This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
File:                     sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft (raw, json)
Hash identifier:          pt86RlODh65sSmDAXsJ3TmrsCgGYtRZpLdOuKt83RtA=
Subject key identifier:   A7:F8:FE:BD:77:D7:20:FA:B8:5F:9C:40:29:48:54:A7:A2:92:E8:0B
Authority key identifier: B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB
Certificate issuer:       /CN=A914FA25/serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
Manifest number:          0E23
Signing time:             Mon 21 Jul 2025 01:58:48 +0000
Manifest this update:     Mon 21 Jul 2025 01:58:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:58:48 +0000
Files and hashes:         1: sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl (hash: LYdyP2r/RtMjtvEFO5nermo60mbQPF8Wz1t+81KhdXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FA25, serialNumber=B0014A8306C52E404F67CA2F8E586F9B868E8CAB
        Validity
            Not Before: Jul 21 01:58:48 2025 GMT
            Not After : Jul 28 01:58:48 2025 GMT
        Subject: CN=687d9ed8-09f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:87:49:5b:5e:84:91:6b:d2:0e:9c:50:f5:2b:
                    6c:ab:d7:15:46:94:81:d8:28:6c:a6:df:63:60:0a:
                    dc:45:bb:0f:d2:be:2e:86:ed:65:e1:b5:23:5b:3d:
                    62:22:b4:eb:72:55:1a:60:79:d2:7c:45:3b:12:15:
                    12:cf:55:ad:17:b6:0a:03:8d:ad:6e:8e:97:d8:87:
                    29:b9:bf:cb:d2:96:79:c2:c4:5e:cf:e6:7a:36:43:
                    88:ee:39:17:4e:40:de:a0:18:f1:cc:bd:ce:9c:7d:
                    ed:71:d7:bc:97:a6:3c:9c:56:c6:b8:d8:46:4f:c8:
                    40:a0:99:7c:02:7d:96:85:05:cf:a8:55:fc:fd:e2:
                    7c:b7:ec:13:0c:09:93:79:65:02:1e:4d:d4:31:12:
                    29:98:36:e2:0c:09:ed:00:54:d7:97:04:b5:cd:27:
                    f8:c7:25:f8:5b:bd:d3:d0:06:36:ec:64:cc:62:83:
                    09:8c:04:1b:b1:a7:db:69:9a:8f:47:12:f4:37:66:
                    76:e6:25:c9:53:d4:a9:30:a6:ab:d4:6c:8e:d9:6e:
                    1c:c5:aa:01:61:1c:da:ff:15:bf:01:88:e7:9d:eb:
                    13:d3:71:64:3a:12:33:7e:34:01:12:d3:f2:2e:40:
                    3a:f4:bf:13:82:b2:e6:f6:94:a2:a3:35:cd:12:2e:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:FE:BD:77:D7:20:FA:B8:5F:9C:40:29:48:54:A7:A2:92:E8:0B
            X509v3 Authority Key Identifier:
                keyid:B0:01:4A:83:06:C5:2E:40:4F:67:CA:2F:8E:58:6F:9B:86:8E:8C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FA25/2BBCBCAA1DAC11EAAF4A3763C4F9AE02/sAFKgwbFLkBPZ8ovjlhvm4aOjKs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:96:f3:67:88:2f:f9:77:09:a8:be:33:ea:c5:b4:0b:88:
         f1:80:86:40:fc:b0:b7:47:a8:fa:7b:cd:9c:db:9e:18:51:7b:
         ea:6a:15:8a:89:8c:96:d6:bc:ff:5f:66:b6:ad:53:ad:49:29:
         e4:44:b5:89:f0:9d:fe:1b:e2:87:e5:4f:a9:8d:36:ab:60:12:
         96:3c:70:51:87:60:3f:cc:af:62:42:98:dd:53:d0:7c:0b:6b:
         72:f1:8a:6a:30:f9:f7:a9:41:2a:c8:5f:43:d2:7f:65:e1:57:
         54:a4:a2:76:44:cf:3d:d3:89:0e:39:ef:de:fd:0f:68:96:0a:
         b1:8f:0b:a2:07:65:cd:77:68:95:9c:5c:b7:65:6a:4a:12:08:
         2a:27:04:f0:72:d9:88:54:bc:1b:28:d0:56:ae:ee:e2:a1:3c:
         77:1a:63:df:91:03:02:24:35:d0:92:0e:09:28:1e:6d:93:15:
         3c:28:d6:ce:1f:5e:81:ee:08:51:13:45:8e:bc:66:92:e3:62:
         da:56:3a:b4:86:53:a5:6c:2d:5d:cb:b2:3c:00:7a:45:3e:33:
         d8:65:df:6a:dc:4b:53:28:86:53:f2:8e:87:0f:50:16:15:7a:
         bf:20:02:23:02:cd:0d:1b:81:08:bc:5b:d8:12:a6:d0:f1:23:
         05:25:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----