This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
File:                     myLG633MM4A245rlSn0qAlkDsRM.mft (raw, json)
Hash identifier:          KVhUHzPsAEodNscSkS7CgtkoJpfiM4+FQOituB320qY=
Subject key identifier:   2D:30:E0:59:85:70:D2:CC:EE:81:43:27:67:42:4A:9A:ED:1D:AD:AF
Authority key identifier: 9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13
Certificate issuer:       /CN=A91559AC/serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
Manifest number:          0B6D
Signing time:             Thu 18 Dec 2025 19:03:14 +0000
Manifest this update:     Thu 18 Dec 2025 19:03:14 +0000
Manifest next update:     Thu 25 Dec 2025 19:03:14 +0000
Files and hashes:         1: myLG633MM4A245rlSn0qAlkDsRM.crl (hash: 6OVb5rDz9oLF5qCU/+oMpFAXHY4H413j8dvkCU/uY3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl
                          rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Dec 2025 19:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91559AC, serialNumber=9B22C6EB7DCC338036E39AE54A7D2A025903B113
        Validity
            Not Before: Dec 18 19:03:14 2025 GMT
            Not After : Dec 25 19:03:14 2025 GMT
        Subject: CN=69444ff2-0637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:40:34:c0:67:9f:9a:04:38:9e:5e:5f:7e:
                    bf:b8:50:c8:02:ef:04:70:87:ff:be:c3:85:92:6a:
                    b5:22:b5:66:94:f4:f3:c7:4a:2b:d2:c0:73:db:82:
                    db:4e:35:f5:26:4e:ae:15:a3:39:a9:1d:bd:82:e3:
                    b4:61:f9:99:07:8c:0b:09:12:89:f8:3d:3b:67:0e:
                    6a:4f:89:bc:08:90:95:37:61:fe:46:df:b5:d1:cd:
                    91:2e:38:71:5a:ef:fc:20:f4:e5:a2:35:4d:fa:67:
                    7e:18:8b:16:20:1c:c0:e4:91:43:85:e3:49:a7:73:
                    29:c4:2f:c3:0b:a2:36:56:54:27:ac:59:c1:65:cf:
                    de:a8:97:e3:dd:52:a9:da:fe:a1:a3:6c:c1:bd:59:
                    63:13:e9:d7:be:99:c8:1a:1a:33:32:77:24:44:93:
                    4a:e7:b7:7a:b7:32:09:79:9f:74:c4:81:d7:57:5a:
                    30:7b:85:4a:53:3a:2c:5f:d7:ab:ac:6e:b7:9e:58:
                    de:a5:11:44:fd:4f:6b:fe:cf:bd:ec:d1:34:06:36:
                    4b:3f:63:02:63:f9:86:07:92:9f:cf:69:85:74:bb:
                    ad:ab:7e:fa:66:00:91:62:96:3d:d2:a7:9b:59:cb:
                    b2:7d:00:3b:7b:e5:78:b9:06:88:bc:2f:4c:b6:47:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:E0:59:85:70:D2:CC:EE:81:43:27:67:42:4A:9A:ED:1D:AD:AF
            X509v3 Authority Key Identifier:
                keyid:9B:22:C6:EB:7D:CC:33:80:36:E3:9A:E5:4A:7D:2A:02:59:03:B1:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myLG633MM4A245rlSn0qAlkDsRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/myLG633MM4A245rlSn0qAlkDsRM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:60:df:fd:1b:77:15:86:52:d6:2c:d2:c5:1d:12:6b:e2:
         15:44:97:ae:5c:91:7e:9d:bb:4a:49:8c:b8:b7:92:ca:ec:59:
         c6:2d:2f:b4:f5:df:9b:31:6e:ac:d8:d8:44:97:8d:c9:43:46:
         d4:02:46:0e:93:8c:dd:5e:70:e2:08:c9:ee:09:d0:77:12:62:
         26:d5:47:60:ed:eb:b7:91:4d:e8:83:b3:73:c2:37:65:c6:17:
         61:be:c4:c6:92:54:3b:63:19:38:05:75:17:a8:04:46:28:fe:
         1c:53:dd:1e:84:41:f6:eb:0f:f4:dd:a7:a4:c0:f0:ea:cd:fc:
         0f:fa:0e:63:a4:13:8b:7c:ea:ce:28:ff:e0:8a:5f:b2:63:b1:
         d4:01:2d:10:9e:4a:21:3f:6d:9f:3e:e9:d5:3c:2a:5d:75:5f:
         11:33:a9:ab:d1:5b:8f:cb:35:c1:e2:af:c7:5b:1c:f4:f9:f8:
         9b:ce:d6:6b:90:57:83:ca:1a:b0:e9:b0:33:38:2f:b5:10:15:
         76:b8:26:ea:3f:f9:e5:5b:3a:7a:4e:38:ae:4f:b5:f8:56:44:
         51:5b:12:a6:d5:94:31:fa:91:f4:93:6f:09:95:62:f9:ac:14:
         2b:81:fb:12:01:c9:7d:5c:8b:2f:ed:4e:82:e3:48:50:46:b9:
         5b:59:89:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU5QUMxMTAvBgNVBAUTKDlCMjJDNkVCN0RDQzMzODAzNkUzOUFFNTRBN0QyQTAy
NTkwM0IxMTMwHhcNMjUxMjE4MTkwMzE0WhcNMjUxMjI1MTkwMzE0WjAYMRYwFAYD
VQQDDA02OTQ0NGZmMi0wNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruVANMBnn5oEOJ5eX36/uFDIAu8EcIf/vsOFkmq1IrVmlPTzx0or0sBz24Lb
TjX1Jk6uFaM5qR29guO0YfmZB4wLCRKJ+D07Zw5qT4m8CJCVN2H+Rt+10c2RLjhx
Wu/8IPTlojVN+md+GIsWIBzA5JFDheNJp3MpxC/DC6I2VlQnrFnBZc/eqJfj3VKp
2v6ho2zBvVljE+nXvpnIGhozMnckRJNK57d6tzIJeZ90xIHXV1owe4VKUzosX9er
rG63nljepRFE/U9r/s+97NE0BjZLP2MCY/mGB5Kfz2mFdLutq376ZgCRYpY90qeb
WcuyfQA7e+V4uQaIvC9MtkfoLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0w4FmF
cNLM7oFDJ2dCSprtHa2vMB8GA1UdIwQYMBaAFJsixut9zDOANuOa5Up9KgJZA7ET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG
OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9teUxHNjMzTU00QTI0NXJsU24wcUFsa0Rz
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL215TEc2MzNNTTRBMjQ1cmxTbjBxQWxrRHNSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9teUxHNjMzTU00
QTI0NXJsU24wcUFsa0RzUk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQo2Df/Rt3FYZS1izSxR0Sa+IVRJeuXJF+nbtKSYy4t5LK7FnGLS+0
9d+bMW6s2NhEl43JQ0bUAkYOk4zdXnDiCMnuCdB3EmIm1Udg7eu3kU3og7Nzwjdl
xhdhvsTGklQ7Yxk4BXUXqARGKP4cU90ehEH26w/03aekwPDqzfwP+g5jpBOLfOrO
KP/gil+yY7HUAS0QnkohP22fPunVPCpddV8RM6mr0VuPyzXB4q/HWxz0+fibztZr
kFeDyhqw6bAzOC+1EBV2uCbqP/nlWzp6TjiuT7X4VkRRWxKm1ZQx+pH0k28JlWL5
rBQrgfsSAcl9XIsv7U6C40hQRrlbWYmT
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:37 2025 by rpki-client