This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
File:                     MsAhMRti_kUAvI5OD0hSxkvF2ss.mft (raw, json)
Hash identifier:          W/t2+gkIkzmMMv11oE+F4TepGwiHgtI+hBXPVT9foBE=
Subject key identifier:   48:6B:B0:F8:05:65:57:00:F6:50:5B:C8:B1:07:39:B8:12:CE:AD:57
Authority key identifier: 32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB
Certificate issuer:       /CN=A915D8F3/serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
Manifest number:          CD
Signing time:             Fri 05 Dec 2025 02:30:10 +0000
Manifest this update:     Fri 05 Dec 2025 02:30:09 +0000
Manifest next update:     Fri 12 Dec 2025 02:30:09 +0000
Files and hashes:         1: MsAhMRti_kUAvI5OD0hSxkvF2ss.crl (hash: SEsssAtyAHVr8GuCwNnGons0R9p4vE1T/TcnpkrY+4E=)
                          2: 37DEC83C9DEC11EFB004850FC4F9AE02.roa (hash: AzFl0RFcs8OJznRZfBYgmDybc5F7V12CS5camGFMWxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=32C021311B62FE4500BC8E4E0F4852C64BC5DACB
        Validity
            Not Before: Dec  5 02:30:09 2025 GMT
            Not After : Dec 12 02:30:09 2025 GMT
        Subject: CN=693243b1-6c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:27:3a:24:98:40:01:50:cb:9a:2b:eb:cf:
                    43:d8:97:4e:6b:15:a1:43:91:da:77:65:ab:f0:b6:
                    7a:d3:25:4b:3e:e5:b8:a3:6a:f5:d5:be:80:4e:f2:
                    3e:21:73:7c:a9:3d:13:d4:af:f7:14:29:cc:b7:3a:
                    22:8a:20:1f:7b:68:1f:04:1a:40:5d:91:7b:d1:f3:
                    1e:4d:dd:fc:99:65:15:7e:32:99:02:bf:89:f9:97:
                    64:34:df:7a:ac:90:ca:3a:73:7a:96:2e:e9:35:b1:
                    0f:92:ac:d9:ec:b3:74:a3:d8:4a:bf:6c:34:db:19:
                    6f:9c:c1:84:24:e1:9e:c0:08:52:88:64:f9:40:e3:
                    06:67:a0:93:7a:39:4e:a6:d6:8f:7c:95:a9:b4:1a:
                    19:5a:2a:21:6b:72:4a:c6:82:b9:57:83:91:ff:48:
                    b1:88:89:09:35:af:aa:5d:68:da:f7:c1:7e:81:8e:
                    af:28:dc:cc:4e:eb:f6:ac:7d:51:57:57:d0:70:75:
                    7a:d2:54:29:7b:09:98:14:13:0b:0f:17:d0:ef:10:
                    ea:cb:b4:a6:45:fc:e2:5f:e2:ef:cd:1b:ba:b6:fc:
                    fb:55:d1:3c:55:a2:cf:09:10:ed:95:d7:2e:28:0c:
                    eb:63:89:f9:21:b5:da:89:3d:89:d8:40:5f:fb:f1:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6B:B0:F8:05:65:57:00:F6:50:5B:C8:B1:07:39:B8:12:CE:AD:57
            X509v3 Authority Key Identifier:
                keyid:32:C0:21:31:1B:62:FE:45:00:BC:8E:4E:0F:48:52:C6:4B:C5:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MsAhMRti_kUAvI5OD0hSxkvF2ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/C57F23AE9B0711EF837EA012C4F9AE02/MsAhMRti_kUAvI5OD0hSxkvF2ss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8b:14:61:8b:ca:c8:d8:25:cc:3f:fa:af:6a:56:21:f0:ac:
         e5:58:c4:97:05:86:20:c5:22:a9:c3:26:90:f9:9e:2e:a4:2b:
         08:ef:b3:21:16:b6:e9:de:a5:37:c1:64:d1:4d:ed:20:47:9f:
         93:bc:87:f0:c6:75:7e:98:11:2b:07:71:2f:89:11:9b:9a:4a:
         97:e6:cc:80:be:d4:6f:46:26:70:2b:25:20:af:29:63:09:cc:
         45:eb:69:19:2d:da:05:e6:f1:e4:b7:32:76:0d:28:e4:e5:8a:
         d4:10:84:01:ce:8c:ae:ee:36:27:fe:86:0f:3c:f6:f4:fa:ef:
         17:ac:68:be:46:d3:9b:e1:02:7d:97:b1:43:79:17:6d:c9:a0:
         fb:db:61:fa:d0:f7:80:a9:85:dc:92:80:bc:b7:8f:41:b8:d8:
         aa:f9:43:f2:52:04:14:41:65:a2:6c:43:bc:78:dd:e6:34:8a:
         ff:0d:61:72:8b:ef:87:be:6f:e0:11:f1:77:77:21:26:c9:83:
         21:e7:82:a1:67:f8:8d:36:98:57:05:be:38:80:36:4c:38:c3:
         f5:89:fb:c3:c4:b6:15:08:a3:34:55:18:3c:8e:39:88:18:b9:
         a3:d6:b9:39:51:64:bb:4a:ea:ed:c3:10:5a:11:cb:b6:db:67:
         14:8a:1d:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4RjMxMTAvBgNVBAUTKDMyQzAyMTMxMUI2MkZFNDUwMEJDOEU0RTBGNDg1MkM2
NEJDNURBQ0IwHhcNMjUxMjA1MDIzMDA5WhcNMjUxMjEyMDIzMDA5WjAYMRYwFAYD
VQQDEw02OTMyNDNiMS02YzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkgnOiSYQAFQy5or689D2JdOaxWhQ5Had2Wr8LZ60yVLPuW4o2r11b6ATvI+
IXN8qT0T1K/3FCnMtzoiiiAfe2gfBBpAXZF70fMeTd38mWUVfjKZAr+J+ZdkNN96
rJDKOnN6li7pNbEPkqzZ7LN0o9hKv2w02xlvnMGEJOGewAhSiGT5QOMGZ6CTejlO
ptaPfJWptBoZWioha3JKxoK5V4OR/0ixiIkJNa+qXWja98F+gY6vKNzMTuv2rH1R
V1fQcHV60lQpewmYFBMLDxfQ7xDqy7SmRfziX+LvzRu6tvz7VdE8VaLPCRDtldcu
KAzrY4n5IbXaiT2J2EBf+/GL9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhrsPgF
ZVcA9lBbyLEHObgSzq1XMB8GA1UdIwQYMBaAFDLAITEbYv5FALyOTg9IUsZLxdrL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9DNTdGMjNBRTlC
MDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9rVUF2STVPRDBoU3hrdkYy
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01zQWhNUnRpX2tVQXZJNU9EMGhTeGt2RjJzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDhGMy9DNTdGMjNBRTlCMDcxMUVGODM3RUEwMTJDNEY5QUUwMi9Nc0FoTVJ0aV9r
VUF2STVPRDBoU3hrdkYyc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqixRhi8rI2CXMP/qvalYh8KzlWMSXBYYgxSKpwyaQ+Z4upCsI77Mh
Frbp3qU3wWTRTe0gR5+TvIfwxnV+mBErB3EviRGbmkqX5syAvtRvRiZwKyUgrylj
CcxF62kZLdoF5vHktzJ2DSjk5YrUEIQBzoyu7jYn/oYPPPb0+u8XrGi+RtOb4QJ9
l7FDeRdtyaD722H60PeAqYXckoC8t49BuNiq+UPyUgQUQWWibEO8eN3mNIr/DWFy
i++Hvm/gEfF3dyEmyYMh54KhZ/iNNphXBb44gDZMOMP1ifvDxLYVCKM0VRg8jjmI
GLmj1rk5UWS7SurtwxBaEcu222cUih0V
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:06 2025 by rpki-client