This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
File:                     Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json)
Hash identifier:          ZTKlV7e/66E6BGlWj+SInpOuVqYmkWfE4EMCmRBAQTE=
Subject key identifier:   70:0E:AE:AA:1F:DE:60:46:48:0D:DE:88:08:E7:0C:28:47:AD:57:53
Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1
Certificate issuer:       /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
Certificate serial:       356C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
Manifest number:          3531
Signing time:             Thu 18 Dec 2025 14:15:35 +0000
Manifest this update:     Thu 18 Dec 2025 14:15:34 +0000
Manifest next update:     Thu 25 Dec 2025 14:15:34 +0000
Files and hashes:         1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: i9hF2+JX4lNtMicdI8aeIuRZIrnz/xTD51SULYTyXEg=)
                          2: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=)
                          3: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl
                          rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 14:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13676 (0x356c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1
        Validity
            Not Before: Dec 18 14:15:34 2025 GMT
            Not After : Dec 25 14:15:34 2025 GMT
        Subject: CN=69440c87-f800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:68:59:59:fd:76:7b:e4:2a:0e:f5:4c:50:
                    79:c0:a7:ae:f9:13:23:c8:2f:b6:d1:2e:03:e3:5b:
                    c7:f5:75:b2:3d:68:f9:b6:30:f8:36:71:35:eb:bb:
                    70:62:d7:da:cc:27:ca:dc:bc:03:5b:6c:bb:d9:16:
                    c3:91:43:b3:33:d2:dd:c7:8a:fd:c2:18:02:17:e1:
                    e9:cf:17:da:b0:3b:d4:49:46:ed:74:b3:64:ab:a0:
                    7d:eb:a5:12:2a:4a:23:5a:73:41:00:b6:3e:8d:f2:
                    e3:3e:88:10:8e:55:53:4d:d3:07:0e:13:d6:43:11:
                    05:cb:4c:ea:6b:80:7e:dc:3a:5d:bc:e8:a7:54:4e:
                    9e:ce:3e:22:46:4a:dc:7d:3e:bd:b7:f9:80:8e:e6:
                    21:c4:44:3d:12:2a:19:48:6f:4b:7c:6d:fe:c4:f7:
                    2a:ca:ab:fa:88:fa:22:c0:0f:ee:16:88:9d:44:d6:
                    5c:5a:7c:47:b3:02:65:5a:7d:1a:20:a8:fc:be:4a:
                    43:ae:df:2c:cf:79:a7:39:72:dd:1e:5a:d8:6a:72:
                    52:12:d2:46:0a:a6:69:0d:6b:1e:9b:a9:ca:2b:23:
                    47:39:4a:30:a5:7c:e7:ae:8a:cf:01:4b:b6:02:b1:
                    50:e6:5a:9c:55:e3:ac:ec:47:9b:b8:1e:2e:93:a3:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:AE:AA:1F:DE:60:46:48:0D:DE:88:08:E7:0C:28:47:AD:57:53
            X509v3 Authority Key Identifier:
                keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3a:f1:94:2b:b9:c6:44:b3:8d:8a:11:35:94:2c:50:31:b5:
         bf:e2:d4:e4:53:18:3f:2c:17:45:c2:5b:f0:47:de:a8:3b:45:
         35:76:76:ba:4a:f2:ff:86:cb:73:6c:23:1e:51:60:13:c5:a3:
         62:1f:01:6d:02:53:08:de:2f:8a:32:85:5e:a4:9f:a5:67:3e:
         ab:25:29:3a:7b:24:66:dd:77:21:d9:6e:81:a8:2d:0a:d1:40:
         e6:78:c7:f6:ab:59:55:ee:50:e2:0a:c4:b9:0d:ea:fa:23:cb:
         c0:5f:1c:1c:71:ab:6e:37:09:dd:ad:02:64:36:9a:5d:9b:88:
         bf:43:22:11:1f:61:d7:5c:a5:a6:fa:5c:7e:6b:ee:29:64:37:
         d8:58:9f:ec:04:2b:d7:0e:6d:7d:b8:a0:cd:b0:d0:da:33:a7:
         d2:9d:11:f7:32:99:ee:b4:25:14:98:64:f8:7e:e7:67:d7:8f:
         fd:a1:e6:1c:0b:71:1c:0c:c0:17:c9:44:cd:cd:00:8a:eb:b5:
         01:21:5f:4c:83:98:30:aa:d1:6f:8b:8f:46:13:62:54:43:96:
         fb:81:68:c2:5e:f9:3f:eb:2c:f3:0f:91:11:d3:42:a1:27:40:
         e2:e8:47:91:ff:a5:09:15:c3:84:ac:43:4c:15:2d:ce:c4:e8:
         33:45:1c:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC
Mjg3MTI2QTEwHhcNMjUxMjE4MTQxNTM0WhcNMjUxMjI1MTQxNTM0WjAYMRYwFAYD
VQQDDA02OTQ0MGM4Ny1mODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4GtoWVn9dnvkKg71TFB5wKeu+RMjyC+20S4D41vH9XWyPWj5tjD4NnE167tw
YtfazCfK3LwDW2y72RbDkUOzM9Ldx4r9whgCF+HpzxfasDvUSUbtdLNkq6B966US
KkojWnNBALY+jfLjPogQjlVTTdMHDhPWQxEFy0zqa4B+3DpdvOinVE6ezj4iRkrc
fT69t/mAjuYhxEQ9EioZSG9LfG3+xPcqyqv6iPoiwA/uFoidRNZcWnxHswJlWn0a
IKj8vkpDrt8sz3mnOXLdHlrYanJSEtJGCqZpDWsem6nKKyNHOUowpXznrorPAUu2
ArFQ5lqcVeOs7EebuB4uk6NsNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAOrqof
3mBGSA3eiAjnDChHrVdTMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE
NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4
RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA0OvGUK7nGRLONihE1lCxQMbW/4tTkUxg/LBdFwlvwR96oO0U1dna6
SvL/hstzbCMeUWATxaNiHwFtAlMI3i+KMoVepJ+lZz6rJSk6eyRm3Xch2W6BqC0K
0UDmeMf2q1lV7lDiCsS5Der6I8vAXxwccatuNwndrQJkNppdm4i/QyIRH2HXXKWm
+lx+a+4pZDfYWJ/sBCvXDm19uKDNsNDaM6fSnRH3MpnutCUUmGT4fudn14/9oeYc
C3EcDMAXyUTNzQCK67UBIV9Mg5gwqtFvi49GE2JUQ5b7gWjCXvk/6yzzD5ER00Kh
J0Di6EeR/6UJFcOErENMFS3OxOgzRRyG
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:59 2025 by rpki-client