This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
File:                     LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json)
Hash identifier:          fAG5L/7Jl3PiOrpC/6gI7ayZwwrwsDlmLi50cJ60mZI=
Subject key identifier:   9F:75:48:74:AB:37:D5:5F:C4:AC:1F:78:EA:89:AD:56:6E:75:0A:74
Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC
Certificate issuer:       /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
Manifest number:          FC
Signing time:             Fri 19 Dec 2025 04:16:06 +0000
Manifest this update:     Fri 19 Dec 2025 04:16:06 +0000
Manifest next update:     Fri 26 Dec 2025 04:16:06 +0000
Files and hashes:         1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: RQQfzdpFXPsdZngI/zw/JLiEnQbOnA2hYfHLN+FESVM=)
                          2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: Z8UDv1UV/5P3Y0FPBjtW9ftg+P9GP6R45lfE98ZqVpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 04:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC
        Validity
            Not Before: Dec 19 04:16:06 2025 GMT
            Not After : Dec 26 04:16:06 2025 GMT
        Subject: CN=6944d186-2413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:64:61:c6:c1:2c:db:07:5b:8a:39:2f:6a:
                    27:d2:28:04:5f:5e:4b:46:c8:bc:ef:0d:4d:17:5f:
                    98:6c:a6:a7:fe:4c:b2:f5:8d:8b:85:e2:a2:1a:f6:
                    8c:a0:e8:fb:78:6e:1e:82:e5:fd:b4:03:0b:0a:6f:
                    47:cc:6b:f4:6f:da:64:d3:5d:12:91:fa:60:2c:aa:
                    0e:27:90:58:99:a2:79:20:25:bb:75:b6:90:18:80:
                    11:97:ec:3c:c7:ea:8b:8b:f0:03:de:8e:31:6e:2c:
                    0b:d5:8b:3e:61:ca:98:3e:44:0a:41:5b:d7:4c:bc:
                    19:58:9c:72:98:13:46:5f:58:4c:57:13:23:5e:1c:
                    fe:71:2a:da:03:d2:c8:cc:4b:8e:f4:ed:f2:9d:95:
                    2a:70:be:a3:78:c5:97:3e:76:51:bc:f6:a1:7c:61:
                    b8:f8:bb:21:1d:b8:68:3d:4a:31:19:df:a6:f3:48:
                    cd:bf:22:c8:b4:cc:1e:af:ff:b7:bb:02:dd:39:f0:
                    0d:d8:81:2e:ed:d2:07:d2:a6:2f:bb:65:50:56:06:
                    86:21:41:f0:36:dc:44:e8:bb:19:7b:e6:c5:53:da:
                    ee:a7:41:51:5d:5a:f7:d2:a3:28:67:3d:a6:ca:e6:
                    11:e9:f6:45:11:5c:e9:99:17:dd:ba:53:37:3d:d2:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:75:48:74:AB:37:D5:5F:C4:AC:1F:78:EA:89:AD:56:6E:75:0A:74
            X509v3 Authority Key Identifier:
                keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a4:8f:36:18:79:ea:8d:8a:2a:a7:c3:f2:85:4c:96:ad:bb:
         31:44:99:12:01:67:c4:b3:35:52:92:f8:18:46:dd:af:0e:ed:
         a2:db:a6:64:45:88:6a:f7:21:f9:40:ac:0a:bf:c3:f1:11:81:
         14:2b:e0:13:db:bd:ce:dc:e6:23:66:ad:d7:35:67:3b:a1:79:
         45:26:55:9e:4f:58:81:c1:0f:2e:ac:9d:2f:75:96:6c:a0:59:
         c3:e9:8b:a2:ef:b1:ff:eb:1c:7a:ee:ff:6e:87:59:88:66:09:
         87:e2:21:13:36:c2:79:36:22:56:ee:87:c4:2d:4c:d7:bb:99:
         d2:e9:6a:cd:0b:83:39:10:b4:cb:60:32:31:6a:9d:58:67:8d:
         e1:df:dd:09:77:73:1a:4b:a4:bd:4f:a3:15:7e:78:0a:75:cc:
         89:4b:2e:e1:ad:3b:11:be:1e:cd:d5:75:56:fb:30:54:3f:d3:
         b5:3e:44:09:14:b4:5c:3f:f5:b4:29:ac:86:9e:78:9b:b8:d6:
         fb:0f:c7:71:2f:9b:ec:f8:69:65:be:8e:c6:ca:bf:e2:fc:43:
         8e:24:71:4c:f8:69:20:08:3b:f9:4b:f7:33:50:4e:07:cb:58:
         75:de:a4:7d:59:9c:78:5d:50:f7:93:a6:79:62:5c:ba:ac:86:
         15:0c:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:19 2025 by rpki-client