This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
File:                     -luvRrfLLI40Y4OqgMs5ayuBxkw.mft (raw, json)
Hash identifier:          BLWLt/6WzmBfrRZI97szzHGUnPyxK1UMrYNpwfZEs+w=
Subject key identifier:   D4:2E:DB:53:38:5E:51:9C:20:43:42:6D:04:0D:6C:9E:0A:11:5C:93
Authority key identifier: FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C
Certificate issuer:       /CN=A91A29D7/serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
Manifest number:          25
Signing time:             Fri 19 Dec 2025 06:40:07 +0000
Manifest this update:     Fri 19 Dec 2025 06:40:07 +0000
Manifest next update:     Fri 26 Dec 2025 06:40:07 +0000
Files and hashes:         1: -luvRrfLLI40Y4OqgMs5ayuBxkw.crl (hash: 2EDw5AOMJsFu5tR4WESLm6vBfYef3wjDSVUEDmPeXI0=)
                          2: 753E1B20B1B311F0BD0C0785C4F9AE02.roa (hash: ZEgQ8tbj5F35NBxvxNkrasJNkBRbUBDhID22q1DgVs8=)
                          3: 603EEC5ED0F811F0A0F75447C4F9AE02.roa (hash: +CbZpgm+4vyB8fOl/TuKcq6Ycobk7P+jIHSjzgCG4eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 06:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=FA5BAF46B7CB2C8E346383AA80CB396B2B81C64C
        Validity
            Not Before: Dec 19 06:40:07 2025 GMT
            Not After : Dec 26 06:40:07 2025 GMT
        Subject: CN=6944f347-a9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:57:a4:61:7e:95:b8:12:e3:53:30:49:76:
                    1c:8f:a5:43:c7:40:e1:49:5b:5e:d8:83:87:d5:dd:
                    bd:a2:49:30:ab:9c:29:4d:c5:50:01:5f:24:f1:25:
                    7e:10:44:b7:cb:02:96:29:93:5e:c1:b9:0b:d2:6b:
                    94:87:b2:ad:ba:71:ad:9b:54:a8:48:1f:47:79:ef:
                    52:dc:98:e9:0a:f4:77:dd:fd:29:24:2e:82:87:10:
                    e2:1a:ec:1c:33:5b:34:f6:5f:4b:0d:5c:e7:95:6f:
                    af:bf:ef:3f:f5:e1:ac:81:b9:8e:56:1a:19:25:12:
                    a8:f4:25:da:aa:5c:b3:17:d5:42:c5:c6:5b:65:0a:
                    46:e1:23:f0:12:59:21:60:3d:a1:b4:ed:0e:fd:df:
                    eb:9e:2e:dd:bd:f3:84:a2:43:c1:24:17:be:bf:5e:
                    7b:7e:91:b3:b5:30:83:a1:f0:b3:38:73:7f:2f:9b:
                    d8:2d:d7:cf:af:4b:85:80:9c:99:e5:97:05:04:3d:
                    30:bc:8e:fb:05:b9:a2:e0:4f:fc:ef:e9:96:f2:4f:
                    7d:ce:81:0e:95:59:ed:d0:2a:1f:95:60:0f:e5:55:
                    02:47:3b:93:4e:de:b7:51:fd:c8:a3:c0:62:0c:6b:
                    79:ec:8a:2e:7e:59:2c:fc:91:3b:43:de:6b:d0:33:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:DB:53:38:5E:51:9C:20:43:42:6D:04:0D:6C:9E:0A:11:5C:93
            X509v3 Authority Key Identifier:
                keyid:FA:5B:AF:46:B7:CB:2C:8E:34:63:83:AA:80:CB:39:6B:2B:81:C6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-luvRrfLLI40Y4OqgMs5ayuBxkw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/F23C4DF2AD7311F0AF650254C4F9AE02/-luvRrfLLI40Y4OqgMs5ayuBxkw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:3e:ef:4f:18:94:f2:58:6b:01:52:a3:43:3f:21:54:b0:
         70:8c:41:bb:d9:e5:27:d4:04:15:66:be:a9:6e:36:ed:ee:54:
         b4:17:27:45:bf:5d:c2:58:bc:99:a7:73:48:9a:82:fb:e4:d3:
         72:97:a8:10:67:e3:48:61:53:80:63:6d:5a:2e:9d:8d:cb:bd:
         58:92:97:72:70:4f:21:16:0c:10:9a:fc:4e:03:29:0d:27:a5:
         be:0d:60:da:37:4f:ef:1d:3a:d4:7b:1e:20:97:30:67:a9:83:
         d8:79:40:8b:1c:56:fd:4d:0e:62:67:26:50:56:90:bb:45:7e:
         99:96:9b:08:32:11:62:11:3b:28:17:e0:4c:96:09:f0:73:92:
         67:98:9d:a4:c2:3e:21:45:06:d3:2d:2b:5c:d9:15:11:b1:18:
         c3:83:a0:89:27:31:ce:0d:5d:90:89:21:15:83:5b:4e:74:bd:
         7a:b3:7c:f9:22:97:8d:48:a5:24:1e:8d:cd:ac:dd:0e:96:7c:
         20:cd:73:dc:8a:2f:f3:11:54:05:8a:78:c3:ba:4d:4e:da:2c:
         24:4d:dc:64:42:3a:37:08:07:cd:d5:22:04:dc:4d:a2:19:01:
         4e:67:d6:87:04:ed:8b:7e:7e:ef:eb:32:20:74:b9:a5:fd:0c:
         79:f3:89:b6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MjlENzExMC8GA1UEBRMoRkE1QkFGNDZCN0NCMkM4RTM0NjM4M0FBODBDQjM5NkIy
QjgxQzY0QzAeFw0yNTEyMTkwNjQwMDdaFw0yNTEyMjYwNjQwMDdaMBgxFjAUBgNV
BAMMDTY5NDRmMzQ3LWE5YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDnQFekYX6VuBLjUzBJdhyPpUPHQOFJW17Yg4fV3b2iSTCrnClNxVABXyTxJX4Q
RLfLApYpk17BuQvSa5SHsq26ca2bVKhIH0d571LcmOkK9Hfd/SkkLoKHEOIa7Bwz
WzT2X0sNXOeVb6+/7z/14ayBuY5WGhklEqj0JdqqXLMX1ULFxltlCkbhI/ASWSFg
PaG07Q793+ueLt2984SiQ8EkF76/Xnt+kbO1MIOh8LM4c38vm9gt18+vS4WAnJnl
lwUEPTC8jvsFuaLgT/zv6ZbyT33OgQ6VWe3QKh+VYA/lVQJHO5NO3rdR/cijwGIM
a3nsii5+WSz8kTtD3mvQM4xNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1C7bUzhe
UZwgQ0JtBA1sngoRXJMwHwYDVR0jBBgwFoAU+luvRrfLLI40Y4OqgMs5ayuBxkww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0YyM0M0REYyQUQ3
MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0MFk0T3FnTXM1YXl1Qnhr
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvLWx1dlJyZkxMSTQwWTRPcWdNczVheXVCeGt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
OUQ3L0YyM0M0REYyQUQ3MzExRjBBRjY1MDI1NEM0RjlBRTAyLy1sdXZScmZMTEk0
MFk0T3FnTXM1YXl1Qnhrdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJTiPu9PGJTyWGsBUqNDPyFUsHCMQbvZ5SfUBBVmvqluNu3uVLQXJ0W/
XcJYvJmnc0iagvvk03KXqBBn40hhU4BjbVounY3LvViSl3JwTyEWDBCa/E4DKQ0n
pb4NYNo3T+8dOtR7HiCXMGepg9h5QIscVv1NDmJnJlBWkLtFfpmWmwgyEWIROygX
4EyWCfBzkmeYnaTCPiFFBtMtK1zZFRGxGMODoIknMc4NXZCJIRWDW050vXqzfPki
l41IpSQejc2s3Q6WfCDNc9yKL/MRVAWKeMO6TU7aLCRN3GRCOjcIB83VIgTcTaIZ
AU5n1ocE7Yt+fu/rMiB0uaX9DHnzibY=
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:17 2025 by rpki-client