This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          qdacLiMvhGUYanLHbNPnNGBjhg9MppzietWKQ6jkwqw=
Subject key identifier:   EE:24:D9:66:3A:2A:39:EC:D3:F9:59:4A:2D:8B:B0:B1:64:A9:A0:77
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0B8C
Signing time:             Mon 22 Dec 2025 18:32:26 +0000
Manifest this update:     Mon 22 Dec 2025 18:32:25 +0000
Manifest next update:     Mon 29 Dec 2025 18:32:25 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: 2bn5WCRRqN9AFRam+MfYlAYtFnJz7vDm53qVDgaAT9A=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: nC2MCb31DN75ahkTYwNnww6l+ZVraZqBgRvw8nlhuTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 18:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: Dec 22 18:32:25 2025 GMT
            Not After : Dec 29 18:32:25 2025 GMT
        Subject: CN=69498eba-b9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:4a:55:f7:3d:d0:31:ae:43:17:2a:4f:3a:
                    2b:d7:7c:97:6c:7b:6d:46:d8:b3:b0:cd:58:94:b1:
                    12:fb:79:8f:8f:72:3d:11:bc:8b:ee:24:78:25:85:
                    46:f4:27:b1:3f:aa:87:12:92:6c:83:da:a5:5c:e8:
                    48:4e:d3:61:b3:d7:67:3b:a1:e3:f1:ee:2a:7c:a3:
                    dc:88:6f:13:9c:48:eb:f2:80:68:27:46:7a:46:dd:
                    24:15:0e:6d:66:6c:18:e0:48:7b:34:cf:99:15:1a:
                    d2:1a:ab:84:f5:ec:0e:6d:07:5f:04:69:6c:1b:93:
                    a3:79:84:d0:69:dc:08:d3:77:97:7d:92:5b:73:a7:
                    cb:1a:4e:cd:14:a8:1a:98:aa:66:a3:83:b1:fe:8e:
                    79:f0:9c:01:43:bc:4d:c2:23:96:c1:90:71:5a:32:
                    9d:09:34:8f:d1:fb:e9:ac:bb:b8:5a:59:91:a3:b2:
                    67:38:8c:9a:51:92:76:50:41:a0:2a:46:c8:13:e2:
                    33:b2:1a:ed:94:a9:95:1e:38:36:c3:80:52:31:48:
                    d6:b5:d7:57:ce:b9:09:42:4b:3d:6d:04:ba:35:22:
                    e3:0d:76:f3:f7:bf:7e:cc:7e:8e:9c:ee:3b:1c:5a:
                    c4:e5:6a:b3:b7:37:89:c7:4e:13:75:5c:1e:4b:1c:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:D9:66:3A:2A:39:EC:D3:F9:59:4A:2D:8B:B0:B1:64:A9:A0:77
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:07:63:e4:e2:96:e2:1a:11:e0:ca:01:b1:07:2f:99:57:bf:
         f0:af:55:73:14:ac:53:08:3f:55:3f:e9:46:97:1f:b6:17:77:
         0e:4f:39:18:ac:f6:7b:df:90:1f:a8:6d:de:4c:3f:3e:ea:7d:
         44:91:ac:fb:9e:1c:e2:c1:2d:2c:49:65:4d:20:c3:cb:03:f5:
         e2:28:f0:57:9b:ba:43:cd:90:48:52:f3:ca:b9:84:c4:09:01:
         ba:29:dc:c6:55:46:93:d3:e4:5b:eb:d5:55:75:a4:ba:74:72:
         2f:06:06:a9:d6:15:24:74:e6:8a:39:3b:5f:cb:fa:6c:92:e3:
         49:a6:c0:84:f9:26:dd:9d:4f:12:d2:67:58:17:6c:a0:3d:f8:
         5b:e4:17:2b:0f:f1:a0:ac:39:25:50:3f:38:dc:0c:8e:ef:7e:
         0f:ef:90:f6:ce:eb:cf:40:eb:4b:0a:1b:65:c0:1b:28:84:f2:
         fe:a8:37:82:ea:40:b8:bf:e7:77:b3:05:6c:4f:76:d4:66:d0:
         c5:5c:6c:90:a1:05:34:f0:1d:83:4b:2c:28:be:cd:57:21:83:
         e0:ad:2c:43:d6:a0:d7:e3:38:9b:e9:fe:c5:aa:79:22:10:ad:
         b4:b4:75:78:5a:71:c4:d9:49:f3:5b:1c:7d:85:6a:10:8c:a7:
         80:fb:bd:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFBNjAxMTAvBgNVBAUTKDJFODIzRDU5NDk2Q0ZBQzczNzhGQTgyQkY4NERERjY4
NEQ5MzJCOUQwHhcNMjUxMjIyMTgzMjI1WhcNMjUxMjI5MTgzMjI1WjAYMRYwFAYD
VQQDDA02OTQ5OGViYS1iOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7xKVfc90DGuQxcqTzor13yXbHttRtizsM1YlLES+3mPj3I9EbyL7iR4JYVG
9CexP6qHEpJsg9qlXOhITtNhs9dnO6Hj8e4qfKPciG8TnEjr8oBoJ0Z6Rt0kFQ5t
ZmwY4Eh7NM+ZFRrSGquE9ewObQdfBGlsG5OjeYTQadwI03eXfZJbc6fLGk7NFKga
mKpmo4Ox/o558JwBQ7xNwiOWwZBxWjKdCTSP0fvprLu4WlmRo7JnOIyaUZJ2UEGg
KkbIE+IzshrtlKmVHjg2w4BSMUjWtddXzrkJQks9bQS6NSLjDXbz979+zH6OnO47
HFrE5WqztzeJx04TdVweSxwcDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4k2WY6
Kjns0/lZSi2LsLFkqaB3MB8GA1UdIwQYMBaAFC6CPVlJbPrHN4+oK/hN32hNkyud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUE2MC84MDMxNEY4NjND
RkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1zYzNqNmdyLUUzZmFFMlRL
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvSTlXVWxzLXNjM2o2Z3ItRTNmYUUyVEs1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUE2MC84MDMxNEY4NjNDRkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1z
YzNqNmdyLUUzZmFFMlRLNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjB2Pk4pbiGhHgygGxBy+ZV7/wr1VzFKxTCD9VP+lGlx+2F3cOTzkY
rPZ735AfqG3eTD8+6n1Ekaz7nhziwS0sSWVNIMPLA/XiKPBXm7pDzZBIUvPKuYTE
CQG6KdzGVUaT0+Rb69VVdaS6dHIvBgap1hUkdOaKOTtfy/pskuNJpsCE+SbdnU8S
0mdYF2ygPfhb5BcrD/GgrDklUD843AyO734P75D2zuvPQOtLChtlwBsohPL+qDeC
6kC4v+d3swVsT3bUZtDFXGyQoQU08B2DSywovs1XIYPgrSxD1qDX4zib6f7Fqnki
EK20tHV4WnHE2UnzWxx9hWoQjKeA+71+
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:21 2025 by rpki-client