This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
File:                     LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json)
Hash identifier:          5bz1Y/3PEfpH8o16H1+9XeaWJqLMdEHlhf4L5BmxR/U=
Subject key identifier:   98:0E:A6:B0:27:00:8B:25:64:24:7B:F5:DA:68:BD:F5:8F:39:9C:3F
Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C
Certificate issuer:       /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
Certificate serial:       0FD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
Manifest number:          16F0
Signing time:             Mon 22 Dec 2025 17:09:58 +0000
Manifest this update:     Mon 22 Dec 2025 17:09:58 +0000
Manifest next update:     Mon 29 Dec 2025 17:09:58 +0000
Files and hashes:         1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: 1fO9ut7NrIgubejVziHSNdY4mi9yVgfXeTUnApeCnnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 17:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4048 (0xfd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C
        Validity
            Not Before: Dec 22 17:09:58 2025 GMT
            Not After : Dec 29 17:09:58 2025 GMT
        Subject: CN=69497b66-5ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:f8:3b:5d:7f:4c:9d:13:81:7b:d3:8b:87:
                    89:1f:bd:3f:a4:70:50:75:8c:52:20:0f:fd:e5:72:
                    80:14:0f:64:ef:d4:a0:41:17:7f:07:bb:00:7a:8b:
                    6f:ec:cf:43:57:b5:7b:fe:6d:d6:71:70:0e:5c:e1:
                    7d:42:f3:fc:20:7f:f2:7c:5f:2f:62:87:19:36:7c:
                    93:9a:c0:4e:d7:a7:bd:0f:92:32:44:90:a8:d7:78:
                    0c:8c:11:69:8e:ad:f8:8d:fc:cd:f1:dc:bc:32:17:
                    3a:46:5f:0c:05:73:14:b6:3b:30:07:e7:23:39:6f:
                    66:46:9b:ff:a7:42:50:ac:0a:1c:d1:1d:14:21:6f:
                    8d:a4:f3:85:21:4a:b9:71:09:a6:3e:7c:82:45:16:
                    90:95:fd:e4:0a:d3:e4:be:b8:c5:67:64:33:e6:ad:
                    70:f0:c2:a9:bb:2d:6c:c4:b4:3b:a2:81:0a:37:62:
                    00:58:eb:46:a2:2a:4a:1e:42:37:65:15:d1:7d:76:
                    89:c6:f2:06:97:b6:a0:1b:7c:77:fc:a3:01:14:c4:
                    5b:aa:58:95:8a:9b:5c:5e:31:77:8e:1a:7d:11:bb:
                    f7:f3:67:5e:fa:1e:e9:66:f2:c4:68:a2:37:70:d8:
                    0f:10:a7:53:a0:63:42:94:92:d1:14:78:52:bb:b0:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0E:A6:B0:27:00:8B:25:64:24:7B:F5:DA:68:BD:F5:8F:39:9C:3F
            X509v3 Authority Key Identifier:
                keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:c6:5b:2d:ee:ef:f8:a7:63:0e:54:4f:17:db:38:24:cf:
         94:20:1d:4c:85:6e:76:a0:00:23:e3:09:2c:08:c2:61:b2:60:
         89:20:3e:18:8a:11:05:86:b3:16:ad:dd:c3:cf:36:91:8e:54:
         92:14:81:a0:e1:c7:68:03:5c:ce:6e:95:eb:8e:d8:5b:20:e9:
         2d:aa:36:72:13:2f:9f:e3:26:bf:e9:2f:d4:1d:20:9f:53:57:
         86:82:dc:86:cb:e6:f0:d1:19:52:90:ce:1e:86:61:a3:a1:27:
         5a:b3:0d:4e:de:83:af:9f:6e:64:80:65:2b:1e:bb:e9:bd:22:
         c6:9c:ca:fa:9f:4e:39:91:70:79:c3:71:a2:7c:0c:60:53:77:
         b4:25:72:1e:4d:9a:bd:74:50:eb:40:d5:bb:f8:5c:e5:49:7d:
         81:df:47:19:ac:21:a3:62:7c:10:19:92:d5:e6:ac:b6:0c:b2:
         d6:c6:ac:48:ed:07:0c:d1:05:91:04:ce:03:ec:50:fb:d4:b3:
         3f:05:22:89:17:23:c3:23:06:96:a6:c5:f9:5b:68:07:91:32:
         d8:06:be:67:e8:3f:fa:f0:87:8f:cd:65:6b:82:77:f0:7a:39:
         c8:a0:59:ed:62:99:95:ee:3b:29:d2:4a:52:c2:16:47:5a:d8:
         70:41:4b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:48 2025 by rpki-client