This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json)
Hash identifier:          AIEI1A7w6ALvuTdrlXQ+uru2ycvC7CeVOVsbDlCEeag=
Subject key identifier:   54:E0:1E:81:BB:A7:EE:85:DD:1F:E2:5F:AB:9B:E4:A1:B5:09:C4:0A
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       19DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
Manifest number:          19B6
Signing time:             Thu 04 Dec 2025 16:06:08 +0000
Manifest this update:     Thu 04 Dec 2025 16:06:08 +0000
Manifest next update:     Thu 11 Dec 2025 16:06:08 +0000
Files and hashes:         1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: KuIAMnI2p0MLh6xOpdiY3OaeTAnhkqEuT6sJvuYpnm0=)
                          2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: BQO+L5CjncNKOL7DHEh52oeMX9m7mfWjBtWMWgb03Vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
                          rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 16:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6619 (0x19db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: Dec  4 16:06:08 2025 GMT
            Not After : Dec 11 16:06:08 2025 GMT
        Subject: CN=6931b170-1ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:c4:fb:4b:0a:ef:0a:78:36:c1:09:d2:cf:
                    5f:43:b0:58:e8:93:65:83:1d:a0:21:61:09:a1:91:
                    be:0a:a5:1e:8b:e0:f1:d9:80:86:4a:19:5c:29:8c:
                    2d:9f:e0:d9:7f:29:39:38:92:f2:b4:04:c5:f5:48:
                    96:d1:58:0d:e0:04:56:0f:39:c6:59:57:d2:fa:d0:
                    b8:5b:c0:c8:45:cd:df:44:36:c9:ef:e3:a1:b3:8e:
                    c5:e9:d7:fd:39:73:5b:4a:dd:cc:fa:e6:eb:ce:e1:
                    fa:33:c1:62:18:ef:eb:16:0b:2f:58:d6:93:2d:c2:
                    1d:9b:45:99:49:28:e7:37:f8:6d:39:35:2d:a1:53:
                    29:4e:c1:a3:3f:97:30:b8:c9:61:1a:85:86:d2:12:
                    22:b9:e7:ec:26:9b:ee:53:96:15:c7:a7:90:9c:c9:
                    af:15:5c:84:f4:eb:f6:79:d6:e3:21:f1:fc:11:91:
                    16:5b:c1:40:38:1d:88:a3:c7:02:55:f9:fe:29:81:
                    9a:be:fa:80:c0:d0:ff:69:f8:bb:75:6d:8c:57:53:
                    c9:ad:35:6f:38:a3:71:2b:20:46:25:5b:fc:6d:e6:
                    94:c2:a0:07:ce:06:2a:b0:e1:a8:a8:a6:53:ce:7d:
                    dc:d0:78:b3:cd:9b:65:47:31:ed:ff:68:d9:3f:44:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:1E:81:BB:A7:EE:85:DD:1F:E2:5F:AB:9B:E4:A1:B5:09:C4:0A
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:38:6e:18:24:14:c4:20:f9:1a:b1:3b:5e:b9:55:b9:f9:bb:
         93:64:64:d0:9a:e9:aa:e9:33:4a:bb:fe:d5:23:81:68:18:c0:
         8f:cc:1f:6f:74:5e:de:ec:cd:7b:55:dc:c9:96:4d:b5:28:87:
         7a:a1:8a:15:bd:14:11:bc:86:0f:01:09:f8:3a:13:40:de:c0:
         89:5a:eb:44:85:41:8f:97:64:c4:77:5e:4a:8c:d1:77:d4:6b:
         10:ca:33:e8:ce:b3:5e:f4:1a:2f:9a:dd:81:ca:52:8c:38:d5:
         a7:1b:1e:d9:d2:ea:f8:13:3f:53:cc:86:e1:4c:63:19:62:43:
         4f:dc:b6:66:de:e4:30:79:58:42:fa:2b:83:28:21:56:96:c6:
         f2:ba:4f:e7:ae:d9:1f:5c:c1:4e:a8:be:e5:b2:49:7a:92:00:
         82:b0:63:7d:07:42:09:c3:87:fb:d4:4c:33:b5:95:23:64:e3:
         d6:5d:e3:04:ab:35:8d:0f:f2:e0:71:1f:ac:0a:29:8f:af:1c:
         b3:e2:40:99:da:90:48:f7:1d:f0:52:71:2f:a6:f2:bd:07:53:
         91:41:df:99:20:6c:4a:0e:91:40:31:88:78:25:9f:9c:0f:cb:
         ff:da:29:5e:ee:b5:cf:2f:95:f0:ca:2c:dd:91:55:f8:c6:83:
         9c:f9:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:16 2025 by rpki-client