This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          4MWYlhbX/SXi2fDnD9j+xNOBVSFJr4UFhQQadz2UlmA=
Subject key identifier:   C4:0C:AC:F0:3C:51:7E:F4:70:AF:6D:E9:49:3A:1F:58:6B:0C:C2:54
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1520
Signing time:             Sat 06 Dec 2025 18:00:03 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:02 +0000
Manifest next update:     Sat 13 Dec 2025 18:00:02 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: vYGg4WAQJBDA3Ig5b/4O8ukOdgzxuaJS4RisQwqvia4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
        Validity
            Not Before: Dec  6 18:00:02 2025 GMT
            Not After : Dec 13 18:00:02 2025 GMT
        Subject: CN=69346f23-ea14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:ce:0b:a3:41:4e:29:86:21:33:92:0f:fc:
                    96:d2:ba:52:d6:d3:36:97:c4:38:b6:0f:bf:0a:0c:
                    ac:85:50:12:cf:55:a8:f6:10:ab:27:cb:a1:20:b8:
                    57:36:96:b8:df:d9:ee:10:ea:c8:91:f0:1c:25:6f:
                    e5:28:a7:e6:62:f5:4d:8e:a4:90:dc:f9:c2:b6:2d:
                    33:7c:04:64:f0:2c:3a:b0:9c:6d:5c:b1:41:fd:28:
                    7a:27:ec:e7:c5:58:bc:1e:15:6e:d9:25:82:36:d9:
                    5d:6c:60:cf:f6:1f:b9:65:9e:54:88:8f:8a:48:c5:
                    17:6a:e6:9a:88:e2:37:b5:c9:62:69:eb:65:1f:61:
                    95:fe:d0:0a:ea:7d:b5:d7:b4:80:ff:72:85:4a:68:
                    0c:4b:75:b8:21:36:95:f8:88:c5:f8:33:ee:75:0d:
                    56:5c:41:a7:9d:36:ba:8d:d2:f6:a4:3c:34:a3:31:
                    06:37:a9:ff:b5:72:73:1c:64:96:d7:41:52:6d:ee:
                    0a:e5:ee:c0:c2:8c:2a:66:33:29:b1:a7:40:08:67:
                    85:57:16:0b:b1:68:36:ee:c6:5e:11:55:dd:4f:6f:
                    dc:ed:f2:86:22:c1:bb:ef:d6:11:0e:53:ac:b5:7e:
                    5f:30:a7:7b:23:11:f0:4e:56:27:5d:a9:be:d9:0b:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:AC:F0:3C:51:7E:F4:70:AF:6D:E9:49:3A:1F:58:6B:0C:C2:54
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:04:1b:b0:54:9a:b2:71:57:3f:de:6d:37:e6:83:23:84:8e:
         87:71:91:2d:9c:ee:92:d7:c6:7d:59:ed:8c:f2:7d:2c:b9:6b:
         c2:ed:fb:01:7c:c6:83:93:73:73:bb:98:64:73:36:ef:6f:21:
         02:18:33:a3:cd:cc:47:1a:6c:6b:f1:26:08:f9:10:9e:b3:f3:
         4e:66:2e:3d:66:5d:ff:30:87:cb:27:44:b3:43:ad:a6:19:f1:
         ff:f1:eb:2d:2f:c5:40:65:16:ad:3c:29:5b:5d:2a:94:c2:e2:
         37:a6:ba:f9:ec:70:2d:8d:48:13:35:da:82:b1:a6:ae:bc:9e:
         ef:36:33:c3:19:13:d3:36:a2:d1:cc:a6:4b:84:e1:57:96:7e:
         9e:0f:67:87:65:58:1e:2f:e8:9e:60:b0:12:81:ae:14:f9:3b:
         3c:be:fc:b8:40:c8:1a:05:06:f2:bf:58:80:22:2e:b0:50:a6:
         e9:79:5f:c5:9a:cb:a6:63:fc:e4:87:1b:14:f2:18:8c:03:4d:
         59:2f:ea:4f:99:40:98:16:b7:2c:19:cb:95:f9:ae:c6:eb:c4:
         cb:c2:e7:29:86:26:2e:1d:f3:99:e6:fe:48:2c:68:b7:96:c1:
         10:d5:89:34:14:d2:1c:4d:b5:1b:87:a2:4b:b9:9c:69:cf:96:
         8d:e9:fa:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy
NDE3OTA5QjEwHhcNMjUxMjA2MTgwMDAyWhcNMjUxMjEzMTgwMDAyWjAYMRYwFAYD
VQQDEw02OTM0NmYyMy1lYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuW/OC6NBTimGITOSD/yW0rpS1tM2l8Q4tg+/CgyshVASz1Wo9hCrJ8uhILhX
Npa439nuEOrIkfAcJW/lKKfmYvVNjqSQ3PnCti0zfARk8Cw6sJxtXLFB/Sh6J+zn
xVi8HhVu2SWCNtldbGDP9h+5ZZ5UiI+KSMUXauaaiOI3tcliaetlH2GV/tAK6n21
17SA/3KFSmgMS3W4ITaV+IjF+DPudQ1WXEGnnTa6jdL2pDw0ozEGN6n/tXJzHGSW
10FSbe4K5e7AwowqZjMpsadACGeFVxYLsWg27sZeEVXdT2/c7fKGIsG779YRDlOs
tX5fMKd7IxHwTlYnXam+2Qub9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQMrPA8
UX70cK9t6Uk6H1hrDMJUMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN
Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRBBuwVJqycVc/3m035oMjhI6HcZEtnO6S18Z9We2M8n0suWvC7fsB
fMaDk3Nzu5hkczbvbyECGDOjzcxHGmxr8SYI+RCes/NOZi49Zl3/MIfLJ0SzQ62m
GfH/8estL8VAZRatPClbXSqUwuI3prr57HAtjUgTNdqCsaauvJ7vNjPDGRPTNqLR
zKZLhOFXln6eD2eHZVgeL+ieYLASga4U+Ts8vvy4QMgaBQbyv1iAIi6wUKbpeV/F
msumY/zkhxsU8hiMA01ZL+pPmUCYFrcsGcuV+a7G68TLwucphiYuHfOZ5v5ILGi3
lsEQ1Yk0FNIcTbUbh6JLuZxpz5aN6frf
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:50 2025 by rpki-client