This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft
File:                     LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json)
Hash identifier:          nlTY+Tv2xaU766i83/yfJX34egglQ4hajWIYWITS5gA=
Subject key identifier:   67:3F:5B:4D:19:ED:97:12:9F:CD:A6:33:1C:45:68:17:0E:F4:57:72
Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43
Certificate issuer:       /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043
Certificate serial:       0C13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft
Manifest number:          1480
Signing time:             Mon 01 Dec 2025 09:24:21 +0000
Manifest this update:     Mon 01 Dec 2025 09:24:21 +0000
Manifest next update:     Mon 08 Dec 2025 09:24:21 +0000
Files and hashes:         1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: lOuR2EPUEwxAQVahOF+CMAhaQl18RuPA+PZ0rLAWr+k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3091 (0xc13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043
        Validity
            Not Before: Dec  1 09:24:21 2025 GMT
            Not After : Dec  8 09:24:21 2025 GMT
        Subject: CN=692d5ec5-a70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:de:70:e3:4d:45:25:76:46:af:3e:b3:9d:
                    1b:bf:e9:69:ef:13:ca:45:07:99:f2:d4:94:9e:90:
                    e9:24:13:22:c8:ae:66:b4:24:be:c1:97:24:e8:32:
                    69:86:c1:f3:02:66:71:75:46:51:c5:2a:4a:64:4a:
                    41:9c:eb:eb:73:ef:5f:e1:83:b6:f6:d5:ff:e6:63:
                    df:bb:00:c9:f0:cb:cf:d6:16:40:85:3c:a3:3c:c1:
                    f0:84:f2:d6:c2:61:79:ff:01:10:6a:c8:61:46:e7:
                    f6:c3:62:df:74:c0:ba:8b:9a:5d:1c:59:d7:a5:a3:
                    f2:46:58:03:84:61:68:50:7d:c6:d5:ab:50:98:f3:
                    f9:5d:63:a4:f4:73:a3:9c:4a:d9:fb:aa:76:88:a6:
                    3d:98:54:33:ce:b8:44:4a:b9:ea:b4:c3:96:4b:a1:
                    e3:10:83:d0:97:ae:8d:34:c0:1c:8f:4c:42:db:c4:
                    6c:1b:ab:04:b2:e6:8e:50:89:4c:35:87:fe:01:04:
                    d4:d4:ac:96:b2:9d:65:ab:31:76:02:ee:c9:31:1e:
                    b3:29:4a:00:96:a0:40:d9:53:0b:99:c1:cd:ab:63:
                    d7:fd:c2:ce:da:59:c0:49:3c:2d:c0:5a:01:3b:f6:
                    12:ff:b3:d0:1a:53:0d:5c:40:27:a7:79:e5:ac:e3:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3F:5B:4D:19:ED:97:12:9F:CD:A6:33:1C:45:68:17:0E:F4:57:72
            X509v3 Authority Key Identifier:
                keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a9:2b:4a:0a:01:0c:8b:0e:e5:4f:14:94:35:80:0f:e0:a0:
         cd:dc:de:b1:1b:a6:e3:51:89:61:72:8b:b1:89:73:30:40:c0:
         a7:92:9a:02:2c:60:52:8c:32:ca:bc:b0:af:cf:08:43:b6:14:
         22:c7:69:0e:cf:84:59:d5:6a:be:d5:3b:de:3b:f7:ea:b2:c2:
         34:88:67:83:d2:6a:19:25:90:b7:f3:bf:a4:23:6d:62:35:23:
         a0:ab:0b:47:03:c0:fd:f0:52:ac:79:57:b6:3b:52:73:b5:c5:
         e3:a2:76:e1:61:a6:fe:6f:88:c8:50:59:93:7f:b6:10:4d:1d:
         df:66:71:48:73:25:4d:a8:4f:42:a8:a5:49:82:3c:1a:c9:3c:
         ad:3c:41:be:09:13:46:3b:71:06:d6:e8:80:e3:17:4d:3a:c5:
         c9:75:23:78:0b:da:38:1f:0a:71:0d:dd:ea:01:2c:e8:07:13:
         2c:4e:7a:d3:27:65:13:66:bc:f2:0d:5d:84:92:71:a2:2f:ef:
         16:9b:fa:ab:85:5c:31:7c:5f:56:e1:8f:88:2a:2c:36:d3:de:
         6e:c7:42:59:0a:92:34:d4:c5:11:4e:42:3f:01:fd:88:62:94:
         f8:d1:43:40:c1:47:16:55:8b:73:33:1d:a0:1e:b1:f3:64:e1:
         a9:2a:41:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz
QzE4ODgwNDMwHhcNMjUxMjAxMDkyNDIxWhcNMjUxMjA4MDkyNDIxWjAYMRYwFAYD
VQQDEw02OTJkNWVjNS1hNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkjecONNRSV2Rq8+s50bv+lp7xPKRQeZ8tSUnpDpJBMiyK5mtCS+wZck6DJp
hsHzAmZxdUZRxSpKZEpBnOvrc+9f4YO29tX/5mPfuwDJ8MvP1hZAhTyjPMHwhPLW
wmF5/wEQashhRuf2w2LfdMC6i5pdHFnXpaPyRlgDhGFoUH3G1atQmPP5XWOk9HOj
nErZ+6p2iKY9mFQzzrhESrnqtMOWS6HjEIPQl66NNMAcj0xC28RsG6sEsuaOUIlM
NYf+AQTU1KyWsp1lqzF2Au7JMR6zKUoAlqBA2VMLmcHNq2PX/cLO2lnASTwtwFoB
O/YS/7PQGlMNXEAnp3nlrONiKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc/W00Z
7ZcSn82mMxxFaBcO9FdyMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG
QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX
dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsqStKCgEMiw7lTxSUNYAP4KDN3N6xG6bjUYlhcouxiXMwQMCnkpoC
LGBSjDLKvLCvzwhDthQix2kOz4RZ1Wq+1TveO/fqssI0iGeD0moZJZC387+kI21i
NSOgqwtHA8D98FKseVe2O1JztcXjonbhYab+b4jIUFmTf7YQTR3fZnFIcyVNqE9C
qKVJgjwayTytPEG+CRNGO3EG1uiA4xdNOsXJdSN4C9o4HwpxDd3qASzoBxMsTnrT
J2UTZrzyDV2EknGiL+8Wm/qrhVwxfF9W4Y+IKiw2095ux0JZCpI01MURTkI/Af2I
YpT40UNAwUcWVYtzMx2gHrHzZOGpKkEZ
-----END CERTIFICATE-----
Generated at Tue Dec 23 06:05:22 2025 by rpki-client