This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File:                     MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier:          TEwWSUQ2ThyRQ4Sjz++8m80mJSoImLcv6k8MMrxI6kU=
Subject key identifier:   85:CB:88:3E:42:29:92:66:09:08:6E:B8:28:44:FF:87:3A:75:C6:35
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer:       /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number:          04F7
Signing time:             Thu 04 Dec 2025 22:16:27 +0000
Manifest this update:     Thu 04 Dec 2025 22:16:27 +0000
Manifest next update:     Thu 11 Dec 2025 22:16:27 +0000
Files and hashes:         1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: 58UOAjFG0QzF5eCvH3QdnsrqyWZTpuDy/xudL/l2g0g=)
                          2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
                          rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
        Validity
            Not Before: Dec  4 22:16:27 2025 GMT
            Not After : Dec 11 22:16:27 2025 GMT
        Subject: CN=6932083b-dbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:cc:5c:63:90:1b:82:81:a4:46:6f:b2:ed:
                    a6:8f:61:97:cc:c1:b7:0a:96:1a:7e:55:49:92:69:
                    81:3a:7d:c9:68:7f:70:b3:a0:2b:b1:20:60:32:b1:
                    34:e0:e7:93:c1:26:e8:41:5f:47:26:a9:d0:52:0e:
                    32:07:d0:0d:3d:07:a2:24:59:23:b4:80:9e:66:c9:
                    0f:d5:6a:1f:5c:3d:77:b0:b8:5a:d5:3d:d8:2d:47:
                    56:e3:81:1c:e5:a2:07:56:b2:11:56:59:94:8f:77:
                    74:fc:0b:61:c5:f8:a6:46:6a:2b:b8:a6:38:f2:2d:
                    db:75:be:02:7f:19:83:6b:33:a8:e4:8f:01:84:cd:
                    39:a5:8b:94:3b:d4:29:66:57:82:88:4a:d5:e1:1c:
                    57:64:5e:79:63:92:5f:19:02:90:9b:f3:ac:bb:32:
                    d5:5d:75:72:60:fd:e2:8f:eb:16:70:c9:8b:96:56:
                    12:96:24:8b:38:33:03:3c:5f:37:38:5a:56:cb:44:
                    df:2c:75:2f:dd:fb:d7:04:ae:03:4f:0f:e0:58:0b:
                    5b:59:d8:97:22:4a:7c:db:0a:4d:62:9c:92:92:33:
                    cf:9a:d2:75:53:36:44:65:0c:1a:28:1c:9f:ac:51:
                    e8:02:2a:29:a2:3a:41:6a:68:30:df:e3:33:06:76:
                    e3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CB:88:3E:42:29:92:66:09:08:6E:B8:28:44:FF:87:3A:75:C6:35
            X509v3 Authority Key Identifier:
                keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:82:c3:1d:71:f9:bf:1b:d7:3d:c2:d6:1c:c9:74:0e:4c:
         aa:6b:ba:52:ec:04:f1:92:69:51:e0:5f:74:d3:1d:34:e1:f8:
         55:d7:e7:a6:e9:8d:97:b5:12:6b:34:f5:65:e2:d0:0d:a5:bc:
         34:0b:09:e0:09:94:ff:60:00:24:f5:dc:a6:f4:e5:1a:1c:88:
         3f:27:62:6c:73:b2:5b:9b:b0:ff:0a:19:a3:22:86:43:9e:b7:
         22:7e:da:9a:fe:ee:c4:45:30:9e:48:1f:1c:ce:b5:bf:d6:0d:
         93:57:34:43:af:1a:75:f8:5a:0f:a3:f1:55:40:9d:a8:34:ae:
         9e:56:8a:df:59:f0:30:ea:6a:37:8d:41:8e:ec:07:0b:d1:36:
         39:41:f8:0f:58:1e:71:a5:34:1f:4c:0c:93:c3:b7:d7:08:fe:
         05:59:3b:7d:f3:c7:1e:ce:f8:53:95:93:fb:32:0a:e0:da:ca:
         fd:3b:b3:a8:7f:15:77:83:3f:31:b5:24:5a:8b:92:f9:4c:58:
         e5:09:df:80:7f:79:11:93:e4:25:21:50:bf:4b:b6:6d:1d:9a:
         b9:bc:ed:6c:2d:3e:cb:f8:b5:be:61:6c:d9:c1:96:16:63:4f:
         96:09:ac:4c:e7:20:23:47:dd:f1:5c:6b:35:c2:62:a0:ed:e6:
         df:d4:80:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkzNzExMTAvBgNVBAUTKDMyRjg5MDBEMzg1NkJFNDNBNzJENkM3RjkzRTkwNEI1
QjgzQ0MzNEQwHhcNMjUxMjA0MjIxNjI3WhcNMjUxMjExMjIxNjI3WjAYMRYwFAYD
VQQDEw02OTMyMDgzYi1kYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtivMXGOQG4KBpEZvsu2mj2GXzMG3CpYaflVJkmmBOn3JaH9ws6ArsSBgMrE0
4OeTwSboQV9HJqnQUg4yB9ANPQeiJFkjtICeZskP1WofXD13sLha1T3YLUdW44Ec
5aIHVrIRVlmUj3d0/AthxfimRmoruKY48i3bdb4CfxmDazOo5I8BhM05pYuUO9Qp
ZleCiErV4RxXZF55Y5JfGQKQm/OsuzLVXXVyYP3ij+sWcMmLllYSliSLODMDPF83
OFpWy0TfLHUv3fvXBK4DTw/gWAtbWdiXIkp82wpNYpySkjPPmtJ1UzZEZQwaKByf
rFHoAiopojpBamgw3+MzBnbjUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXLiD5C
KZJmCQhuuChE/4c6dcY1MB8GA1UdIwQYMBaAFDL4kA04Vr5Dpy1sf5PpBLW4PMNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTM3MS8zNkZFRTdFQTM4
QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3ZrT25MV3hfay1rRXRiZzh3
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL012aVFEVGhXdmtPbkxXeF9rLWtFdGJnOHcwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTM3MS8zNkZFRTdFQTM4QkQxMUVDOURENEVCNTBDNEY5QUUwMi9NdmlRRFRoV3Zr
T25MV3hfay1rRXRiZzh3MDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClq4LDHXH5vxvXPcLWHMl0Dkyqa7pS7ATxkmlR4F900x004fhV1+em
6Y2XtRJrNPVl4tANpbw0CwngCZT/YAAk9dym9OUaHIg/J2Jsc7Jbm7D/ChmjIoZD
nrciftqa/u7ERTCeSB8czrW/1g2TVzRDrxp1+FoPo/FVQJ2oNK6eVorfWfAw6mo3
jUGO7AcL0TY5QfgPWB5xpTQfTAyTw7fXCP4FWTt988cezvhTlZP7Mgrg2sr9O7Oo
fxV3gz8xtSRai5L5TFjlCd+Af3kRk+QlIVC/S7ZtHZq5vO1sLT7L+LW+YWzZwZYW
Y0+WCaxM5yAjR93xXGs1wmKg7ebf1IBc
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:55:45 2025 by rpki-client