This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
File:                     ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft (raw, json)
Hash identifier:          q8JP4EmXW3g5a1tazzyQUg8rGEjfq5DxVUYtcv2+h1w=
Subject key identifier:   86:0B:C9:5C:77:F8:F0:FA:F2:BA:0C:69:93:88:96:F5:8B:6D:3B:FA
Authority key identifier: 66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49
Certificate issuer:       /CN=A9123DB1/serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
Certificate serial:       1425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
Manifest number:          141D
Signing time:             Tue 18 Nov 2025 06:41:19 +0000
Manifest this update:     Tue 18 Nov 2025 06:41:18 +0000
Manifest next update:     Tue 25 Nov 2025 06:41:18 +0000
Files and hashes:         1: ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl (hash: 9jGGqaa1sQ6MoLVF0V451WQ9oSPyarLP/pvV2UcSEpc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5157 (0x1425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123DB1, serialNumber=66C2CD1D2BAC78264852F12D18B218C05E448849
        Validity
            Not Before: Nov 18 06:41:18 2025 GMT
            Not After : Nov 25 06:41:18 2025 GMT
        Subject: CN=691c150f-515a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:75:a1:29:15:34:5a:02:54:3f:08:d9:5c:
                    b8:9a:15:e2:5f:c1:16:c4:74:46:b2:76:c3:11:0f:
                    dd:d7:c9:32:ab:c9:ac:8d:ac:51:f0:9a:5c:cf:0f:
                    05:cb:fb:ea:82:3c:ae:cb:b5:9d:7d:bf:bf:ec:c4:
                    e6:00:6b:09:a9:53:b6:03:0b:91:2d:8b:af:63:3b:
                    e5:95:d6:bf:d6:c4:ae:6d:77:e0:b0:01:c2:ca:77:
                    11:4f:a9:88:e4:e8:b5:ff:13:87:f7:2f:0e:08:9a:
                    22:5d:d8:e5:2a:69:c4:16:a5:a5:81:35:22:fa:8f:
                    64:6c:c1:a4:0b:5c:06:8b:58:ce:df:3d:ba:73:66:
                    96:ab:09:17:f1:a5:df:03:ab:28:ae:11:ad:e8:62:
                    39:7b:1a:5a:fa:e0:ac:d5:24:06:4b:ec:5a:d3:37:
                    bf:59:75:c9:f5:a0:cf:43:87:6f:b5:81:d1:70:50:
                    23:b5:ab:9e:e8:9c:0a:41:1d:0d:d2:eb:1d:52:8c:
                    46:07:db:7c:54:b4:a9:f8:af:2b:dd:34:4d:8c:60:
                    09:ab:38:4b:16:23:b6:bb:38:c4:2d:df:16:a7:c3:
                    a2:9a:6e:64:c2:15:a8:7e:ff:4b:56:b9:4c:58:e4:
                    2e:e6:0a:25:d9:9a:e6:b5:82:6c:41:bd:5a:16:87:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0B:C9:5C:77:F8:F0:FA:F2:BA:0C:69:93:88:96:F5:8B:6D:3B:FA
            X509v3 Authority Key Identifier:
                keyid:66:C2:CD:1D:2B:AC:78:26:48:52:F1:2D:18:B2:18:C0:5E:44:88:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLNHSuseCZIUvEtGLIYwF5EiEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123DB1/DA2A42BE8BC011E897C79156C4F9AE02/ZsLNHSuseCZIUvEtGLIYwF5EiEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:b0:7a:ff:4a:f3:d7:76:e6:53:89:d1:05:0d:28:8c:b6:
         44:f4:f5:96:85:fd:f2:b5:8a:69:3c:a2:fe:7e:2e:b3:de:fa:
         50:7b:39:30:11:9c:bf:8e:98:40:3f:01:d1:89:de:21:00:b0:
         59:d6:0e:79:68:a7:0e:29:27:5d:02:60:d4:e2:ba:43:ca:9e:
         57:97:50:a0:c7:6d:d1:08:b5:a4:95:70:ec:ef:1f:ea:d3:39:
         12:7c:46:0e:59:34:35:f2:b0:15:d0:6f:30:bd:52:e2:b6:05:
         b6:94:c4:1d:0a:9b:7d:9b:ff:fd:e1:51:5b:87:76:0a:df:a7:
         46:2a:cf:0d:70:35:47:5b:28:43:38:66:13:e2:33:be:5d:8b:
         75:7c:dd:b8:18:ad:3d:46:48:08:d8:78:8d:cc:f2:a1:86:04:
         9c:c3:d4:2c:8a:27:1d:bb:9c:d4:f0:91:6c:49:02:da:bb:63:
         85:56:cf:cc:3a:4d:ed:d0:57:94:01:37:d7:7c:26:2a:ed:ce:
         1e:14:4b:08:c9:ae:ef:05:0c:3c:9a:74:19:19:47:25:41:7e:
         14:16:a5:ac:53:ba:86:eb:d1:97:d5:43:14:d9:95:0f:a1:e0:
         00:30:ec:83:39:bd:ed:46:93:8a:a3:70:e6:0f:c6:70:f5:1f:
         1c:c8:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----