This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
File:                     B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json)
Hash identifier:          ZxQCI3LId17JshM0HkJWc+gtk4loohqPTa//0diVL/o=
Subject key identifier:   92:CD:10:20:95:52:D9:34:B8:AE:0D:16:F4:EA:2F:EC:BC:54:2E:15
Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D
Certificate issuer:       /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
Certificate serial:       11E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
Manifest number:          11DD
Signing time:             Thu 04 Dec 2025 16:48:25 +0000
Manifest this update:     Thu 04 Dec 2025 16:48:25 +0000
Manifest next update:     Thu 11 Dec 2025 16:48:25 +0000
Files and hashes:         1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: gW/kr4Qnv54lm7MO9dQhhH7sKjwMJbmTz6HULALyoUc=)
                          2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: a/gC4lAR8I+9GlaLEIrNcMq2t/2/TV0+WCxlGU4GibY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl
                          rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4583 (0x11e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D
        Validity
            Not Before: Dec  4 16:48:25 2025 GMT
            Not After : Dec 11 16:48:25 2025 GMT
        Subject: CN=6931bb59-14c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:e8:cf:d9:5c:eb:7c:45:79:fa:e1:23:cd:
                    09:df:73:23:7c:10:62:2c:25:80:c5:88:59:ed:ba:
                    56:03:7e:6d:c5:a7:c3:74:af:e8:98:aa:c4:45:f3:
                    9c:52:88:66:27:9f:fb:24:b9:c5:13:02:93:5b:93:
                    8f:72:91:f5:6b:cf:47:ec:20:b3:8c:3a:4a:ab:fb:
                    6f:8c:53:1f:87:03:93:53:27:5a:55:ff:b7:7a:c4:
                    32:24:02:c7:03:0b:bd:e0:ad:4e:33:7b:92:06:2c:
                    7c:1c:60:31:f7:56:2f:b7:ee:b4:4b:1a:52:7b:f4:
                    fa:65:c1:03:14:30:5c:6f:e4:2d:40:68:ce:0a:1f:
                    e3:5e:a2:6b:5f:ac:f2:ae:99:ef:a8:dd:77:e4:5d:
                    a1:36:1e:3f:00:37:fa:83:1a:ed:3e:3b:5d:22:51:
                    5b:93:dd:5b:e5:bd:42:55:8e:c3:94:e1:16:20:1a:
                    79:f7:17:ca:99:22:0d:3e:e4:9d:66:a4:7f:54:39:
                    e5:83:ed:3c:76:b7:bc:4d:bf:1e:fa:79:05:67:ea:
                    65:66:37:a9:a9:39:92:0a:e6:72:5b:61:0f:59:5f:
                    95:bc:80:fd:fe:98:84:b9:ae:56:00:d8:60:79:d6:
                    ea:38:f2:be:9e:68:09:d3:f8:41:91:ce:17:54:de:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:10:20:95:52:D9:34:B8:AE:0D:16:F4:EA:2F:EC:BC:54:2E:15
            X509v3 Authority Key Identifier:
                keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9c:8f:eb:03:48:9a:ca:de:f4:0a:f1:04:c6:88:4c:49:5e:
         d2:16:fe:a1:94:78:f2:fd:4a:67:70:fe:f8:bd:70:5f:1f:c6:
         7c:58:f7:60:f9:2f:17:cb:34:58:91:32:5b:63:c8:ed:2e:27:
         fb:64:2d:44:07:b8:65:7d:26:85:1b:0a:c7:3c:39:e4:cc:3b:
         d3:82:7b:8c:d9:92:f7:67:6f:15:b0:8d:3d:42:fc:6e:41:04:
         b8:ee:dd:8a:8b:35:2f:f5:b1:57:ac:96:1e:76:48:74:ae:ea:
         14:5e:0a:57:7b:7c:fe:8a:e3:1a:75:58:30:8f:47:70:5b:e4:
         f9:f0:6a:ef:65:5b:2a:10:0e:ca:ab:b6:18:9b:51:f0:6a:25:
         a7:e4:1a:dd:f1:f7:7b:bc:8d:e6:e8:f1:46:6a:7e:01:15:a0:
         ba:0b:7d:b8:70:81:01:e0:ec:e7:7e:b8:6b:da:4a:d3:1d:d9:
         c5:4a:18:2b:df:24:48:cc:65:9b:2e:c8:78:39:6c:98:dc:8c:
         f0:78:8c:29:dd:a9:7c:69:c4:23:fe:d9:f8:4b:ad:80:fb:98:
         66:d0:8b:1f:dd:10:79:6a:19:d3:09:a2:6d:a6:25:d3:05:fa:
         fd:49:8f:92:df:f0:27:29:9d:78:93:7b:cd:82:bf:45:5d:49:
         15:53:da:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:35 2025 by rpki-client