This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
File:                     ak_LGM3Y70HSMyE57mLo_Sc7b98.mft (raw, json)
Hash identifier:          KkrA2JArtR6DylKZCIVWxf+V3pD1FHfLcF6+3vH+pl4=
Subject key identifier:   C2:06:B6:76:64:B5:1A:22:91:10:9C:D8:3B:32:4C:28:DA:E1:B4:5A
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       031B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
Manifest number:          0317
Signing time:             Mon 29 Dec 2025 00:11:15 +0000
Manifest this update:     Mon 29 Dec 2025 00:11:14 +0000
Manifest next update:     Mon 05 Jan 2026 00:11:14 +0000
Files and hashes:         1: ak_LGM3Y70HSMyE57mLo_Sc7b98.crl (hash: Frpme7lEBTqCfRsZlhwzBGKYAJL5o7OjCRyQ7oX5/l8=)
                          2: EF1B381EF93911ECBD1E663DC4F9AE02.roa (hash: LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Jan 2026 00:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Dec 29 00:11:14 2025 GMT
            Not After : Jan  5 00:11:14 2026 GMT
        Subject: CN=6951c723-ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:dd:0d:c0:84:96:ad:51:2b:f7:84:02:cc:
                    fc:b7:66:49:8f:b7:0c:cf:cf:69:53:d1:1c:ce:07:
                    27:fb:2b:bb:00:3c:0a:f7:56:15:4d:77:21:4e:e5:
                    d3:96:2e:64:4e:e3:63:bc:f8:a2:01:ba:e7:26:11:
                    48:39:8b:56:cb:ed:37:eb:f5:b9:25:90:29:96:d5:
                    c3:3e:23:8d:0a:48:7b:0c:9f:53:f2:e8:28:ee:64:
                    3e:20:2f:b0:f3:34:b1:9b:60:4a:48:65:0a:10:4f:
                    0e:6d:7e:e3:d2:c5:9f:42:78:59:29:ff:48:ac:d9:
                    fc:e6:1e:fb:ac:93:da:e4:5e:9a:3c:d8:de:cb:38:
                    07:8d:7a:e0:5f:ae:af:1b:cc:d9:cf:ee:b9:f4:65:
                    f4:58:6a:7c:46:9a:fe:4f:dd:6a:24:cd:16:c6:44:
                    33:f2:a2:1f:bb:e0:17:6d:af:c8:2d:09:f5:33:b9:
                    dc:08:9d:78:6b:8a:0b:7e:16:11:5a:4c:55:ae:95:
                    62:21:7d:b3:9d:ea:9d:5a:74:e6:7b:c4:14:9c:03:
                    a4:89:a9:b0:60:23:fd:95:f9:95:6f:ff:dd:6e:1d:
                    35:15:17:4c:90:40:4e:0b:f6:da:ea:67:ff:7f:2a:
                    52:57:3b:cd:93:34:3c:16:36:66:a7:25:88:b5:f4:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:B6:76:64:B5:1A:22:91:10:9C:D8:3B:32:4C:28:DA:E1:B4:5A
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b2:73:9b:33:67:6a:1f:86:da:ba:cd:27:69:b7:e0:5b:2c:
         15:ba:94:69:c3:c5:18:83:df:fd:25:79:23:46:af:cc:7b:81:
         63:d1:6f:6a:2a:be:a1:f3:e2:96:0d:d4:e9:48:d9:d1:60:fb:
         78:89:c6:5c:fc:92:3f:62:c0:35:0d:2a:2e:8c:94:c8:83:b0:
         0b:98:0d:ef:e5:72:e3:b2:14:bb:fd:9e:dc:6b:a3:b1:19:04:
         1c:2a:ef:69:18:50:78:fb:ca:a8:ee:d4:ab:fa:01:17:3c:b8:
         a7:c0:d2:8f:83:68:83:61:ed:2f:f5:46:04:8e:3c:42:cb:82:
         5e:a7:39:c1:60:01:6b:7c:35:b7:5c:e0:9a:07:87:ca:6e:ed:
         ab:ed:f9:e5:51:f0:81:e8:a3:a1:be:32:49:be:1c:52:09:fa:
         ab:2e:1e:a7:3f:6f:0a:b6:28:d4:28:19:10:7a:ff:d4:b3:1a:
         29:0a:d5:af:71:3f:f1:ea:52:39:d6:81:9d:39:46:4a:93:2a:
         45:9c:7e:45:7d:3d:b8:a8:a4:5e:b6:63:ce:11:ff:e5:ba:2e:
         c0:06:78:c8:8a:4a:0c:1d:8b:58:52:85:3f:1b:08:81:85:ac:
         b4:22:b3:a1:61:f7:ba:df:85:15:b5:6e:41:8a:34:7c:d2:ed:
         57:fd:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 07:04:36 2025 by rpki-client