This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
File:                     LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft (raw, json)
Hash identifier:          xFunLkuo4S1DedGZMV1d6zb6FebGuSOTCY5NLMY1kvY=
Subject key identifier:   BD:A4:65:66:47:69:A0:D6:B0:12:98:17:FA:56:C0:F4:AA:02:0F:46
Authority key identifier: 2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F
Certificate issuer:       /CN=A91FE75F/serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
Certificate serial:       067F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
Manifest number:          096F
Signing time:             Mon 22 Dec 2025 21:47:05 +0000
Manifest this update:     Mon 22 Dec 2025 21:47:05 +0000
Manifest next update:     Mon 29 Dec 2025 21:47:05 +0000
Files and hashes:         1: LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl (hash: MUW8LdV9roTlht8PzJX+ZJinO+n1hVjYhqnc1deqv7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1663 (0x67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=2DB6F01365B359E30AA8173F5D4A728C7E85EA5F
        Validity
            Not Before: Dec 22 21:47:05 2025 GMT
            Not After : Dec 29 21:47:05 2025 GMT
        Subject: CN=6949bc59-953d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:1f:a0:bc:c6:b6:0c:62:f1:b5:a9:e2:d2:
                    1b:ce:17:f9:ea:00:20:86:21:d6:b4:27:fc:9c:a6:
                    5e:d8:e4:12:17:17:50:6c:eb:e8:51:69:86:93:98:
                    99:44:f8:de:51:c5:61:31:b0:81:2e:c8:3d:d1:f9:
                    12:f1:d8:4f:1e:2c:11:9f:af:07:28:61:9d:c9:d1:
                    e3:a0:a7:ee:55:af:0c:95:ad:c3:42:df:23:a6:1e:
                    7b:f9:05:c0:ee:f5:5f:10:c9:31:ce:4f:57:af:4f:
                    b4:53:db:bb:f4:70:dd:c4:7e:38:f3:60:f0:aa:d8:
                    c6:d5:cb:33:2a:b0:67:1e:ec:05:4e:e4:79:8e:49:
                    67:fa:48:84:c2:94:4b:0c:25:c0:e4:d7:b1:9f:cd:
                    1e:f6:91:0a:5e:56:a8:b9:cf:2f:81:8d:d7:7d:67:
                    7d:b5:f5:05:84:00:0e:a7:39:c1:5a:55:f2:a6:45:
                    d2:4f:ce:dc:55:3b:f9:cb:02:b9:cd:7d:5b:5e:15:
                    23:c6:84:f4:5b:9c:50:ff:f8:c2:8e:dd:fd:27:cd:
                    f0:08:00:fa:c8:2a:f8:ff:9e:b9:ce:8a:84:4b:fe:
                    a3:82:49:0b:4a:0e:e9:e1:77:f0:dd:6a:a2:24:89:
                    50:f8:14:80:9d:19:07:01:7a:35:19:3c:ba:c5:ac:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A4:65:66:47:69:A0:D6:B0:12:98:17:FA:56:C0:F4:AA:02:0F:46
            X509v3 Authority Key Identifier:
                keyid:2D:B6:F0:13:65:B3:59:E3:0A:A8:17:3F:5D:4A:72:8C:7E:85:EA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LbbwE2WzWeMKqBc_XUpyjH6F6l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/LbbwE2WzWeMKqBc_XUpyjH6F6l8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:b2:72:fe:63:40:07:d6:42:af:fe:2b:dc:22:76:6d:31:
         cf:25:dd:f9:57:eb:99:28:5f:71:a8:ef:81:93:39:09:3c:a0:
         0b:a2:f2:5e:18:ee:62:bb:9f:c0:09:8f:fb:5f:63:40:9a:51:
         a7:e6:04:09:7d:17:00:9e:87:28:88:fc:e9:c0:c4:57:ee:59:
         53:88:b7:42:e3:c9:8a:16:ee:d2:4a:5f:e2:38:8c:fe:05:3d:
         7f:16:90:42:16:57:38:ff:35:59:60:78:12:e0:19:69:be:cb:
         de:9d:1e:0d:6d:6c:99:d8:f8:c5:d3:8b:07:50:8a:a4:0c:04:
         ad:3d:ea:32:d4:5c:c5:16:62:1b:30:0f:f9:0b:1c:80:d1:d7:
         a8:78:58:be:54:5d:1d:50:5b:e5:6c:ac:18:c2:59:13:4d:2b:
         0a:92:d7:c9:7d:7e:bb:fc:b9:35:cb:9d:bf:61:7b:24:0e:85:
         86:4b:92:97:c6:a7:09:4d:82:63:60:d1:e5:24:5e:d6:28:00:
         6c:51:cd:f6:16:7d:58:f9:a6:8f:98:35:b5:83:a3:1a:db:ed:
         58:72:80:78:41:f6:42:4f:84:47:29:c8:79:9e:f7:ce:be:30:
         d6:29:f2:14:fd:63:34:25:ae:ac:e1:65:c4:ae:5a:39:be:d0:
         06:2e:11:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3NUYxMTAvBgNVBAUTKDJEQjZGMDEzNjVCMzU5RTMwQUE4MTczRjVENEE3MjhD
N0U4NUVBNUYwHhcNMjUxMjIyMjE0NzA1WhcNMjUxMjI5MjE0NzA1WjAYMRYwFAYD
VQQDDA02OTQ5YmM1OS05NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxt8foLzGtgxi8bWp4tIbzhf56gAghiHWtCf8nKZe2OQSFxdQbOvoUWmGk5iZ
RPjeUcVhMbCBLsg90fkS8dhPHiwRn68HKGGdydHjoKfuVa8Mla3DQt8jph57+QXA
7vVfEMkxzk9Xr0+0U9u79HDdxH4482DwqtjG1cszKrBnHuwFTuR5jkln+kiEwpRL
DCXA5Nexn80e9pEKXlaouc8vgY3XfWd9tfUFhAAOpznBWlXypkXST87cVTv5ywK5
zX1bXhUjxoT0W5xQ//jCjt39J83wCAD6yCr4/565zoqES/6jgkkLSg7p4Xfw3Wqi
JIlQ+BSAnRkHAXo1GTy6xazLIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2kZWZH
aaDWsBKYF/pWwPSqAg9GMB8GA1UdIwQYMBaAFC228BNls1njCqgXP11Kcox+hepf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTc1Ri9BQjlFQjhDQUE5
RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldlTUtxQmNfWFVweWpINkY2
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xiYndFMld6V2VNS3FCY19YVXB5akg2RjZsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTc1Ri9BQjlFQjhDQUE5RjUxMUVCOEE0OTIyNTRDNEY5QUUwMi9MYmJ3RTJXeldl
TUtxQmNfWFVweWpINkY2bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTDrJy/mNAB9ZCr/4r3CJ2bTHPJd35V+uZKF9xqO+BkzkJPKALovJe
GO5iu5/ACY/7X2NAmlGn5gQJfRcAnocoiPzpwMRX7llTiLdC48mKFu7SSl/iOIz+
BT1/FpBCFlc4/zVZYHgS4BlpvsvenR4NbWyZ2PjF04sHUIqkDAStPeoy1FzFFmIb
MA/5CxyA0deoeFi+VF0dUFvlbKwYwlkTTSsKktfJfX67/Lk1y52/YXskDoWGS5KX
xqcJTYJjYNHlJF7WKABsUc32Fn1Y+aaPmDW1g6Ma2+1YcoB4QfZCT4RHKch5nvfO
vjDWKfIU/WM0Ja6s4WXErlo5vtAGLhGh
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:07 2025 by rpki-client