This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          eM5Xdy5NbWWPL/XFDtHxYmADZOUsjTvW4+L6By893bg=
Subject key identifier:   40:56:F4:8B:CD:0B:2F:66:50:75:C0:2F:CA:B4:46:ED:2A:0C:0D:DF
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       07D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          0766
Signing time:             Thu 04 Dec 2025 20:52:59 +0000
Manifest this update:     Thu 04 Dec 2025 20:52:58 +0000
Manifest next update:     Thu 11 Dec 2025 20:52:58 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: f/UwPfwspKV7aNaGX8UJUkkCxaSIfUC0jxERB4TPFw4=)
                          2: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: rJtIFizn/sQTm217EeawbIANI0Uxj/WGOrOl2uJ5f2c=)
                          3: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: jo8N5VR8/QXYCNwECV0F0gpGSCFYJ9bVaNaPjx3t5DQ=)
                          4: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6XffBxe23SAqk8mZhlvHVbw6Cbg+lycUE8a5p6bfPGE=)
                          5: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: l/lqNDUiyb5NZKhLLNIq7WZOuz2szj0dEY8tsSYQa68=)
                          6: 15434774090211EEA1C06509C4F9AE02.roa (hash: dzvzv1MDGjHRHVHiGPmML1F3imLu7s8q7tD+NO4TDds=)
                          7: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: rSNBIXkV3cHTqpqHK191W8K7lRyWQtgcWXUGkAW+h84=)
                          8: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hJIP3vaCxaXSerzNVIz2IckZKnqrBprCPLaUe55Jaxk=)
                          9: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: JzLTfh+GciE2ubQPVVJG4EzQllt5nNHJ0s9t7GZNzHw=)
                          10: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: InXUcvdRUa1rt2SL0tMM3Hgfi86gvB0qmAGoxlh6kYc=)
                          11: 168FD534090211EEA1C06509C4F9AE02.roa (hash: 56ghv9vhYovbphtcZh0pFu9WFqM/EpFjTMqOzB0oI+U=)
                          12: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: psfjW3LbfsqjUORRddKlOh9lmY1USdZrWQkZoOrVeIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 20:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2000 (0x7d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Dec  4 20:52:58 2025 GMT
            Not After : Dec 11 20:52:58 2025 GMT
        Subject: CN=6931f4ab-1d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:84:d9:b9:39:bf:01:8a:cc:ca:09:35:1e:
                    55:66:7b:7f:12:18:d8:72:15:1a:80:af:4e:8f:24:
                    59:f1:c7:9a:8a:a0:2e:9d:6a:cf:fa:5b:d0:a8:68:
                    96:a4:5d:ea:bb:c1:d1:33:15:98:67:7d:2e:ee:a9:
                    18:9c:90:7b:5b:06:d8:25:e9:6d:69:de:b8:b8:17:
                    e9:53:4c:9e:45:3f:5e:60:d5:de:aa:10:0d:6e:2e:
                    85:a8:24:4c:28:33:f6:da:d9:f7:c6:ab:93:a4:db:
                    8e:c8:7e:52:a6:67:03:f7:cb:e5:6b:c3:35:8e:4f:
                    53:2b:77:bc:4a:b2:63:51:4f:ca:fc:5d:6c:f9:3d:
                    9c:72:c2:7b:a8:b1:e2:7f:47:19:f8:98:99:0a:c9:
                    3c:6c:d8:12:6c:f3:1b:d7:16:c2:ca:6a:54:b4:4a:
                    3d:e3:c6:bd:f0:29:28:da:f2:ff:e3:73:3a:08:6e:
                    26:ee:05:3d:4f:a9:c3:71:42:fb:79:3d:d4:a1:a7:
                    1b:f8:b3:65:6f:7a:a1:23:44:b8:2f:2f:17:cb:7c:
                    53:2e:ac:16:a1:93:be:77:ea:72:40:af:c5:a4:75:
                    a6:f4:b9:81:3a:b0:4c:06:52:71:38:72:b1:4c:b1:
                    f4:43:09:4b:bc:9c:7e:91:07:d2:d3:f3:a2:46:80:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:F4:8B:CD:0B:2F:66:50:75:C0:2F:CA:B4:46:ED:2A:0C:0D:DF
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:2b:9e:de:f7:ec:15:c9:25:8b:65:38:03:6f:5e:7f:a9:
         8d:85:6a:f2:79:5b:23:6b:ca:dc:c1:5c:d1:ae:b1:5a:c4:b7:
         e0:57:27:4b:41:ac:bf:4c:21:a6:4c:7f:0d:00:09:9d:db:5f:
         b3:6e:d2:8c:7c:d4:96:07:54:f8:07:92:52:50:d0:11:73:38:
         23:2d:70:3a:2d:b8:70:41:fc:fb:0b:ef:4a:1d:5b:16:07:57:
         d1:8f:d4:f8:54:dd:c9:aa:5d:fd:a9:d5:02:73:87:f6:29:ac:
         af:81:b0:6c:2c:87:21:2f:c8:f6:05:c9:68:73:36:6a:22:5e:
         58:16:e7:92:21:34:42:cc:9a:ea:a4:b3:43:92:2f:1f:db:81:
         a9:f4:06:20:e9:3f:e4:34:3c:49:a7:4b:f7:06:88:b1:2c:3e:
         b5:3a:eb:2a:6c:a7:c2:7b:77:50:ab:2a:c3:5e:74:07:56:37:
         91:07:04:44:94:54:35:75:48:5c:47:45:29:10:f9:c1:f0:4c:
         d2:ee:14:bb:47:a1:92:dc:93:e3:c3:46:33:dc:ca:b3:18:69:
         17:5a:08:13:a7:1c:da:3d:1f:79:20:3f:dd:d4:c2:6e:21:2f:
         b8:33:b0:96:aa:60:18:e4:e0:b2:e1:12:ef:ee:c0:92:f1:fd:
         c9:dd:5f:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE
RTA3MkI3RjMwHhcNMjUxMjA0MjA1MjU4WhcNMjUxMjExMjA1MjU4WjAYMRYwFAYD
VQQDEw02OTMxZjRhYi0xZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/6E2bk5vwGKzMoJNR5VZnt/EhjYchUagK9OjyRZ8ceaiqAunWrP+lvQqGiW
pF3qu8HRMxWYZ30u7qkYnJB7WwbYJeltad64uBfpU0yeRT9eYNXeqhANbi6FqCRM
KDP22tn3xquTpNuOyH5SpmcD98vla8M1jk9TK3e8SrJjUU/K/F1s+T2ccsJ7qLHi
f0cZ+JiZCsk8bNgSbPMb1xbCympUtEo948a98Cko2vL/43M6CG4m7gU9T6nDcUL7
eT3Uoacb+LNlb3qhI0S4Ly8Xy3xTLqwWoZO+d+pyQK/FpHWm9LmBOrBMBlJxOHKx
TLH0QwlLvJx+kQfS0/OiRoAgmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBW9IvN
Cy9mUHXAL8q0Ru0qDA3fMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REIzNy80REU2MzVFMDc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01
UzlIMkRjdTkyNV9lQnl0X00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADnSue3vfsFckli2U4A29ef6mNhWryeVsja8rcwVzRrrFaxLfgVydL
Qay/TCGmTH8NAAmd21+zbtKMfNSWB1T4B5JSUNARczgjLXA6LbhwQfz7C+9KHVsW
B1fRj9T4VN3Jql39qdUCc4f2KayvgbBsLIchL8j2BcloczZqIl5YFueSITRCzJrq
pLNDki8f24Gp9AYg6T/kNDxJp0v3BoixLD61OusqbKfCe3dQqyrDXnQHVjeRBwRE
lFQ1dUhcR0UpEPnB8EzS7hS7R6GS3JPjw0Yz3MqzGGkXWggTpxzaPR95ID/d1MJu
IS+4M7CWqmAY5OCy4RLv7sCS8f3J3V8d
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:00 2025 by rpki-client