This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
File:                     Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft (raw, json)
Hash identifier:          Ypv5sEVhDQf0GzEOPhuQ5scP+iqp2xO0k3wxe2x5kiQ=
Subject key identifier:   DD:12:76:8E:0E:2F:BC:F1:DB:0D:AF:AA:E7:99:76:41:00:A7:A9:C9
Authority key identifier: 63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99
Certificate issuer:       /CN=A9188593/serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
Manifest number:          6C
Signing time:             Tue 30 Sep 2025 02:19:21 +0000
Manifest this update:     Tue 30 Sep 2025 02:19:20 +0000
Manifest next update:     Tue 07 Oct 2025 02:19:20 +0000
Files and hashes:         1: Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl (hash: Xz+P5wKvFCJx2Pu9oXLza0smiAw0PAd2nXXmxvpblu8=)
                          2: A60DE226FA6611EFA2492D77C4F9AE02.roa (hash: EaDsWh2ev+tCV5xfJvG7800tAekhxcSYZkZKsSGYDqo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188593, serialNumber=636FD140D09ECA4D18EF2CB73AEDB12479FDCC99
        Validity
            Not Before: Sep 30 02:19:20 2025 GMT
            Not After : Oct  7 02:19:20 2025 GMT
        Subject: CN=68db3e28-94e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:74:98:85:a7:1b:e3:cc:b3:00:0f:c8:99:
                    61:10:17:c4:79:39:bf:c7:8b:0d:e1:98:a3:d8:fd:
                    11:f3:29:fe:f2:47:d1:54:84:68:4e:67:3a:a9:0e:
                    5e:ae:87:eb:03:57:04:a7:9a:09:17:72:39:71:16:
                    6a:66:f8:f5:7a:99:f1:72:94:dc:d9:91:d5:0d:a8:
                    0c:2a:39:dd:63:85:d1:65:ef:bc:9d:6c:ac:32:26:
                    e9:72:9b:94:f3:68:de:08:2c:3a:aa:4a:c6:de:e7:
                    cc:b9:35:08:d9:06:c3:93:94:b4:d9:d7:a7:02:45:
                    14:42:48:7f:2f:ea:50:ce:bc:d9:8d:c5:dc:5f:1f:
                    97:2d:5f:28:c3:d7:32:0e:78:b3:4c:3e:af:e9:2e:
                    69:a2:e0:f4:ab:f5:21:37:1a:f1:7a:de:a5:7d:89:
                    88:34:e8:23:fb:54:3f:2c:cf:36:40:92:5b:75:1e:
                    5a:16:67:40:2a:5a:96:bb:56:bb:45:98:9f:f8:13:
                    68:23:8f:b2:bf:df:88:bc:ca:38:31:62:98:a1:c9:
                    00:61:cb:88:e3:49:70:c9:28:34:14:65:7f:e9:de:
                    ac:34:03:8a:c0:07:13:a6:ca:18:59:38:f8:6d:c3:
                    32:92:56:19:07:51:a7:14:33:a2:14:c5:01:07:4d:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:76:8E:0E:2F:BC:F1:DB:0D:AF:AA:E7:99:76:41:00:A7:A9:C9
            X509v3 Authority Key Identifier:
                keyid:63:6F:D1:40:D0:9E:CA:4D:18:EF:2C:B7:3A:ED:B1:24:79:FD:CC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188593/1D155986FA6611EFBB2D4A76C4F9AE02/Y2_RQNCeyk0Y7yy3Ou2xJHn9zJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:c7:72:81:e4:4d:0d:e5:7c:d0:7d:25:16:94:a4:55:9c:
         e5:85:0c:9d:e6:06:e9:ba:3d:fa:a2:a6:a7:28:1a:25:f4:c3:
         79:8b:4b:b6:15:ed:00:ef:a1:dd:68:1c:d0:fb:2d:3b:1f:32:
         ed:21:02:3e:e7:8c:81:50:36:09:60:0c:fc:9c:5c:61:f2:32:
         b0:c1:76:d7:92:2c:31:e6:9b:5c:9a:97:79:8c:6c:03:53:5c:
         0e:cc:84:d0:f3:c2:7b:6c:fb:42:dc:6a:bf:fc:9d:42:92:32:
         65:ed:39:e5:60:af:97:5e:36:83:c2:d1:d6:56:c3:40:bd:ce:
         8a:d6:eb:5a:61:07:be:d9:fa:8f:e2:99:ab:e2:c6:ee:8d:06:
         50:73:2d:83:e5:62:c5:5f:67:bd:1f:53:9f:dd:ac:cf:96:6d:
         71:6d:4a:27:29:f3:5d:c5:fc:4e:e5:d3:f1:2c:5f:3e:1b:8b:
         c0:53:a0:39:2a:65:6a:cb:9a:b4:10:31:b1:e1:68:17:1b:04:
         0f:67:50:a3:73:9d:b9:43:85:3e:ec:8d:ac:53:e3:33:8d:e1:
         81:04:ee:6c:c7:d1:b2:a4:49:91:ba:6e:11:33:9a:60:0f:9f:
         3f:35:46:7b:a4:5c:98:a7:3f:8d:91:d2:35:32:b9:1a:2e:2e:
         59:ab:49:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
ODU5MzExMC8GA1UEBRMoNjM2RkQxNDBEMDlFQ0E0RDE4RUYyQ0I3M0FFREIxMjQ3
OUZEQ0M5OTAeFw0yNTA5MzAwMjE5MjBaFw0yNTEwMDcwMjE5MjBaMBgxFjAUBgNV
BAMTDTY4ZGIzZTI4LTk0ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkunSYhacb48yzAA/ImWEQF8R5Ob/Hiw3hmKPY/RHzKf7yR9FUhGhOZzqpDl6u
h+sDVwSnmgkXcjlxFmpm+PV6mfFylNzZkdUNqAwqOd1jhdFl77ydbKwyJulym5Tz
aN4ILDqqSsbe58y5NQjZBsOTlLTZ16cCRRRCSH8v6lDOvNmNxdxfH5ctXyjD1zIO
eLNMPq/pLmmi4PSr9SE3GvF63qV9iYg06CP7VD8szzZAklt1HloWZ0AqWpa7VrtF
mJ/4E2gjj7K/34i8yjgxYpihyQBhy4jjSXDJKDQUZX/p3qw0A4rABxOmyhhZOPht
wzKSVhkHUacUM6IUxQEHTcjzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3RJ2jg4v
vPHbDa+q55l2QQCnqckwHwYDVR0jBBgwFoAUY2/RQNCeyk0Y7yy3Ou2xJHn9zJkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4NTkzLzFEMTU1OTg2RkE2
NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWswWTd5eTNPdTJ4SkhuOXpK
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTJfUlFOQ2V5azBZN3l5M091MnhKSG45ekprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4
NTkzLzFEMTU1OTg2RkE2NjExRUZCQjJENEE3NkM0RjlBRTAyL1kyX1JRTkNleWsw
WTd5eTNPdTJ4SkhuOXpKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJvZx3KB5E0N5XzQfSUWlKRVnOWFDJ3mBum6PfqipqcoGiX0w3mLS7YV
7QDvod1oHND7LTsfMu0hAj7njIFQNglgDPycXGHyMrDBdteSLDHmm1yal3mMbANT
XA7MhNDzwnts+0Lcar/8nUKSMmXtOeVgr5deNoPC0dZWw0C9zorW61phB77Z+o/i
mavixu6NBlBzLYPlYsVfZ70fU5/drM+WbXFtSicp813F/E7l0/EsXz4bi8BToDkq
ZWrLmrQQMbHhaBcbBA9nUKNznblDhT7sjaxT4zON4YEE7mzH0bKkSZG6bhEzmmAP
nz81RnukXJinP42R0jUyuRouLlmrSbM=
-----END CERTIFICATE-----
Generated at Mon Dec 22 16:00:15 2025 by rpki-client