This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
File:                     LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json)
Hash identifier:          9X6mzXTruLcoTUlA6zC0GQPaFT4iyePufTkUtaUlezU=
Subject key identifier:   E8:CE:07:C6:50:53:35:C4:45:3A:1F:79:00:AD:94:64:F8:F6:32:F8
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       039A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
Manifest number:          0311
Signing time:             Sun 21 Dec 2025 01:21:11 +0000
Manifest this update:     Sun 21 Dec 2025 01:21:11 +0000
Manifest next update:     Sun 28 Dec 2025 01:21:11 +0000
Files and hashes:         1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: Merl0QjtX66BaRH1e/6Gm2ZRI603/NWQndiPy4fxkuA=)
                          2: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: gDHotda1hxuaNQN7h9M6AxxJGfzXAR/0C3RpbJSgmtE=)
                          3: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: 2BRZTVSl8BpcjXe5d2W/ue5qmKPhQHNXNMprHWOL7Cw=)
                          4: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: VtJthTtz/+ABAcSwhrIYrg5dkmdk8ZYvZhD7Gwr5Rag=)
                          5: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: AmuwqsBSe7hIWLuijSaz8cznV1ExxkSwedidAfhqBys=)
                          6: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: eOBcL+ti86qxxG4GZER5GjPBmSZhgS6o++eTvbnH834=)
                          7: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: rRStCv6LwOYU9m23O/Ra+02r0H7+4ZuKu4MCypTDG7U=)
                          8: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: dnj6MgMu2bT8eksz/sRKoRkxxyYLeHmRQBIr9G3sHfI=)
                          9: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: LLSWtZdvzPT4rXQVRRto3DLsyoR671syCJPRSB+ppjE=)
                          10: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: pHPkNw6sk+jwMGQiwSPICHgSAbGU9rT4WcKSGwmaJf8=)
                          11: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: l/w2LsKQqDZ2CCn5jWgOIAF0bJGTxkpNnwUlAl6Xl+Y=)
                          12: E879EE7C144111EFB247B936C4F9AE02.roa (hash: kWS/r/1uvE2uh33BQhnK7TE/fxU21h0Qyka9IpjmAOo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 01:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Dec 21 01:21:11 2025 GMT
            Not After : Dec 28 01:21:11 2025 GMT
        Subject: CN=69474b87-f215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:4c:d3:d7:2b:ad:71:23:02:f5:c1:50:10:
                    df:2a:6e:9d:8d:e6:94:52:a2:7f:28:c0:5a:81:f2:
                    27:d9:c9:70:f8:7e:14:ed:c4:08:9a:f9:8c:0f:3d:
                    a0:e5:76:c7:36:7a:88:ec:43:8a:f0:83:27:b3:5e:
                    7f:79:bc:d0:79:64:a9:a7:01:91:28:a9:5a:8f:11:
                    80:64:3d:ea:af:d0:a3:fa:59:d8:4d:f2:37:4e:48:
                    6b:d4:52:df:f5:c0:4d:35:35:bf:56:89:28:f2:53:
                    aa:83:a6:34:33:29:f8:39:0d:53:40:ff:d4:6d:44:
                    de:28:ee:36:20:32:8c:61:9a:be:14:ec:db:28:7e:
                    ee:d5:7e:cb:62:8b:28:9b:e7:7c:b6:86:1d:c5:60:
                    f7:15:66:d4:4b:a7:08:2c:4c:85:26:ab:5b:a8:8d:
                    6a:26:78:41:a6:23:b2:1c:ce:14:68:2f:db:63:6c:
                    8c:9f:91:22:e9:8e:78:6c:9c:a8:da:5f:08:53:d5:
                    1f:97:53:b3:ce:31:33:b5:92:a5:8d:45:f4:06:6e:
                    b3:82:50:e3:30:de:65:69:5e:17:26:de:9d:e5:ea:
                    43:87:f3:c8:c2:7f:6e:20:33:a6:d2:78:f5:4c:b2:
                    ef:a8:96:e8:37:14:bc:3a:3d:07:08:f1:13:6a:ca:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:07:C6:50:53:35:C4:45:3A:1F:79:00:AD:94:64:F8:F6:32:F8
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:70:f3:c2:be:13:79:74:3f:9a:2f:9e:50:d8:db:65:2f:e8:
         71:39:00:8d:63:9e:04:4e:11:8d:6f:35:24:d7:d2:3d:05:f3:
         80:02:e4:87:c0:ec:6d:03:02:f4:e5:f7:db:9d:6a:84:e4:80:
         60:d5:40:3e:37:6e:df:b6:ee:a9:43:74:36:1e:7b:aa:b4:1d:
         3e:97:ca:ea:36:9b:46:13:54:6a:f8:70:e6:81:60:48:9b:27:
         d4:d1:0d:f4:63:27:06:c6:e7:3b:a5:89:f3:46:33:25:fe:d0:
         4a:41:7f:8a:a0:cb:c0:9c:40:04:40:a2:c1:a6:33:3b:2d:f7:
         50:78:03:16:7d:12:b7:85:d9:b8:4d:1f:46:47:ed:93:04:8a:
         c0:96:d3:17:d1:fc:62:d3:67:ee:d5:4a:95:85:1e:8f:6d:03:
         4f:3a:12:74:81:b2:90:8b:78:d6:45:0a:21:99:a7:ec:f1:72:
         6f:09:01:69:1d:3a:b0:64:1c:84:a5:cd:70:bb:dc:7c:44:0d:
         d5:24:33:07:9b:95:72:0b:27:3c:85:bd:2d:89:36:0d:cd:99:
         18:75:71:2a:c5:aa:1f:03:8e:1c:80:8f:ce:ea:4b:01:19:dd:
         5f:b5:e2:62:5a:fa:b1:b5:c8:5f:95:92:b9:c5:20:6b:24:f7:
         a7:e6:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:16:27 2025 by rpki-client