This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
File:                     7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json)
Hash identifier:          90tM2ayr5l6AvzDjT5j+TSJJcjGej1YpQ4692M9JtPs=
Subject key identifier:   19:09:7D:4E:66:9B:E3:87:E2:86:47:54:3B:DC:95:84:0A:A0:60:22
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Certificate issuer:       /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
Manifest number:          013B
Signing time:             Wed 01 Oct 2025 05:33:20 +0000
Manifest this update:     Wed 01 Oct 2025 05:33:19 +0000
Manifest next update:     Wed 08 Oct 2025 05:33:19 +0000
Files and hashes:         1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: WuplaMl7g9dNl+qTb1xZnZS2T2NN64bcHFkjMgqn92U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
        Validity
            Not Before: Oct  1 05:33:19 2025 GMT
            Not After : Oct  8 05:33:19 2025 GMT
        Subject: CN=68dcbd1f-6e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1c:b8:34:b8:44:b2:d6:05:df:7a:5b:8e:d8:
                    86:1f:c0:d9:61:35:32:63:52:e4:57:60:d2:48:4a:
                    ef:37:59:1e:f0:fd:51:b8:e0:52:26:ed:2b:ce:3d:
                    c2:6e:21:58:f6:0e:ca:16:11:0e:9d:ba:39:4a:a6:
                    4a:f1:a0:d3:26:39:5b:e2:57:bb:bc:c6:d9:79:34:
                    44:0f:3d:ff:6c:04:39:93:e4:36:a3:a9:8d:d9:94:
                    8f:e6:0e:e4:85:94:14:57:ae:f1:62:b0:28:cd:52:
                    11:8a:44:4a:86:fe:8e:c4:53:2e:9e:3d:49:2b:3d:
                    7b:86:1f:a3:53:55:df:33:1b:0a:de:d8:f9:64:28:
                    7d:6d:1a:b5:42:b5:db:fa:a1:b7:bb:93:86:46:c6:
                    6a:eb:a0:ff:df:96:5d:c8:ef:5f:b9:c5:eb:60:a8:
                    41:1f:5c:ce:09:cd:89:ce:2a:31:f5:37:54:6b:d9:
                    8a:a4:dc:89:1b:f9:1d:58:38:cc:79:6b:58:a6:90:
                    6a:25:a5:ca:cc:c6:ba:52:58:a2:c9:1a:4e:ef:9c:
                    22:1c:f0:65:8a:34:88:57:d1:43:a4:a7:92:b1:a3:
                    56:d8:1a:8e:6d:16:26:2a:16:26:9c:52:37:73:13:
                    41:6a:82:80:3f:6b:b6:ba:de:d7:ee:73:c8:59:2d:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:09:7D:4E:66:9B:E3:87:E2:86:47:54:3B:DC:95:84:0A:A0:60:22
            X509v3 Authority Key Identifier:
                keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e7:d3:05:d3:6d:6e:43:56:90:31:19:7b:c7:45:52:ff:8d:
         c2:98:8f:a5:b3:5d:93:22:40:83:d8:c1:52:18:b2:d7:f7:66:
         a7:39:3b:37:9d:f2:1c:78:a6:2a:63:a7:18:dc:5a:5d:61:25:
         83:4b:81:dd:73:be:fe:e6:e6:77:3d:25:5a:bf:f3:19:08:45:
         5b:b1:5b:82:89:4a:d9:70:fa:f8:f9:d5:89:96:53:4e:50:cc:
         23:a6:dd:94:f8:d4:dc:e9:27:bc:12:94:d5:ae:30:67:3d:5d:
         e8:76:96:da:ce:98:4c:43:82:0d:4e:c8:42:b4:0a:26:39:17:
         a3:b1:3e:1b:f0:a4:18:93:e3:50:7f:c5:0d:d3:16:c7:ff:a5:
         87:27:36:c6:d8:c1:e4:d6:6c:9a:e1:93:ac:73:04:cc:d1:a1:
         86:e5:68:8b:bf:d1:a0:09:c0:f0:8f:93:05:d8:3e:5e:4b:b4:
         0a:c8:c5:b3:5c:a2:76:a8:46:58:f3:c5:4b:b4:81:2c:4e:1c:
         79:cc:48:3a:e6:bb:de:59:94:0b:f4:99:bb:f3:ce:eb:78:06:
         5e:1f:1e:46:fa:2e:4d:41:13:51:a3:f6:1c:4e:37:ff:ef:99:
         7f:44:51:34:f5:6a:47:a9:84:c6:93:e0:5b:dc:93:27:4a:b5:
         5c:1e:92:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----