This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
File:                     lvw9H4eVvunqoeuV0ppZyKQCc9M.mft (raw, json)
Hash identifier:          iXHMQnjx/zTwvOcco2L/pNvYsDor1hv9jBnglhhaTTw=
Subject key identifier:   6E:41:AA:43:9C:47:89:6F:8B:21:28:59:21:22:5F:49:73:84:1A:1E
Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3
Certificate issuer:       /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
Manifest number:          44
Signing time:             Sun 07 Dec 2025 05:26:48 +0000
Manifest this update:     Sun 07 Dec 2025 05:26:48 +0000
Manifest next update:     Sun 14 Dec 2025 05:26:47 +0000
Files and hashes:         1: lvw9H4eVvunqoeuV0ppZyKQCc9M.crl (hash: 1wKgRSnoz6uGmIHQAm2qW/yGNfyEm56lvzemf++2f+E=)
                          2: 6CAAA4586C5111F08D82894CC4F9AE02.roa (hash: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl
                          rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Dec 2025 05:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3
        Validity
            Not Before: Dec  7 05:26:48 2025 GMT
            Not After : Dec 14 05:26:47 2025 GMT
        Subject: CN=69351018-cec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:9a:21:37:67:c1:70:78:a9:c6:01:a4:71:
                    3a:02:dc:4a:8c:ae:b7:1d:38:d6:8e:68:93:4c:c8:
                    6b:5f:10:ca:45:89:d7:16:fc:f7:c1:94:a9:de:5d:
                    1d:43:9b:3e:68:8c:95:8d:fb:09:94:58:c1:e3:75:
                    74:9d:43:9f:c5:a5:e0:70:0d:78:66:ac:53:18:b0:
                    0d:df:2f:f5:df:2d:26:2b:3c:78:8e:f8:f8:26:5e:
                    7e:66:3a:e9:2f:aa:30:24:e3:42:84:04:11:bd:b5:
                    ac:99:d6:a5:56:cb:f6:0d:c7:8a:0e:e7:92:5c:d3:
                    ec:73:86:36:89:06:66:89:df:24:39:a3:87:ad:f9:
                    2d:2f:ba:52:ad:01:06:e8:e6:f9:50:78:93:2f:ba:
                    5d:91:19:5d:ba:be:c4:e5:77:f0:4a:7c:7a:5e:33:
                    a0:eb:ce:fe:4d:92:53:e5:d0:83:6f:92:f4:24:4e:
                    c7:33:14:f2:a2:40:cd:65:85:34:89:73:13:6e:5d:
                    c7:15:1b:c1:71:df:00:a3:de:68:f9:59:b2:8e:37:
                    d2:0b:97:99:70:66:44:ae:9f:04:c6:5b:11:3c:09:
                    49:b4:f7:f2:1b:a0:57:35:f7:2a:28:6d:5a:30:14:
                    32:5d:37:58:11:a5:4d:58:47:16:22:e2:59:df:45:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:41:AA:43:9C:47:89:6F:8B:21:28:59:21:22:5F:49:73:84:1A:1E
            X509v3 Authority Key Identifier:
                keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:13:d8:a2:c5:2c:2d:f9:d3:33:cc:cd:fe:3b:aa:0d:b1:
         49:62:c5:fe:2f:bd:69:02:ce:dc:fc:25:b8:49:fc:88:41:5a:
         39:4a:ea:26:55:c3:73:5c:a5:a3:68:c9:5f:18:be:22:fb:91:
         e0:5a:62:bc:26:64:c0:44:5d:81:7b:df:d7:29:69:67:42:eb:
         86:2e:32:99:05:3a:d7:21:1f:11:25:e4:b8:ec:6c:82:39:4e:
         fa:7f:40:be:77:cd:8c:56:d3:cb:50:ee:0c:43:70:d2:04:66:
         53:ba:b7:88:4c:e5:f5:f5:fb:a1:69:4f:a6:cb:89:21:be:51:
         5a:a1:4f:0e:32:87:64:17:b0:8d:26:e5:b5:19:80:c7:98:69:
         e0:f2:6e:df:f6:fc:3c:1f:7c:5e:9a:35:5d:7f:02:22:1c:f1:
         4a:d2:ec:ee:03:b8:48:59:76:d8:a1:e0:13:4d:e8:ce:ec:95:
         7e:42:13:07:22:0a:9f:9e:44:90:bd:b1:25:92:3c:ef:a5:c1:
         5d:c2:87:75:11:0d:14:23:64:50:61:3d:7d:1b:77:73:21:de:
         88:36:f6:86:91:e6:53:a7:fa:c8:47:6f:b1:6c:02:a7:03:9a:
         92:c0:0e:c6:dc:35:a1:a1:7c:5c:8f:1b:08:2c:cd:fe:e7:67:
         de:5e:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:24:26 2025 by rpki-client