This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
File:                     lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json)
Hash identifier:          3XVLe/wmtMrf+Hm5l1BfDv2HcVsh7Grdsl5cyP8Z8yY=
Subject key identifier:   B0:2D:E7:F5:D5:03:6B:DC:BA:6F:EB:3D:89:56:D9:1E:AF:47:E9:39
Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1
Certificate issuer:       /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
Manifest number:          E3
Signing time:             Fri 19 Dec 2025 04:42:31 +0000
Manifest this update:     Fri 19 Dec 2025 04:42:30 +0000
Manifest next update:     Fri 26 Dec 2025 04:42:30 +0000
Files and hashes:         1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: oxtFFP+ZtpiG5CB9kzuN6pX3R9XfAiczQGCSspVsmG4=)
                          2: 5C8A37FEBB0D11F0B828E842C4F9AE02.roa (hash: bAE1nN8/ltYESFoWRjpvSwAksmNLvoi9WWAZ51mQmjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1
        Validity
            Not Before: Dec 19 04:42:30 2025 GMT
            Not After : Dec 26 04:42:30 2025 GMT
        Subject: CN=6944d7b7-0583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:fe:2d:6f:62:c6:18:f9:19:29:73:fc:fd:
                    7d:df:4a:1e:a1:37:43:4d:43:57:22:d4:0b:d2:5d:
                    52:04:43:5f:72:dd:e5:ee:fd:23:d0:a4:86:f0:2d:
                    73:db:19:85:a4:37:53:35:a9:3a:fa:eb:13:50:00:
                    d0:4b:7c:90:73:c6:54:db:70:c6:27:86:30:a9:46:
                    28:54:16:c8:0c:85:a5:bd:29:88:46:61:e5:d2:f2:
                    c4:2c:cb:18:20:97:50:65:86:f6:a7:12:d0:90:1b:
                    88:ff:48:37:09:d9:49:ac:15:44:dd:0c:80:ac:ee:
                    60:73:94:14:9d:57:78:97:16:86:e7:2d:98:7a:f7:
                    6a:9e:a8:e7:56:7d:f0:23:cb:26:cc:4e:52:cb:30:
                    ab:99:24:5b:bc:d0:c2:15:09:11:fd:3f:5d:30:7a:
                    27:1c:f2:bf:6b:a1:54:3c:68:c5:c3:12:75:81:2d:
                    a0:e0:9c:ad:01:4b:40:65:13:e9:61:9d:8c:36:c4:
                    aa:ba:ff:4f:61:6c:13:8a:dc:31:f8:a1:6f:96:a6:
                    d9:15:bc:65:b6:e0:53:8d:2e:1b:92:05:7f:80:0f:
                    64:0b:7d:22:ac:25:92:08:5c:b8:ff:44:74:df:0f:
                    34:07:64:7d:47:9b:e6:41:6c:fe:41:9f:63:50:96:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2D:E7:F5:D5:03:6B:DC:BA:6F:EB:3D:89:56:D9:1E:AF:47:E9:39
            X509v3 Authority Key Identifier:
                keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:98:cd:c6:08:d5:13:02:48:82:f6:b4:09:13:2e:d8:03:7e:
         a2:18:3a:f2:09:0e:91:65:fc:e4:9c:18:08:12:8b:63:84:3b:
         e8:77:02:4a:d3:8e:9d:96:50:c4:5f:b0:ef:7b:a4:8d:21:3c:
         6c:34:6b:ea:9a:4e:d5:5a:fc:a5:f4:2d:53:0a:ef:7b:35:e5:
         4b:77:23:e4:f5:bf:38:3b:6e:66:cb:92:1f:75:67:13:c8:2f:
         9e:41:1b:8c:c2:07:2d:b8:c0:84:03:c9:84:70:ca:3b:30:e1:
         d9:6e:5c:27:0f:b5:3a:e1:36:9b:7f:2b:be:76:d5:a5:33:cb:
         4b:41:1d:58:ff:65:b2:7e:08:2f:e6:2a:75:09:9e:33:fc:77:
         3b:7b:39:82:31:9f:ce:4e:1b:01:d0:1f:65:d4:71:71:2e:c3:
         2d:66:b2:e9:ad:54:93:9c:fb:8f:f0:4c:5a:00:d7:36:1f:9c:
         db:8a:96:97:2d:a0:07:cb:67:33:54:02:bc:9a:bc:94:79:16:
         ea:bb:cc:0d:4c:21:2e:be:d2:30:0e:08:47:0c:be:46:e8:c8:
         32:db:c3:c1:e4:ff:16:c8:b8:69:d8:7d:97:cb:e9:cf:5e:a0:
         23:9d:bd:b1:a8:c2:32:15:db:91:f8:aa:c8:34:4b:df:ae:d2:
         4e:14:25:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlFQUUxMTAvBgNVBAUTKDk0NTM5RjgyQTM1RUIyMTU4RUQ3QzM2MkQ1QkExNTQz
M0U3RUQyRTEwHhcNMjUxMjE5MDQ0MjMwWhcNMjUxMjI2MDQ0MjMwWjAYMRYwFAYD
VQQDDA02OTQ0ZDdiNy0wNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfD+LW9ixhj5GSlz/P1930oeoTdDTUNXItQL0l1SBENfct3l7v0j0KSG8C1z
2xmFpDdTNak6+usTUADQS3yQc8ZU23DGJ4YwqUYoVBbIDIWlvSmIRmHl0vLELMsY
IJdQZYb2pxLQkBuI/0g3CdlJrBVE3QyArO5gc5QUnVd4lxaG5y2YevdqnqjnVn3w
I8smzE5SyzCrmSRbvNDCFQkR/T9dMHonHPK/a6FUPGjFwxJ1gS2g4JytAUtAZRPp
YZ2MNsSquv9PYWwTitwx+KFvlqbZFbxltuBTjS4bkgV/gA9kC30irCWSCFy4/0R0
3w80B2R9R5vmQWz+QZ9jUJYlbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAt5/XV
A2vcum/rPYlW2R6vR+k5MB8GA1UdIwQYMBaAFJRTn4KjXrIVjtfDYtW6FUM+ftLh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BNDlDRERCODhE
MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNoV08xOE5pMWJvVlF6NS0w
dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUVBRS9BNDlDRERCODhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9sRk9mZ3FOZXNo
V08xOE5pMWJvVlF6NS0wdUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRmM3GCNUTAkiC9rQJEy7YA36iGDryCQ6RZfzknBgIEotjhDvodwJK
046dllDEX7Dve6SNITxsNGvqmk7VWvyl9C1TCu97NeVLdyPk9b84O25my5IfdWcT
yC+eQRuMwgctuMCEA8mEcMo7MOHZblwnD7U64Tabfyu+dtWlM8tLQR1Y/2Wyfggv
5ip1CZ4z/Hc7ezmCMZ/OThsB0B9l1HFxLsMtZrLprVSTnPuP8ExaANc2H5zbipaX
LaAHy2czVAK8mryUeRbqu8wNTCEuvtIwDghHDL5G6Mgy28PB5P8WyLhp2H2Xy+nP
XqAjnb2xqMIyFduR+KrINEvfrtJOFCXu
-----END CERTIFICATE-----
Generated at Sun Dec 21 05:01:03 2025 by rpki-client