This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
File:                     MSV13k1GQ_rfrkiHbfRWfX18aFY.mft (raw, json)
Hash identifier:          8CyyDDQVWaQdePWuGGIZQfvvp3H90Q9O5dDajJ+zhgk=
Subject key identifier:   CA:7B:94:AD:74:28:51:C3:C1:5A:B9:B6:D3:FF:14:98:1A:7F:66:0C
Authority key identifier: 31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56
Certificate issuer:       /CN=A91BD7A3/serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
Manifest number:          09
Signing time:             Fri 05 Dec 2025 05:50:10 +0000
Manifest this update:     Fri 05 Dec 2025 05:50:10 +0000
Manifest next update:     Fri 12 Dec 2025 05:50:10 +0000
Files and hashes:         1: MSV13k1GQ_rfrkiHbfRWfX18aFY.crl (hash: ntf0A0SmFAKrXu/B80hgLIe0gRRkzeVSLuSEEHESZ0g=)
                          2: 127C35B4C52511F09456F21BC4F9AE02.roa (hash: nO3ZI61tCBJta8JPb4PdTpG+lV1HeV50ks8A1FY7r+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD7A3, serialNumber=312575DE4D4643FADFAE48876DF4567D7D7C6856
        Validity
            Not Before: Dec  5 05:50:10 2025 GMT
            Not After : Dec 12 05:50:10 2025 GMT
        Subject: CN=69327292-6ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:55:28:f0:ff:15:15:98:e9:ae:d8:d5:40:e7:
                    85:6e:4d:3e:aa:fe:21:69:3d:e1:d4:9a:33:ff:78:
                    b0:42:18:cd:b5:a0:0b:ee:f5:e0:85:93:e3:af:03:
                    2f:50:73:b6:23:b7:8f:8a:32:60:0d:00:98:e3:42:
                    00:09:b1:59:6b:a8:b0:e9:f7:bc:f8:20:ed:ac:0c:
                    22:3b:73:b3:be:01:de:05:59:d5:a9:b7:40:77:93:
                    b5:7a:12:91:e6:89:be:4f:ee:18:52:c1:c1:aa:6a:
                    0e:5c:07:07:f1:d2:10:38:b3:68:18:6a:97:3e:98:
                    1a:db:69:7f:61:bf:0b:92:6f:68:df:e4:7e:4c:ac:
                    ae:f6:dd:e3:cd:ff:19:6e:44:56:af:c1:5e:a1:29:
                    b3:d3:74:86:5d:d5:da:98:f7:c4:2d:cb:42:eb:e7:
                    7f:17:0e:f6:1e:48:32:d2:fa:ba:3f:9a:05:a9:84:
                    c5:6f:2e:66:d5:66:d0:84:a2:c1:d4:b6:2f:3d:bd:
                    b7:b9:2b:66:73:16:ea:03:46:4f:f7:36:e1:64:85:
                    39:99:22:25:b9:15:27:23:09:c3:2b:34:13:b9:35:
                    87:bc:b9:b2:94:fb:9d:5e:21:4e:4d:c6:d0:b9:5c:
                    bf:5c:f5:34:da:0c:95:f7:83:b5:57:c9:ea:a2:49:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7B:94:AD:74:28:51:C3:C1:5A:B9:B6:D3:FF:14:98:1A:7F:66:0C
            X509v3 Authority Key Identifier:
                keyid:31:25:75:DE:4D:46:43:FA:DF:AE:48:87:6D:F4:56:7D:7D:7C:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MSV13k1GQ_rfrkiHbfRWfX18aFY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/861B1112C52411F0956ADD1AC4F9AE02/MSV13k1GQ_rfrkiHbfRWfX18aFY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:3b:c9:09:90:f0:7c:07:09:98:90:0d:f5:e4:98:d1:28:
         3e:6b:dc:36:b3:f6:a5:24:1b:5d:c5:c1:5b:43:04:d1:92:0a:
         27:6d:21:74:5e:5d:96:4a:de:e2:1a:27:e0:18:62:a7:9e:a8:
         6e:8b:f6:bb:d2:56:82:c3:75:a4:01:18:26:b9:4c:8b:f8:0b:
         4d:e9:74:99:17:99:f7:d3:27:66:bc:c9:68:ab:f0:ee:6a:0b:
         2f:e9:5b:c2:f3:cf:d3:73:1b:20:68:08:1e:41:5a:ae:ae:82:
         ae:1e:6e:18:93:19:fd:99:57:28:2e:51:7f:35:e2:a6:72:fe:
         4d:51:b4:c8:a4:84:1b:67:c5:51:7d:d9:f7:6d:2b:f3:a1:65:
         30:92:14:97:91:4a:b3:4f:4c:18:52:af:74:0f:73:be:c6:6d:
         ab:9e:73:13:e3:a9:37:0a:bb:51:73:b2:32:88:8c:8c:a1:1f:
         ed:5f:6f:37:e2:e9:59:c4:e1:2e:ac:54:a3:fe:00:41:6d:80:
         c7:d9:b8:19:ac:9f:be:f8:ae:be:08:84:35:16:32:b8:fd:17:
         b1:a6:31:36:61:b7:59:6d:64:a1:31:43:24:48:74:ba:f5:c1:
         e4:22:ab:64:20:c1:59:5c:12:b5:7a:79:16:0e:69:f5:2f:48:
         59:22:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:11:11 2025 by rpki-client