This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
File:                     bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json)
Hash identifier:          BsoYZxZ0iMEK37YHZJYJsVAvs2GEH1gaSrNBwWly8Dw=
Subject key identifier:   57:02:E3:BB:1A:9A:20:F7:8A:8A:20:E4:7A:80:74:7A:57:85:CD:38
Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D
Certificate issuer:       /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
Manifest number:          01DA
Signing time:             Mon 27 Oct 2025 04:28:57 +0000
Manifest this update:     Mon 27 Oct 2025 04:28:56 +0000
Manifest next update:     Mon 03 Nov 2025 04:28:56 +0000
Files and hashes:         1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: 94u9vvWQgr8rLThHoKGq7R1gMF9lpTXcvrBey7orCkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D
        Validity
            Not Before: Oct 27 04:28:56 2025 GMT
            Not After : Nov  3 04:28:56 2025 GMT
        Subject: CN=68fef509-2906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:92:ca:33:22:88:73:cd:bf:1b:79:c1:80:
                    60:c0:4f:41:37:df:dc:ff:51:86:f3:1d:7c:20:f4:
                    7d:03:53:c3:61:b0:97:6c:ae:51:57:5e:25:73:81:
                    6a:1a:7a:84:ac:98:64:2c:84:39:a9:d3:38:f2:2d:
                    0d:ba:12:0d:71:36:27:49:96:fe:90:91:5b:49:63:
                    a9:72:a6:a5:42:eb:6f:1a:cb:21:27:55:10:a3:83:
                    3e:7d:b4:42:86:97:43:14:04:3e:d7:4a:f1:b2:73:
                    01:1b:21:c7:96:7b:4c:2c:69:6d:cd:6c:3a:22:03:
                    ef:d7:f8:19:04:11:cd:14:5b:23:bf:c3:0c:fc:e6:
                    17:02:dd:cb:da:c2:d4:a0:da:b8:37:bd:6a:66:ec:
                    f5:81:cb:ac:80:9d:95:76:94:a5:d2:ea:b7:e9:97:
                    21:43:66:ed:09:2d:59:4b:fd:17:6d:e8:48:5b:46:
                    60:33:01:16:3c:11:ac:59:af:79:09:53:09:77:89:
                    8b:c9:a0:65:d2:b6:d7:0a:c8:26:eb:ff:e5:bb:48:
                    54:27:e6:78:75:aa:ce:be:48:8b:d2:73:de:20:4e:
                    c2:6c:a5:97:89:0c:a3:e7:cf:07:20:12:63:35:b5:
                    08:3f:0e:fa:d8:ac:a5:44:e4:95:48:40:48:1b:0d:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:E3:BB:1A:9A:20:F7:8A:8A:20:E4:7A:80:74:7A:57:85:CD:38
            X509v3 Authority Key Identifier:
                keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:f9:d6:73:47:9b:f6:75:88:63:f6:aa:c3:75:e9:20:9f:
         02:f7:26:ce:b9:a1:5e:61:1f:e4:bb:92:d7:40:52:d4:0f:36:
         66:62:ba:1d:57:f3:02:e8:b1:09:1a:a5:61:32:80:b5:f7:e4:
         41:d9:fa:bc:bb:c6:95:b7:61:ef:f6:b0:96:57:16:03:2d:9e:
         f9:e7:fe:ce:63:58:2d:db:ee:64:7e:4d:c5:b5:41:e9:99:ee:
         26:94:c6:f8:2b:e9:d0:84:bc:67:94:4f:3a:10:9a:9f:fc:c2:
         6a:b2:ac:09:ab:6e:cc:03:e8:58:e7:88:65:c4:62:4b:70:81:
         7f:42:3e:a9:1d:a1:89:e3:62:fb:14:13:2d:1a:2b:31:89:63:
         67:22:2a:c8:ac:fe:39:71:71:69:30:45:e0:c9:6b:ae:e0:7b:
         b6:82:d5:fb:71:72:d2:40:bf:3d:77:02:b4:30:34:f5:06:72:
         de:8a:a4:d5:d1:3b:e9:6f:cc:76:36:65:24:74:93:77:93:cf:
         f0:4d:8f:22:06:85:d8:0e:e2:31:dd:46:6d:a1:f5:51:ab:57:
         3e:f6:4b:f2:c1:b6:36:8b:61:a1:2a:24:3a:3f:d4:38:bd:fe:
         4b:e5:7f:67:ab:db:c9:73:6d:8c:03:81:09:68:19:1e:4d:34:
         a1:2d:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----