh22hh4=
Subject key identifier:   96:AC:DD:CF:7A:C5:6F:CC:79:74:DC:5F:E7:F5:02:4A:EB:53:48:0C
Authority key identifier: 2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F
Certificate issuer:       /CN=A91B50D2/serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
Certificate serial:       0660
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
Manifest number:          0660
Signing time:             Mon 22 Dec 2025 21:46:57 +0000
Manifest this update:     Mon 22 Dec 2025 21:46:57 +0000
Manifest next update:     Mon 29 Dec 2025 21:46:57 +0000
Files and hashes:         1: LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl (hash: OWUJK/giQLdpBqXoQYjYBw6CvPjE2eL2JWbn/smPid8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl
                          rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B50D2, serialNumber=2E825CDF248AC20A39C058E238FA92614924FA0F
        Validity
            Not Before: Dec 22 21:46:57 2025 GMT
            Not After : Dec 29 21:46:57 2025 GMT
        Subject: CN=6949bc51-9d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:96:5f:f6:9a:4d:4d:c5:a1:33:f3:37:d9:
                    ed:c5:90:e0:47:40:57:95:48:27:fe:0e:eb:44:fd:
                    9b:2d:2b:65:9e:5e:a7:de:45:d8:e6:08:78:b2:09:
                    92:f9:51:cc:60:da:5f:ea:cf:60:75:44:59:1d:2c:
                    80:5b:8b:26:66:a4:05:0d:5e:88:f5:15:b0:65:ae:
                    6b:07:8d:ae:c4:c8:94:26:e7:da:a1:8f:27:08:dc:
                    6e:fb:2e:9b:37:d0:f5:89:7d:e6:23:6b:fb:bb:fd:
                    1f:a6:97:90:ee:01:60:37:90:9f:62:d1:1f:8f:ec:
                    c4:f2:61:6a:49:20:d6:27:14:1f:b8:fa:61:ac:34:
                    ab:c9:69:4a:f2:41:e8:95:43:b2:a6:52:53:90:73:
                    ac:57:28:8e:a2:71:db:6e:cc:6c:78:c9:8f:27:0e:
                    22:0c:ed:72:82:0e:1b:b5:37:22:89:03:3c:9c:f8:
                    11:9d:38:e2:55:1e:8c:e9:7c:cd:12:81:82:22:81:
                    0f:30:c3:f6:67:04:74:e2:bf:e8:94:58:00:b7:26:
                    df:66:08:9e:93:8f:1a:3a:a5:f7:cd:fb:5a:24:2e:
                    6b:bc:c0:f1:0c:53:73:88:cd:c6:c7:b5:36:ab:45:
                    ea:db:52:c3:69:d4:64:02:52:31:4f:3c:18:80:39:
                    19:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:DD:CF:7A:C5:6F:CC:79:74:DC:5F:E7:F5:02:4A:EB:53:48:0C
            X509v3 Authority Key Identifier:
                keyid:2E:82:5C:DF:24:8A:C2:0A:39:C0:58:E2:38:FA:92:61:49:24:FA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoJc3ySKwgo5wFjiOPqSYUkk-g8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B50D2/6FA121AAA9AA11EB85407943C4F9AE02/LoJc3ySKwgo5wFjiOPqSYUkk-g8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:ab:37:19:9b:49:b9:a0:70:b6:d5:21:ed:ce:ad:0d:7b:
         d5:b7:60:38:52:c1:ee:ed:c0:ed:cf:2d:e3:45:f3:e9:f1:09:
         bb:57:1b:73:05:71:a6:66:ba:ab:96:de:80:f1:65:d0:ab:56:
         16:4f:52:60:70:bb:4a:24:68:71:2e:a2:8c:94:3d:a7:f8:34:
         4a:91:13:7d:7b:f4:ec:f1:70:b7:bd:1f:7c:5b:dc:6d:87:98:
         de:c7:bd:6a:ca:89:9e:81:5f:b8:36:3d:0e:ee:92:3d:14:f8:
         1e:68:75:63:f9:12:a5:8e:dd:fd:3c:1a:52:f2:f9:1e:7d:75:
         86:63:77:33:b5:bf:90:fe:7b:8c:c3:b3:03:bd:5d:1a:37:72:
         17:c3:c6:56:bf:1d:5e:b7:76:02:6a:44:7b:d9:08:c0:30:b2:
         c4:6a:c0:0f:6e:c9:7d:17:ef:d5:56:9f:7d:79:f2:a6:00:1c:
         64:1e:41:b8:54:bd:74:7e:a2:5f:c4:2a:e3:0a:00:2f:05:67:
         03:81:51:3e:6d:5c:e7:07:4a:cb:35:e9:49:ec:40:fe:db:60:
         d5:9b:23:18:80:d5:f8:1b:fa:61:27:07:0f:6a:83:5a:29:3b:
         31:3b:47:17:d2:05:b5:60:3c:44:0b:57:0a:e4:7a:84:75:d7:
         a1:d1:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:17 2025 by rpki-client