This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File:                     LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier:          TxB5/5mges2nt1a+gDCCaMaRRMs5+PsOPCAj75m6NMI=
Subject key identifier:   99:95:13:A0:91:2A:F5:AB:8B:C8:0F:6B:95:C8:EA:64:77:FD:6A:C8
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer:       /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial:       03B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number:          039B
Signing time:             Fri 26 Dec 2025 23:49:07 +0000
Manifest this update:     Fri 26 Dec 2025 23:49:07 +0000
Manifest next update:     Fri 02 Jan 2026 23:49:07 +0000
Files and hashes:         1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: AhPiTYvlWthz5dnCCM6R5Hhm6UFlDA2B6y2mi0/p12w=)
                          2: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=)
                          3: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=)
                          4: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=)
                          5: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=)
                          6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=)
                          7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
                          rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Jan 2026 23:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
        Validity
            Not Before: Dec 26 23:49:07 2025 GMT
            Not After : Jan  2 23:49:07 2026 GMT
        Subject: CN=694f1ef3-1396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:72:b2:4d:30:eb:de:c4:9e:74:31:23:1c:
                    d7:74:42:85:d8:97:02:f9:51:a7:ea:9e:b2:b3:b8:
                    1a:22:89:6a:95:75:73:f0:3a:ff:a5:c4:cd:88:8c:
                    6e:54:ef:41:c4:4f:b8:85:ae:aa:3b:ab:c0:ad:1a:
                    89:1f:cb:e6:47:ff:da:4d:6d:1e:d0:82:ed:2e:17:
                    a5:85:89:c2:80:36:79:56:83:57:6b:1c:93:d0:d8:
                    b0:a6:af:e2:c8:9d:c3:77:b3:e6:3a:3f:06:77:05:
                    48:2b:5f:6a:af:49:fd:24:8b:cf:d4:83:ac:fc:61:
                    d2:b2:5f:d3:62:9f:db:ad:29:56:a6:13:f1:73:33:
                    49:cc:d0:8e:d3:bc:bc:29:0e:57:40:5c:b4:68:da:
                    cf:9e:af:d8:e3:af:44:85:12:ab:e7:3e:35:fa:f9:
                    89:e6:10:5f:a6:53:66:a7:25:db:25:e6:04:bc:21:
                    79:4e:ea:46:c3:df:2b:37:ba:bd:a5:bb:7d:c7:53:
                    9e:39:f4:50:7e:52:0d:cb:c2:dd:c1:eb:a8:89:9a:
                    5a:47:cc:00:4b:9e:20:61:79:bc:3b:8d:91:17:7b:
                    d6:84:96:5a:5a:69:89:87:b6:1e:c9:67:cd:90:91:
                    38:d2:e1:8b:60:33:ac:c7:f5:49:22:d3:e0:6c:17:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:13:A0:91:2A:F5:AB:8B:C8:0F:6B:95:C8:EA:64:77:FD:6A:C8
            X509v3 Authority Key Identifier:
                keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:29:96:7a:9a:44:41:a4:db:90:17:af:6e:f0:59:ba:74:
         a6:c7:c0:77:32:fc:05:1c:32:96:95:7c:4e:d3:5d:6d:d7:71:
         a8:37:3f:bc:04:fa:86:8c:6c:7c:ca:65:d9:67:8d:fa:64:16:
         f8:f1:be:2d:fe:1e:45:ca:04:df:30:62:e5:d4:01:67:4b:71:
         ad:23:81:e7:27:4e:7a:7a:91:55:5f:5c:7d:52:a1:e0:4f:05:
         b7:8a:55:d1:2e:0f:f9:82:87:87:e4:f3:ce:18:e2:c0:27:1d:
         51:a1:68:6f:ee:b7:37:fb:85:cb:8e:c3:4f:0c:ad:fc:74:b4:
         5b:6b:1f:ff:94:31:ca:e5:1e:e2:65:c9:0d:9a:98:84:98:bf:
         02:84:5b:4d:1e:29:c7:67:2b:d0:ae:bc:dd:10:3f:45:d9:13:
         ad:6e:0c:d2:91:df:83:11:e0:34:22:37:ab:5b:69:d7:b4:5a:
         33:6b:35:22:b9:b9:25:26:00:c5:16:ae:66:ad:d8:7f:88:fd:
         6a:9c:50:11:1e:9a:8c:8b:03:b0:fb:f0:95:f6:26:e8:dd:42:
         a8:dc:da:95:48:8d:35:8d:f6:b2:0b:8d:0d:61:4a:d0:13:ed:
         9c:69:0c:16:30:5d:24:be:6f:4c:73:d6:d8:82:0f:ca:b9:af:
         79:de:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:49:36 2025 by rpki-client