This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
File:                     LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft (raw, json)
Hash identifier:          LCfQCT53XBKw+8kqkQOZb24SEpUCY4ChhU4vdvkERAE=
Subject key identifier:   1E:59:AB:5E:FD:4D:4A:6E:7A:91:10:0D:A1:59:9C:23:7A:AB:65:BD
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
Manifest number:          069D
Signing time:             Thu 18 Dec 2025 21:48:27 +0000
Manifest this update:     Thu 18 Dec 2025 21:48:26 +0000
Manifest next update:     Thu 25 Dec 2025 21:48:26 +0000
Files and hashes:         1: LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl (hash: fkKRtU317Pn7+JrxFaTP5DbyXXE/8Kba+VMbbxFNCCA=)
                          2: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (hash: vh0GgYCDzl5MpyGfL9qB9BZe6rjSGvbzU8V9PATHokg=)
                          3: 8CBE17540BCF11EF80BE8E0CC4F9AE02.roa (hash: GBfQ8G2LgiRk7mNMod65ctHAM+9Xqf2dlYgMPWmItHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 21:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: Dec 18 21:48:26 2025 GMT
            Not After : Dec 25 21:48:26 2025 GMT
        Subject: CN=694476ab-bcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:34:ae:bb:d9:a6:62:e8:79:76:7d:3d:52:
                    86:55:57:87:fa:35:d8:dd:01:a3:bb:3b:6e:19:43:
                    dd:22:7a:39:59:3f:91:33:28:83:8f:74:af:e3:c9:
                    7f:9e:7f:d7:bf:a9:af:5e:f1:fd:2a:c6:7b:d1:ae:
                    5c:02:81:15:f7:4a:fd:d7:6c:60:da:f9:5f:a5:46:
                    a1:da:28:d5:8c:a3:11:ef:8a:55:37:c9:ad:9b:20:
                    43:0d:0b:06:3c:6c:94:ff:31:16:41:4b:c3:7f:68:
                    be:f9:d4:cf:3e:d9:c5:14:0b:dc:b1:e0:c6:55:d0:
                    0d:9c:a6:6d:ec:06:25:07:38:57:47:5b:fd:43:09:
                    3c:d2:4d:60:f9:00:55:31:f9:e1:2e:40:41:74:4a:
                    98:31:e8:69:a8:33:a3:9a:d4:41:64:5b:16:ad:4d:
                    d6:e0:17:3f:33:17:21:f1:ee:bc:ad:bc:fa:00:bd:
                    1d:cb:37:51:e1:12:4f:48:eb:ba:79:09:b7:3d:ac:
                    7d:93:f7:53:3e:91:e1:19:8c:3a:98:f7:b7:a0:7a:
                    be:59:87:86:0d:f8:f0:00:97:e9:4b:94:8b:6a:24:
                    f3:1f:22:9f:9a:50:d7:03:a5:92:77:17:ef:06:96:
                    0f:dd:4f:ef:49:a2:9f:8f:bd:5d:9f:df:0f:ce:c1:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:59:AB:5E:FD:4D:4A:6E:7A:91:10:0D:A1:59:9C:23:7A:AB:65:BD
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e4:f0:89:9f:b7:ad:3a:2d:f3:fc:db:5b:17:17:50:5a:ee:
         64:fa:df:e1:09:8f:ef:29:cc:3f:18:15:d6:93:a1:d2:04:01:
         31:31:0b:a6:23:e5:1a:fd:dc:47:ef:09:7f:d9:af:a5:26:aa:
         1e:47:8f:d8:a2:ad:fd:2f:2f:f0:11:39:3a:6e:79:fd:d4:c6:
         34:49:bd:3a:9c:2d:81:ec:6b:ac:a0:04:c1:28:8f:df:0d:f7:
         21:52:90:ac:de:52:cf:2d:a9:71:ac:5d:ec:65:84:c0:8a:0f:
         ce:0a:14:7f:0b:3d:9d:59:ec:ee:27:20:3f:01:e0:4c:12:8f:
         06:f4:07:86:29:43:ff:83:1a:39:f6:70:67:e5:09:38:3a:18:
         c1:ca:98:ba:9b:a8:42:ab:4a:70:97:8f:e5:66:17:53:5d:97:
         be:49:4b:28:99:4d:a3:42:17:e3:5f:b7:07:eb:42:64:9e:48:
         2a:cf:ab:05:cd:3b:8d:80:39:01:6f:b4:8e:54:10:56:22:20:
         29:e5:c5:d2:5c:c3:ea:c6:0d:cf:3b:2f:e5:6c:73:7d:ff:35:
         9c:0d:53:dc:4c:92:18:66:a9:a2:08:2b:73:4f:b0:e6:66:74:
         29:e6:7b:f7:d5:95:4c:da:1a:5c:01:dc:3a:91:5c:2f:80:19:
         1e:94:4f:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx
QjEwOURBM0MwHhcNMjUxMjE4MjE0ODI2WhcNMjUxMjI1MjE0ODI2WjAYMRYwFAYD
VQQDDA02OTQ0NzZhYi1iY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoDA0rrvZpmLoeXZ9PVKGVVeH+jXY3QGjuztuGUPdIno5WT+RMyiDj3Sv48l/
nn/Xv6mvXvH9KsZ70a5cAoEV90r912xg2vlfpUah2ijVjKMR74pVN8mtmyBDDQsG
PGyU/zEWQUvDf2i++dTPPtnFFAvcseDGVdANnKZt7AYlBzhXR1v9Qwk80k1g+QBV
MfnhLkBBdEqYMehpqDOjmtRBZFsWrU3W4Bc/Mxch8e68rbz6AL0dyzdR4RJPSOu6
eQm3Pax9k/dTPpHhGYw6mPe3oHq+WYeGDfjwAJfpS5SLaiTzHyKfmlDXA6WSdxfv
BpYP3U/vSaKfj71dn98PzsEPqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5Zq179
TUpuepEQDaFZnCN6q2W9MB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3
NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDNFQi9GMzYyMkU3NDk3NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3
bEpKb2tLaFJKT0liRUoyancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC45PCJn7etOi3z/NtbFxdQWu5k+t/hCY/vKcw/GBXWk6HSBAExMQum
I+Ua/dxH7wl/2a+lJqoeR4/Yoq39Ly/wETk6bnn91MY0Sb06nC2B7GusoATBKI/f
DfchUpCs3lLPLalxrF3sZYTAig/OChR/Cz2dWezuJyA/AeBMEo8G9AeGKUP/gxo5
9nBn5Qk4OhjBypi6m6hCq0pwl4/lZhdTXZe+SUsomU2jQhfjX7cH60Jknkgqz6sF
zTuNgDkBb7SOVBBWIiAp5cXSXMPqxg3POy/lbHN9/zWcDVPcTJIYZqmiCCtzT7Dm
ZnQp5nv31ZVM2hpcAdw6kVwvgBkelE/u
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:00 2025 by rpki-client