This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft
File:                     qNV21K-7ZARbsClWQbmUJ9f4ePI.mft (raw, json)
Hash identifier:          MQWzpBzHbkQuJB1Bn4291AYW2TyuPz8TwcK0c9gB2tc=
Subject key identifier:   D4:96:82:1A:5E:90:90:F9:8F:44:C5:6B:D4:93:17:37:C1:E7:1A:FE
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Certificate issuer:       /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft
Manifest number:          0716
Signing time:             Tue 08 Jul 2025 22:40:13 +0000
Manifest this update:     Tue 08 Jul 2025 22:40:12 +0000
Manifest next update:     Tue 15 Jul 2025 22:40:12 +0000
Files and hashes:         1: qNV21K-7ZARbsClWQbmUJ9f4ePI.crl (hash: Ts/ymqsg1HjzoJZowCHR4NuCdrOa7j6ahTRlI6n0nJ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C1DC, serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
        Validity
            Not Before: Jul  8 22:40:12 2025 GMT
            Not After : Jul 15 22:40:12 2025 GMT
        Subject: CN=686d9e4d-3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:35:59:e4:70:ee:16:4f:e7:40:d7:0d:bf:
                    21:f5:ff:c9:cc:03:7f:f1:a9:95:41:4b:81:a8:73:
                    8d:f8:bd:09:dc:ea:13:9a:70:f3:06:d3:a8:89:a5:
                    95:01:a8:d8:33:8c:53:a9:dd:94:14:5f:8d:d9:32:
                    75:e3:97:9d:f2:30:76:d5:62:96:43:37:a0:dd:42:
                    d3:0b:a8:d8:95:8c:38:9e:2e:f7:d7:bd:a5:48:a6:
                    1c:c5:e1:42:59:d3:5b:72:01:13:dd:ee:70:76:e0:
                    37:90:70:7f:9a:08:a3:69:c3:b9:d9:b9:bf:00:b2:
                    b1:55:56:f9:e6:da:35:11:48:29:bc:67:94:26:ed:
                    83:6f:6f:5d:20:e0:eb:21:82:4e:5c:f1:c9:00:e1:
                    c5:23:bb:31:6e:f5:aa:ec:70:d4:44:cb:f9:5a:f6:
                    a5:a1:50:c9:17:62:70:e5:45:58:24:82:a6:19:9b:
                    d7:f3:32:7d:5c:b4:3b:54:d1:82:88:d9:8d:73:b9:
                    3e:a8:c5:1a:59:cf:a4:64:da:e3:f6:67:34:83:d0:
                    c7:9d:51:64:37:86:8b:8b:22:51:09:7a:1c:2f:fb:
                    11:48:bb:06:5d:b7:cf:0f:9a:4d:78:5c:22:bb:98:
                    b9:f3:2e:90:4c:5b:89:1c:b5:b9:92:a1:e4:a3:46:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:96:82:1A:5E:90:90:F9:8F:44:C5:6B:D4:93:17:37:C1:E7:1A:FE
            X509v3 Authority Key Identifier:
                keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:54:27:b2:d7:96:34:8f:0c:2d:6c:02:94:29:93:68:4b:
         ec:ba:0d:3f:81:11:b5:7e:4c:28:c1:81:8e:4c:59:57:87:22:
         5c:dc:90:ba:d2:90:6d:98:40:5a:44:64:5a:08:34:d0:5d:7d:
         54:f9:19:3b:38:2b:1d:da:41:bd:b4:10:d1:90:00:96:0a:8a:
         b2:47:cd:eb:88:2f:75:ed:5e:49:61:82:f7:25:44:f6:aa:d5:
         57:ac:79:2a:3b:2a:58:dd:ef:81:96:84:b4:51:5a:e6:96:8d:
         80:11:ef:48:91:55:7b:f6:b9:89:bf:a7:f8:11:99:70:5e:3d:
         8b:36:ad:35:50:39:f3:1f:f0:01:3b:f6:6d:d8:08:4f:94:74:
         f3:3a:f8:f1:65:4c:ca:49:76:85:f8:f5:72:29:e3:98:60:3c:
         b5:93:fd:2a:85:c5:b7:09:46:69:c6:b8:e7:5c:e3:51:72:1d:
         fb:58:f7:a8:f8:9f:d4:63:18:9d:2c:8d:d8:d5:ae:16:99:09:
         51:58:47:bc:f5:28:c1:cc:80:bc:4b:1c:b8:5d:81:2e:5b:85:
         ef:a4:ba:9d:b4:ee:5f:ec:b8:e5:ea:a6:7a:f0:b1:75:a9:fb:
         b9:09:fd:b6:78:14:1b:56:4a:07:f0:34:b1:3a:64:b8:61:62:
         f6:6a:b0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----