This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
File:                     l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json)
Hash identifier:          AYIUZG5onhNlXQAowzuDsXuoG+FlQ2kez4Vm6osJjjQ=
Subject key identifier:   EA:55:21:EA:39:6A:8E:DD:42:37:84:6D:47:4D:C0:E5:A2:22:B6:28
Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B
Certificate issuer:       /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
Manifest number:          0240
Signing time:             Fri 19 Dec 2025 01:21:08 +0000
Manifest this update:     Fri 19 Dec 2025 01:21:07 +0000
Manifest next update:     Fri 26 Dec 2025 01:21:07 +0000
Files and hashes:         1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: l9Bmvwu7MJMKwgV0j+Jd4CbF4vO5XlC9QQ5afZkQ25A=)
                          2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: eEPdVRPjMFChXAnZ+AFBDP2qN9nX/mupKkDoS8rA9tY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl
                          rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B
        Validity
            Not Before: Dec 19 01:21:07 2025 GMT
            Not After : Dec 26 01:21:07 2025 GMT
        Subject: CN=6944a884-eb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:78:ea:34:a1:81:06:5b:45:92:47:11:96:
                    d2:06:7d:d2:cb:b8:ad:2c:ba:da:8b:e9:24:e4:a1:
                    4c:df:38:99:73:cb:65:0f:3b:89:67:d2:be:5d:39:
                    6c:e3:a2:e5:79:ab:7c:37:4e:f9:46:d6:6e:4a:7d:
                    57:b8:22:1c:80:4e:3b:db:dd:06:40:70:d2:ab:77:
                    4d:6a:fc:34:aa:1d:51:1f:e3:95:c0:0a:52:cc:18:
                    cc:03:3a:37:4a:08:40:4c:a5:a6:63:f6:ef:2e:61:
                    c3:b0:cc:cf:21:5c:4f:55:77:74:d2:a3:68:3c:0c:
                    de:a0:2c:20:5a:00:dc:96:18:7d:bb:ac:b3:72:3a:
                    2e:46:45:1d:2f:b5:db:20:87:0d:92:f5:a8:6a:f7:
                    93:0c:7a:61:4d:be:63:64:ab:86:49:75:fb:60:26:
                    c7:c1:ed:b8:b1:1f:5b:76:a2:72:b4:d0:d1:90:38:
                    26:f2:a3:76:26:79:ed:a5:6b:92:d2:a4:0c:71:f4:
                    cf:70:b6:f8:3f:37:df:d5:e5:db:30:e5:fe:b5:72:
                    b0:54:8f:76:64:ed:de:03:a6:24:bc:47:53:db:0f:
                    79:49:1a:22:c1:58:f6:da:16:0d:32:02:2b:44:67:
                    6d:85:44:e6:14:15:5e:ff:7f:27:98:dd:40:a3:98:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:21:EA:39:6A:8E:DD:42:37:84:6D:47:4D:C0:E5:A2:22:B6:28
            X509v3 Authority Key Identifier:
                keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:16:94:da:c4:73:70:a2:f5:e8:44:a4:62:ab:3c:04:13:
         d7:f5:00:b2:23:73:95:7a:7e:30:3d:19:00:01:38:1b:f1:0e:
         18:c4:e8:db:a6:07:59:94:f8:ac:ab:e8:03:2f:d3:90:90:db:
         88:9e:43:a0:26:b2:b9:de:0b:86:bb:6e:8d:b0:46:1f:32:df:
         66:50:80:74:ee:8b:58:4b:6a:1c:fe:6b:28:29:7d:e6:20:32:
         27:e9:0f:0f:22:53:8c:dd:19:08:01:40:f2:6b:d8:97:d4:09:
         c1:a0:ee:ef:4a:30:72:58:ef:f1:b0:a9:f0:c6:fc:e8:e6:37:
         50:c3:c1:35:59:0c:60:1e:38:99:f3:6b:ad:89:91:91:f6:b1:
         80:3c:e7:6b:6d:23:99:ba:74:cf:09:84:6a:41:c3:9c:cf:5c:
         82:29:c8:b6:a1:09:43:0f:45:6b:c3:db:74:71:74:3f:db:24:
         18:fe:21:e1:f1:c7:8c:eb:9b:60:60:b1:7e:42:40:81:d1:30:
         55:f9:3a:b4:bb:df:7d:0e:18:4e:42:76:7a:56:b3:c9:c0:17:
         e3:aa:5b:ba:c0:31:0c:58:1b:40:fe:70:fa:75:39:62:15:e3:
         1f:e5:e0:0e:a8:7e:3e:88:82:a4:c5:d2:d6:fd:9c:8e:b5:77:
         a4:aa:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:12 2025 by rpki-client