This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft
File:                     B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft (raw, json)
Hash identifier:          x97MMDzXiU5VSqwzQ5YggrygrYGJQVike3KTLS7rllM=
Subject key identifier:   F7:99:E0:EF:90:79:F5:0A:D0:9E:F0:81:C7:32:0F:4C:43:E6:8C:39
Authority key identifier: B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E
Certificate issuer:       /CN=A918C2870000/serialNumber=B4A66791B91CC52F44FD2E5FE714A9833ED4A51E
Certificate serial:       695F4DD240E23909025EF49B8CFA793817C59817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft
Manifest number:          02
Signing time:             Wed 12 Nov 2025 00:38:39 +0000
Manifest this update:     Wed 12 Nov 2025 00:33:39 +0000
Manifest next update:     Thu 13 Nov 2025 01:43:39 +0000
Files and hashes:         1: 3230332e3137362e3138392e302f32342d3234203d3e203635353336.roa (hash: 3iDqAc9hY/zLmeYkbqhJdFzcJpDw2TPuxurT2FVTTXs=)
                          2: B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.crl (hash: SRT1SSH2iq64LyI/w/ip+af62x/GUjVuGWaMPQSubhQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5f:4d:d2:40:e2:39:09:02:5e:f4:9b:8c:fa:79:38:17:c5:98:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C2870000, serialNumber=B4A66791B91CC52F44FD2E5FE714A9833ED4A51E
        Validity
            Not Before: Nov 12 00:33:39 2025 GMT
            Not After : Nov 13 01:43:39 2025 GMT
        Subject: CN=F799E0EF9079F50AD09EF081C7320F4C43E68C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:fa:3c:3b:ac:2d:58:9c:f6:62:59:8e:08:
                    fd:bf:ae:ad:f6:fe:01:06:11:b1:28:7e:55:47:cb:
                    b5:d9:e0:33:65:d0:e2:20:33:e9:84:fc:17:5e:5a:
                    73:29:a5:38:dc:03:8c:79:39:78:a5:b3:83:01:aa:
                    12:32:db:d2:ed:a8:ab:a7:e8:87:a6:4e:cc:6e:2f:
                    79:5b:bd:35:96:9a:28:0d:6d:26:94:01:f4:fa:83:
                    73:ed:9d:4a:a3:ad:38:87:39:5c:a5:06:93:49:1d:
                    8f:db:49:03:37:4c:79:6a:fa:85:e6:ea:3f:ef:08:
                    19:56:76:92:73:15:cb:f5:26:94:9e:8d:4b:7f:12:
                    8b:21:eb:f3:2a:44:13:56:9b:e5:87:2f:99:2e:d5:
                    69:78:e1:c8:ec:6b:08:01:e7:33:a2:06:58:9c:fd:
                    b8:1f:ca:d3:50:3c:0f:93:67:4f:d4:f1:47:e2:ff:
                    06:a9:be:ed:13:5c:74:e2:e6:f6:2c:d6:61:02:8b:
                    da:27:17:35:36:06:19:ae:53:e2:f0:28:cb:ed:cd:
                    73:75:1e:8c:de:e6:68:8c:a5:37:cd:da:ad:be:9d:
                    cd:6e:d2:d3:80:60:c0:75:39:27:6c:e1:8a:0c:c2:
                    f0:d4:df:1c:a1:a5:6d:ca:a3:a9:81:07:f9:2b:5d:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:E0:EF:90:79:F5:0A:D0:9E:F0:81:C7:32:0F:4C:43:E6:8C:39
            X509v3 Authority Key Identifier:
                keyid:B4:A6:67:91:B9:1C:C5:2F:44:FD:2E:5F:E7:14:A9:83:3E:D4:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tKZnkbkcxS9E_S5f5xSpgz7UpR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/B4A66791B91CC52F44FD2E5FE714A9833ED4A51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:fb:0b:b0:41:3b:5b:e6:2b:b7:6b:2a:97:da:6e:4f:a7:76:
         e2:44:03:95:ff:c9:67:72:6e:40:61:72:db:5b:f7:bc:3f:c0:
         fe:84:c6:43:68:ea:e9:db:72:e8:26:d2:52:b7:fc:35:fc:73:
         1d:50:75:fa:d3:5b:45:ec:11:ee:44:ec:2b:fa:aa:02:95:ea:
         c1:e0:ba:70:ea:77:19:df:d8:5f:a2:39:67:c0:a0:e6:67:f8:
         91:d9:d8:08:3b:fd:6e:60:90:e1:0f:98:0b:05:71:91:e5:6a:
         b6:26:25:27:a1:30:64:f2:87:e8:4e:69:48:a8:c0:18:d3:33:
         40:c7:d2:47:fe:b0:94:9d:4d:a4:31:f6:f4:8f:13:30:6b:8b:
         a8:a0:bb:5c:a6:15:79:3c:cb:21:cb:c9:80:59:c5:0f:b0:90:
         19:a9:92:a1:a8:24:f5:b1:f5:a1:ab:fd:c1:ca:ba:30:09:cc:
         81:c6:6f:4e:74:f3:60:1b:ca:80:cd:9d:ec:62:91:f6:36:95:
         4e:22:62:58:01:b8:8d:36:c5:5b:9f:fd:19:92:c1:91:8c:a2:
         85:16:d9:29:c7:0c:de:50:ed:be:3f:5c:14:6e:04:6c:db:4a:
         35:5f:f0:71:ff:d1:2a:11:2e:9a:14:35:5e:09:85:b4:3f:b7:
         e4:eb:04:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaV9N0kDiOQkCXvSbjPp5OBfFmBcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEMyODcwMDAwMTEwLwYDVQQFEyhCNEE2Njc5MUI5
MUNDNTJGNDRGRDJFNUZFNzE0QTk4MzNFRDRBNTFFMB4XDTI1MTExMjAwMzMzOVoX
DTI1MTExMzAxNDMzOVowMzExMC8GA1UEAxMoRjc5OUUwRUY5MDc5RjUwQUQwOUVG
MDgxQzczMjBGNEM0M0U2OEMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJI7+jw7rC1YnPZiWY4I/b+urfb+AQYRsSh+VUfLtdngM2XQ4iAz6YT8F15a
cymlONwDjHk5eKWzgwGqEjLb0u2oq6foh6ZOzG4veVu9NZaaKA1tJpQB9PqDc+2d
SqOtOIc5XKUGk0kdj9tJAzdMeWr6hebqP+8IGVZ2knMVy/UmlJ6NS38SiyHr8ypE
E1ab5YcvmS7VaXjhyOxrCAHnM6IGWJz9uB/K01A8D5NnT9TxR+L/Bqm+7RNcdOLm
9izWYQKL2icXNTYGGa5T4vAoy+3Nc3UejN7maIylN83arb6dzW7S04BgwHU5J2zh
igzC8NTfHKGlbcqjqYEH+StdxF8CAwEAAaOCAhswggIXMB0GA1UdDgQWBBT3meDv
kHn1CtCe8IHHMg9MQ+aMOTAfBgNVHSMEGDAWgBS0pmeRuRzFL0T9Ll/nFKmDPtSl
HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4NzAwMDAvMC9CNEE2Njc5
MUI5MUNDNTJGNDRGRDJFNUZFNzE0QTk4MzNFRDRBNTFFLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi90S1pua2JrY3hT
OUVfUzVmNXhTcGd6N1VwUjQuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE4QzI4
NzAwMDAvMC9CNEE2Njc5MUI5MUNDNTJGNDRGRDJFNUZFNzE0QTk4MzNFRDRBNTFF
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAwvsLsEE7W+Yrt2sql9puT6d24kQDlf/JZ3JuQGFy21v3vD/A
/oTGQ2jq6dty6CbSUrf8NfxzHVB1+tNbRewR7kTsK/qqApXqweC6cOp3Gd/YX6I5
Z8Cg5mf4kdnYCDv9bmCQ4Q+YCwVxkeVqtiYlJ6EwZPKH6E5pSKjAGNMzQMfSR/6w
lJ1NpDH29I8TMGuLqKC7XKYVeTzLIcvJgFnFD7CQGamSoagk9bH1oav9wcq6MAnM
gcZvTnTzYBvKgM2d7GKR9jaVTiJiWAG4jTbFW5/9GZLBkYyihRbZKccM3lDtvj9c
FG4EbNtKNV/wcf/RKhEumhQ1XgmFtD+35OsEBA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:42:29 2025 by rpki-client