This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft
File:                     3qB5KN5ChJYNLNXo50cChCYLMmY.mft (raw, json)
Hash identifier:          jEunQA8WPbdjeGleBEHnhznS36Ondfi4UcPlpZhgE7w=
Subject key identifier:   27:6B:FD:79:52:5A:9D:99:6D:96:C1:E6:84:34:E8:35:6F:E9:34:FE
Authority key identifier: DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66
Certificate issuer:       /CN=A9171AD3/serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266
Certificate serial:       08B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft
Manifest number:          08A8
Signing time:             Wed 13 Aug 2025 09:02:17 +0000
Manifest this update:     Wed 13 Aug 2025 09:02:16 +0000
Manifest next update:     Wed 20 Aug 2025 09:02:16 +0000
Files and hashes:         1: 3qB5KN5ChJYNLNXo50cChCYLMmY.crl (hash: zjgKSKoh9fRNlIQd1u9ch0u+OiG6VmVD6CdV012+Fpw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171AD3, serialNumber=DEA07928DE4284960D2CD5E8E7470284260B3266
        Validity
            Not Before: Aug 13 09:02:16 2025 GMT
            Not After : Aug 20 09:02:16 2025 GMT
        Subject: CN=689c5499-d42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:e2:a9:3c:99:06:8b:e8:c5:af:58:46:44:
                    16:2a:2a:51:d9:c7:e9:8c:32:12:2f:03:bb:40:2c:
                    18:6d:04:ff:35:df:8e:32:8d:e0:7f:1d:bc:f4:c0:
                    ce:3b:1c:dc:05:29:22:a1:89:ea:fd:05:e9:2c:e6:
                    d4:91:11:72:16:86:78:c4:3a:b4:f1:3c:11:f0:10:
                    2a:02:ed:a3:33:d7:bf:60:8a:33:c5:65:74:c0:c5:
                    2e:26:0c:74:7d:be:f5:af:ce:d6:60:1d:ee:1a:13:
                    28:10:40:63:df:75:de:72:a4:42:f4:6c:49:ab:11:
                    6b:69:c3:7e:96:36:0b:1a:47:82:8d:9b:37:66:f8:
                    83:50:a8:47:76:fb:77:73:5a:02:be:17:00:48:26:
                    50:78:6a:2b:f3:9a:14:b7:d9:59:25:d4:a5:f3:c5:
                    50:d7:75:4c:1e:7b:a7:c9:bf:57:69:d2:ad:4d:c3:
                    29:f5:1e:25:c3:30:d2:71:18:51:ae:69:57:e3:f5:
                    b9:1f:b4:81:db:42:3e:70:16:7c:17:8c:2f:59:6a:
                    73:c5:60:a2:35:73:16:a1:0a:88:ae:ef:c7:20:16:
                    32:9e:49:47:d6:39:93:28:4f:1b:38:46:e9:1b:7b:
                    65:d0:04:22:f2:1f:68:40:c5:42:5c:bc:67:76:da:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6B:FD:79:52:5A:9D:99:6D:96:C1:E6:84:34:E8:35:6F:E9:34:FE
            X509v3 Authority Key Identifier:
                keyid:DE:A0:79:28:DE:42:84:96:0D:2C:D5:E8:E7:47:02:84:26:0B:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qB5KN5ChJYNLNXo50cChCYLMmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171AD3/0BC4F840C1B211EA83278767C4F9AE02/3qB5KN5ChJYNLNXo50cChCYLMmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:ca:52:35:20:40:82:7b:24:47:06:37:27:77:76:22:a9:
         d6:c2:c3:34:5c:58:6b:2f:8a:50:a4:3a:64:53:3a:6f:9d:9a:
         e5:85:c2:02:3d:6d:dc:62:a3:1f:80:45:f0:db:63:c4:58:c5:
         5d:8f:19:a2:3f:cf:c9:a2:8c:61:3c:99:7f:31:bd:09:f0:43:
         38:c4:0c:c0:d9:f4:88:7f:16:f8:ff:ba:b0:90:7e:d6:36:0d:
         7b:e6:a9:2b:96:a8:bd:05:f3:c0:c3:a2:ee:49:15:f4:01:c2:
         0a:bd:69:3b:01:a6:66:c5:28:8c:d7:29:a9:cc:33:8d:cc:86:
         25:ca:58:44:13:7a:b3:55:4e:a3:c0:28:8e:2b:df:87:55:39:
         5a:d4:1b:d0:b7:ad:02:d1:a3:78:2b:a1:75:18:78:d6:85:bb:
         c3:19:fc:9a:bf:a4:54:ce:87:a6:d0:fa:bd:ec:62:9b:4b:17:
         fe:7c:f8:1b:90:3a:ad:cd:3f:8a:2c:3d:64:3a:2c:04:99:04:
         cd:df:fb:97:42:ba:4f:9b:d8:b6:e6:6d:33:f2:39:89:89:6e:
         c5:fb:97:f4:30:55:05:61:99:82:47:e4:0d:5a:24:90:b8:0a:
         3b:b7:fb:a6:da:40:df:7d:ab:c5:58:73:69:6b:ce:23:8f:53:
         cb:14:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----