This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          u4z1Kx2OuBfX5lcSzQFwTnRK0IXZVsNn2iC/iHdBRcA=
Subject key identifier:   8D:AA:6A:E6:FB:E3:B9:2E:6B:32:49:8F:8A:B7:9E:FB:CA:2D:C2:FA
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       25C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          255D
Signing time:             Thu 18 Dec 2025 15:38:31 +0000
Manifest this update:     Thu 18 Dec 2025 15:38:31 +0000
Manifest next update:     Thu 25 Dec 2025 15:38:31 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: 1XD9pcv/UVDQYttap4zQo+WYIFzKoVBJ8+0mY4z/nxo=)
                          2: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          3: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          4: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          5: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          6: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          7: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          8: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          9: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)
                          10: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: 62+I0JCsjnrf/+FC3fWOyVd0FAIFAMqGALGtyUh/ptw=)
                          11: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=)
                          14: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 15:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9670 (0x25c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Dec 18 15:38:31 2025 GMT
            Not After : Dec 25 15:38:31 2025 GMT
        Subject: CN=69441ff7-0504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:d5:16:49:52:d2:78:ad:01:ca:2a:aa:75:
                    16:b1:80:e3:bb:e4:86:b1:5f:2c:dd:3f:48:8a:e5:
                    13:54:57:c5:bc:d8:b7:50:20:f8:a0:a1:72:26:e1:
                    ba:c2:14:47:87:4c:4d:c5:0a:a5:01:36:a9:ff:82:
                    fb:16:23:40:13:0d:f2:24:63:b1:08:b8:c1:37:c8:
                    09:d4:9c:56:35:6f:c7:90:e1:79:03:c5:ae:99:d0:
                    c5:86:d9:50:4e:05:3a:24:28:0d:bc:61:40:c5:e1:
                    21:b3:0b:c8:34:89:a5:40:aa:8f:ff:ed:a3:aa:8b:
                    79:3c:94:3d:76:88:bb:f8:02:c9:7a:d2:ca:08:f0:
                    2b:fe:38:c4:21:d7:30:31:96:a8:22:34:5e:02:ca:
                    18:b5:e6:b9:5d:a3:2d:a2:24:1a:5a:46:f5:12:e8:
                    ea:ca:94:b3:75:de:bf:81:a1:52:62:84:79:e3:40:
                    88:e1:ad:f7:d3:71:ba:e8:1e:32:e8:bd:91:3c:f8:
                    30:0f:81:25:c2:9a:9e:9b:3a:df:9c:88:07:84:3a:
                    0b:61:a6:b2:fc:a9:c6:4b:73:db:55:fa:82:e8:6d:
                    fe:37:ca:1a:98:eb:97:4e:ce:33:3f:98:6a:c9:50:
                    c5:40:01:8b:d0:b4:2d:46:e3:4d:7b:49:a8:cd:a6:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AA:6A:E6:FB:E3:B9:2E:6B:32:49:8F:8A:B7:9E:FB:CA:2D:C2:FA
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:eb:26:8b:c2:05:6a:8f:31:78:04:40:12:95:f5:08:f6:2c:
         26:84:ef:01:9e:d5:3d:a9:94:9b:4c:10:51:74:40:01:e2:54:
         a3:3a:0a:08:a4:d4:eb:0e:20:e5:6b:99:12:1f:c3:f3:9a:28:
         92:bd:ca:2b:64:36:8a:df:6e:f5:2b:12:0c:a6:e0:11:ae:33:
         26:83:62:23:51:21:1c:cd:3a:c5:99:91:e4:c4:08:c0:80:dc:
         46:f3:22:d3:57:7b:e5:02:fa:07:5b:4f:4b:97:c4:99:b6:ba:
         48:03:eb:f9:6b:20:37:f5:bf:5b:8b:73:83:af:84:db:73:80:
         c7:40:48:15:5e:3f:5a:54:3d:af:d2:28:6f:06:ad:21:6d:75:
         b2:a2:81:20:c1:d6:d2:84:7a:8f:43:dd:83:fd:b1:86:fd:2d:
         6f:36:6f:8b:c9:b8:a2:91:b5:80:f0:24:5e:19:98:1f:c0:3f:
         00:a3:c3:3d:49:72:ef:79:fd:7b:5c:47:6a:38:dc:83:7e:a4:
         fd:27:77:85:f6:26:eb:c4:b1:24:0c:e8:98:b8:b7:86:55:ba:
         bf:86:b6:a1:d2:7e:8a:2b:5f:dd:17:3a:16:43:a5:0a:bb:3d:
         21:2f:a9:9f:91:d4:05:98:50:7b:b2:97:8b:5d:62:27:21:4d:
         17:ca:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:17 2025 by rpki-client