This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
File:                     KOoVV7meKxJ1Uc00DDqvTAphAGs.mft (raw, json)
Hash identifier:          KA9YUojB5ZyfXBUCGqQ3QEBJSpYC2fuVsSwZAfN5vB4=
Subject key identifier:   20:C0:BB:CC:81:6D:95:75:0D:D1:81:A0:31:58:A2:62:29:33:69:81
Authority key identifier: 28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B
Certificate issuer:       /CN=A91900BF/serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
Certificate serial:       03A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
Manifest number:          0394
Signing time:             Wed 27 Aug 2025 01:09:23 +0000
Manifest this update:     Wed 27 Aug 2025 01:09:22 +0000
Manifest next update:     Wed 03 Sep 2025 01:09:22 +0000
Files and hashes:         1: KOoVV7meKxJ1Uc00DDqvTAphAGs.crl (hash: XzatrVEXSqMcBpRMAC3Z4f4JFMtRnC6tmIaWQuy/mYQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91900BF, serialNumber=28EA1557B99E2B127551CD340C3AAF4C0A61006B
        Validity
            Not Before: Aug 27 01:09:22 2025 GMT
            Not After : Sep  3 01:09:22 2025 GMT
        Subject: CN=68ae5ac2-7c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:f8:47:4b:00:52:d9:21:d4:a9:ec:a6:49:
                    54:f9:8d:69:84:db:c1:3a:ed:02:87:26:cb:be:9f:
                    8b:51:e4:71:d1:b2:bf:f5:01:9c:68:ff:53:d6:79:
                    56:c7:f3:86:b6:94:05:b9:26:f8:b6:ae:91:90:19:
                    ce:1f:7a:b8:02:18:2c:45:14:06:11:7c:94:b1:0b:
                    39:6e:1a:93:2c:b7:f3:53:fb:cb:09:ff:8d:e5:f2:
                    f8:ff:ad:b9:2f:8a:63:e4:e7:d7:35:4b:32:ac:1c:
                    6d:fc:56:4a:0a:ed:fc:23:1b:d6:74:69:75:e0:32:
                    49:f2:31:eb:70:c2:39:3a:d0:93:0c:7b:f8:49:e0:
                    e1:ff:06:6b:57:08:97:6c:36:e4:f6:13:86:4b:d8:
                    91:37:b2:86:81:7f:6e:3e:61:e0:5b:1c:42:b4:fb:
                    18:d2:00:bf:11:0e:58:79:6d:c1:5b:7a:0a:98:b0:
                    f7:39:84:64:48:64:55:d5:99:97:b0:a5:db:38:b2:
                    b2:21:40:eb:b7:72:08:e1:be:db:89:1f:ea:8c:c6:
                    7e:2c:11:94:66:a2:7a:63:36:35:da:63:18:55:6c:
                    36:15:8d:2e:ed:34:f9:e6:d8:98:af:4e:89:06:95:
                    f6:0b:47:6c:83:5e:16:3a:c5:f0:b4:9a:9f:53:40:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:BB:CC:81:6D:95:75:0D:D1:81:A0:31:58:A2:62:29:33:69:81
            X509v3 Authority Key Identifier:
                keyid:28:EA:15:57:B9:9E:2B:12:75:51:CD:34:0C:3A:AF:4C:0A:61:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOoVV7meKxJ1Uc00DDqvTAphAGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91900BF/FEA1CD68B6E311ECBE59992DC4F9AE02/KOoVV7meKxJ1Uc00DDqvTAphAGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:73:2e:81:e0:e9:5d:78:a6:43:82:94:54:cc:9e:19:1f:e7:
         f7:69:dc:3e:cb:ee:d0:46:fb:e9:ce:3e:69:74:ef:c0:3d:5e:
         87:39:de:24:f7:a6:f2:a6:8f:11:22:76:36:7f:87:60:1d:b6:
         ca:20:7b:b3:94:b9:45:76:a8:07:8f:c3:60:16:ff:36:7c:a2:
         8b:59:14:86:8c:88:f0:40:36:9c:4b:be:42:02:44:ef:86:0d:
         ee:ed:7a:79:80:05:20:40:9b:6a:36:58:96:12:4a:8b:1a:8e:
         d7:d8:7b:7e:e4:ab:52:cf:38:9f:ad:0e:33:e9:6d:81:5f:06:
         8e:7b:a3:0f:77:fd:8b:b6:fe:3c:50:49:60:82:6f:ee:ad:2f:
         af:52:52:46:dd:c6:57:51:93:63:08:03:f7:c9:88:e3:bb:e5:
         49:22:62:46:0e:68:fc:e5:84:bc:94:0b:26:b7:25:69:bd:4d:
         ea:e6:d7:36:bb:0e:4b:82:df:07:cb:0a:3d:8c:d8:70:07:fb:
         62:db:f7:70:3c:2a:51:2f:00:eb:c4:e9:7b:80:10:82:cd:cd:
         ef:e7:17:04:c4:07:f7:00:2f:a0:81:33:9c:9c:31:ef:3e:80:
         c8:94:a6:c7:8f:d5:5b:0e:08:15:75:ce:79:1d:11:a9:ec:8f:
         64:85:65:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAwQkYxMTAvBgNVBAUTKDI4RUExNTU3Qjk5RTJCMTI3NTUxQ0QzNDBDM0FBRjRD
MEE2MTAwNkIwHhcNMjUwODI3MDEwOTIyWhcNMjUwOTAzMDEwOTIyWjAYMRYwFAYD
VQQDEw02OGFlNWFjMi03Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Wb4R0sAUtkh1KnspklU+Y1phNvBOu0ChybLvp+LUeRx0bK/9QGcaP9T1nlW
x/OGtpQFuSb4tq6RkBnOH3q4AhgsRRQGEXyUsQs5bhqTLLfzU/vLCf+N5fL4/625
L4pj5OfXNUsyrBxt/FZKCu38IxvWdGl14DJJ8jHrcMI5OtCTDHv4SeDh/wZrVwiX
bDbk9hOGS9iRN7KGgX9uPmHgWxxCtPsY0gC/EQ5YeW3BW3oKmLD3OYRkSGRV1ZmX
sKXbOLKyIUDrt3II4b7biR/qjMZ+LBGUZqJ6YzY12mMYVWw2FY0u7TT55tiYr06J
BpX2C0dsg14WOsXwtJqfU0CgPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDAu8yB
bZV1DdGBoDFYomIpM2mBMB8GA1UdIwQYMBaAFCjqFVe5nisSdVHNNAw6r0wKYQBr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDBCRi9GRUExQ0Q2OEI2
RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4SjFVYzAwRERxdlRBcGhB
R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPb1ZWN21lS3hKMVVjMDBERHF2VEFwaEFHcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDBCRi9GRUExQ0Q2OEI2RTMxMUVDQkU1OTk5MkRDNEY5QUUwMi9LT29WVjdtZUt4
SjFVYzAwRERxdlRBcGhBR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9cy6B4OldeKZDgpRUzJ4ZH+f3adw+y+7QRvvpzj5pdO/APV6HOd4k
96bypo8RInY2f4dgHbbKIHuzlLlFdqgHj8NgFv82fKKLWRSGjIjwQDacS75CAkTv
hg3u7Xp5gAUgQJtqNliWEkqLGo7X2Ht+5KtSzzifrQ4z6W2BXwaOe6MPd/2Ltv48
UElggm/urS+vUlJG3cZXUZNjCAP3yYjju+VJImJGDmj85YS8lAsmtyVpvU3q5tc2
uw5Lgt8Hywo9jNhwB/ti2/dwPCpRLwDrxOl7gBCCzc3v5xcExAf3AC+ggTOcnDHv
PoDIlKbHj9VbDggVdc55HRGp7I9khWUB
-----END CERTIFICATE-----