This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
File:                     lf6-k6M6M5S9H2Dcu925_eByt_M.mft (raw, json)
Hash identifier:          zOP12xobcvVpTsJf4IHrzilyap++IbMxEOOyK9vsnYw=
Subject key identifier:   81:7C:49:31:B7:DD:48:4E:3B:EC:A2:CE:22:59:D6:3B:31:58:A7:F8
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
Manifest number:          0772
Signing time:             Sat 20 Dec 2025 21:20:17 +0000
Manifest this update:     Sat 20 Dec 2025 21:20:17 +0000
Manifest next update:     Sat 27 Dec 2025 21:20:17 +0000
Files and hashes:         1: lf6-k6M6M5S9H2Dcu925_eByt_M.crl (hash: xXfJ0+J7p4OwwOmDk2cJGIZS36UFPTXA6BQWUP2vx8M=)
                          2: B32F80267BD111EBBB223C84C4F9AE02.roa (hash: HnpT4gDgOpNn3TrEeZ8S7zV9lp/fr3lI5Q/IA+j07KU=)
                          3: 15434774090211EEA1C06509C4F9AE02.roa (hash: dzvzv1MDGjHRHVHiGPmML1F3imLu7s8q7tD+NO4TDds=)
                          4: 15F254A8090211EEA1C06509C4F9AE02.roa (hash: l/lqNDUiyb5NZKhLLNIq7WZOuz2szj0dEY8tsSYQa68=)
                          5: 18D6D6AAB84F11EFA5BB3E78C4F9AE02.roa (hash: 6XffBxe23SAqk8mZhlvHVbw6Cbg+lycUE8a5p6bfPGE=)
                          6: 584506BE6AFA11F0B55F3536C4F9AE02.roa (hash: rJtIFizn/sQTm217EeawbIANI0Uxj/WGOrOl2uJ5f2c=)
                          7: 505CFB7465D211EFB4348E63C4F9AE02.roa (hash: psfjW3LbfsqjUORRddKlOh9lmY1USdZrWQkZoOrVeIo=)
                          8: 8353BEA4F88211EEA770C016C4F9AE02.roa (hash: InXUcvdRUa1rt2SL0tMM3Hgfi86gvB0qmAGoxlh6kYc=)
                          9: FD6881C4438111ECBC63AC7BC4F9AE02.roa (hash: JzLTfh+GciE2ubQPVVJG4EzQllt5nNHJ0s9t7GZNzHw=)
                          10: A95180F2D7DA11ECB3D1AF67C4F9AE02.roa (hash: rSNBIXkV3cHTqpqHK191W8K7lRyWQtgcWXUGkAW+h84=)
                          11: 168FD534090211EEA1C06509C4F9AE02.roa (hash: 56ghv9vhYovbphtcZh0pFu9WFqM/EpFjTMqOzB0oI+U=)
                          12: A45471ACC4ED11EE8A67C739C4F9AE02.roa (hash: hJIP3vaCxaXSerzNVIz2IckZKnqrBprCPLaUe55Jaxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Dec 20 21:20:17 2025 GMT
            Not After : Dec 27 21:20:17 2025 GMT
        Subject: CN=69471311-1c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:db:c0:7e:0c:3e:d6:8f:f2:0e:d6:9e:f9:
                    91:65:e2:49:a1:54:a3:79:57:4b:41:e7:34:57:98:
                    1b:4e:62:c3:23:17:d7:da:30:74:b6:90:a6:4b:54:
                    35:ff:0f:e2:03:4f:b6:fe:32:87:4b:f0:0a:99:56:
                    73:88:0a:7b:8e:55:33:d5:59:f4:ea:70:55:25:2b:
                    a6:99:a9:df:a5:b8:22:35:f0:fb:a4:1e:18:b7:86:
                    c0:1f:53:73:34:d1:98:55:ff:ea:6a:7b:c3:6d:31:
                    db:10:6f:85:7c:0c:37:85:31:eb:72:04:19:59:01:
                    df:66:f5:19:ac:a7:4e:46:0c:cd:dd:02:e6:41:4d:
                    02:f0:8d:61:6c:4a:be:89:9b:45:4f:b6:d3:0a:88:
                    df:da:3e:87:28:a4:34:2c:e7:cd:a9:a4:2c:5e:bf:
                    3e:75:ac:23:f0:81:83:33:5d:a5:f1:df:11:67:84:
                    5c:e8:0a:38:f3:81:97:0c:a5:df:f3:b7:6a:fc:6e:
                    fc:90:4c:19:69:c4:57:15:3d:cc:40:33:75:f3:05:
                    58:5e:52:0b:38:a6:50:7d:de:29:07:0e:e3:32:61:
                    69:08:8d:84:fe:48:fb:c5:be:c5:80:50:18:5a:c4:
                    47:33:4a:20:23:a0:fc:95:06:28:23:4e:36:a8:8e:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:49:31:B7:DD:48:4E:3B:EC:A2:CE:22:59:D6:3B:31:58:A7:F8
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:94:e8:d8:80:3f:9e:81:41:aa:03:72:67:7c:26:d4:f1:82:
         eb:fe:32:dc:cf:b5:5d:19:ba:72:e6:58:95:28:68:20:6e:70:
         cc:7a:63:f3:88:fd:3a:66:29:11:dc:5d:f2:d9:fa:4f:36:df:
         28:2d:e2:f1:7c:c5:0f:a5:aa:fd:59:20:14:4c:ca:53:57:2b:
         0b:de:d6:69:5e:89:42:d5:bd:c0:00:da:ac:1e:69:67:fd:9b:
         19:8c:27:60:d5:f4:95:04:73:e2:8f:dc:d8:ad:9f:a4:0d:9a:
         6c:fe:09:ce:ec:e8:e1:a1:17:f7:6a:28:6d:77:f4:13:1c:91:
         46:89:ac:75:f6:76:f9:71:d4:e1:00:f5:91:e0:d3:81:1c:04:
         99:51:3d:52:af:0c:1d:2e:56:1c:db:ac:0a:43:0a:f4:99:25:
         5a:dc:2f:26:5f:c8:a8:a8:80:d7:94:4b:5d:b4:5f:8b:1b:ca:
         f8:3a:d7:3a:29:b6:36:31:dd:2c:12:56:c5:66:2c:cd:58:fe:
         d5:8e:22:65:df:bf:fa:ac:4a:24:a8:22:06:55:aa:2f:a9:d6:
         fc:0d:0a:bb:1a:2c:a3:0d:98:63:eb:46:71:b3:bf:df:30:97:
         c6:ee:b5:ba:7b:27:fb:2b:7e:2f:63:a7:7f:a8:7a:da:c3:d5:
         78:9f:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:16:23 2025 by rpki-client