This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
File:                     Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft (raw, json)
Hash identifier:          qDSPi/UHQr2Ed5RByEHx9NECZDznFnTX15Wusg73Hok=
Subject key identifier:   E2:76:F7:47:FA:11:93:04:BC:DF:00:AC:48:88:F5:EC:3F:99:A5:B6
Authority key identifier: 0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34
Certificate issuer:       /CN=A91CC1BE/serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
Certificate serial:       0CB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
Manifest number:          0C9B
Signing time:             Wed 08 Oct 2025 18:16:57 +0000
Manifest this update:     Wed 08 Oct 2025 18:16:56 +0000
Manifest next update:     Wed 15 Oct 2025 18:16:56 +0000
Files and hashes:         1: Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl (hash: 2agFQIq5LOAZbLnJm1Mdcg1NzQCeV09xPQuutrz43jI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1BE, serialNumber=0A37EC91E827E169C862B44CD876B1D376413734
        Validity
            Not Before: Oct  8 18:16:56 2025 GMT
            Not After : Oct 15 18:16:56 2025 GMT
        Subject: CN=68e6aa98-0b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:31:f4:1b:3c:2f:09:57:94:7e:64:8d:7f:
                    8f:0e:a7:ec:04:a7:84:a1:1a:5d:3c:18:01:b5:53:
                    b3:86:b7:d0:35:48:b4:8c:b9:95:d6:4b:57:27:a8:
                    e5:14:15:64:0f:07:20:82:17:25:d3:19:d2:40:dd:
                    73:a3:c9:b8:e5:d8:ba:7f:5a:1b:d0:2d:36:16:1c:
                    8e:d3:15:20:ec:01:53:3d:5b:ce:a2:6c:a8:ee:f3:
                    96:34:25:be:8d:9b:27:2f:7d:dd:25:34:4c:08:87:
                    00:a9:65:63:d4:95:6c:65:a5:53:df:53:80:f0:d0:
                    27:60:cd:9f:d1:77:75:52:69:9e:52:4f:3a:1f:09:
                    c3:eb:b1:c1:e7:dc:99:e3:d4:ec:6e:0a:1e:b2:ec:
                    74:8b:70:20:39:eb:29:1f:57:e1:36:72:38:c1:c5:
                    b4:d3:f8:e4:fc:c4:e4:87:9f:ac:6a:cf:43:7d:fe:
                    3e:43:8f:16:cb:e6:86:3a:c6:2f:eb:b7:04:4f:70:
                    6f:be:f8:df:7c:d1:7b:82:7b:b9:91:c7:e0:2b:4e:
                    1c:97:85:4f:21:fe:49:7a:8e:ec:4e:18:2c:b4:76:
                    11:be:94:7d:bf:74:a2:e4:c7:5e:9c:00:a9:aa:9e:
                    ce:fd:b9:1d:f8:0b:9c:1f:86:94:3a:b9:d4:76:8d:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:F7:47:FA:11:93:04:BC:DF:00:AC:48:88:F5:EC:3F:99:A5:B6
            X509v3 Authority Key Identifier:
                keyid:0A:37:EC:91:E8:27:E1:69:C8:62:B4:4C:D8:76:B1:D3:76:41:37:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjfskegn4WnIYrRM2Hax03ZBNzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1BE/E1EABF0A048311EA8028BE2FC4F9AE02/Cjfskegn4WnIYrRM2Hax03ZBNzQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:62:b8:08:c8:a0:f1:97:2f:75:db:94:dc:c3:1d:1f:d5:
         4d:20:e9:4f:74:2c:f2:3e:ac:09:4c:f3:c1:f7:d9:7c:7a:3e:
         c2:f1:6c:c0:83:33:3e:70:23:0a:a2:b6:8b:62:fc:19:50:14:
         b4:12:16:59:a7:ef:87:0e:09:bb:c7:0a:14:e0:3d:d2:ce:ec:
         56:33:a5:67:72:17:13:34:93:85:9d:b7:80:d0:78:f0:f4:33:
         8c:38:bb:82:43:6f:5e:78:63:61:9c:ef:f0:2e:4f:a8:80:a6:
         b5:37:32:f9:87:64:7c:2f:cc:a7:2d:37:16:96:0b:63:05:22:
         df:5b:cb:f9:b0:bc:c3:d6:ef:ea:e2:41:45:25:27:16:26:72:
         93:49:3c:f3:d8:c3:26:49:4e:11:f0:d1:03:0b:8e:3c:a1:43:
         ba:41:1a:e7:a3:96:42:9c:d4:74:7d:9f:cd:af:52:3e:53:59:
         cb:de:57:26:fa:b3:b9:66:e8:d2:64:0e:ef:98:7e:7f:f8:f5:
         cf:8b:fb:c5:d6:ec:0a:58:0d:54:45:f2:b1:c6:f3:8c:46:23:
         b8:51:92:15:ce:fc:94:d5:30:4a:9c:03:4f:96:c7:0d:76:03:
         cb:9c:7c:d8:3e:d5:58:f5:9f:6b:a9:d9:5b:19:35:02:66:66:
         92:4a:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----