This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
File:                     QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json)
Hash identifier:          jSXHjl89tP1jGITVV+dF6gbi/AdTDVoFHLY282ltB7A=
Subject key identifier:   0B:F9:F7:B2:FF:61:30:2F:EF:92:7A:BC:D9:91:4C:65:B8:63:B5:8A
Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45
Certificate issuer:       /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
Manifest number:          014E
Signing time:             Wed 24 Dec 2025 00:24:20 +0000
Manifest this update:     Wed 24 Dec 2025 00:24:19 +0000
Manifest next update:     Wed 31 Dec 2025 00:24:19 +0000
Files and hashes:         1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: VJ2W7Kql1s3lDKjDZ3sXngMKivMMyD3uHCMR9R0TVp0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
        Validity
            Not Before: Dec 24 00:24:19 2025 GMT
            Not After : Dec 31 00:24:19 2025 GMT
        Subject: CN=694b32b3-c781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:8d:e6:8b:43:d0:73:5c:eb:42:e3:be:77:
                    fd:60:cc:36:c4:59:11:c6:3a:53:f8:b5:1a:1a:1a:
                    63:f7:65:88:10:ea:36:41:46:16:09:1f:9a:99:8b:
                    c9:61:bf:5e:28:2c:e1:ed:b2:32:b1:23:94:be:24:
                    4c:59:cd:cc:78:e3:e8:8e:92:68:8c:ca:94:4e:d4:
                    53:b1:d6:2c:7e:3d:ae:9d:98:d4:7a:30:a4:67:d6:
                    69:ea:a0:b8:09:8b:02:b2:6c:94:ed:a6:3e:09:56:
                    04:67:df:cd:44:56:cd:72:df:83:da:ce:3f:9b:80:
                    a6:bc:7e:7d:55:cb:e7:df:86:86:d9:a9:cc:24:93:
                    0c:04:76:08:ab:88:0e:83:25:50:3e:34:dc:e3:1d:
                    63:28:4d:05:3f:7f:4b:31:f7:53:c1:f0:0b:bb:0b:
                    94:d2:e4:bd:c8:67:6c:29:02:21:d1:79:5d:b9:8c:
                    16:ec:0d:e9:41:16:c7:7e:09:56:b9:91:6a:2c:02:
                    ff:ce:79:4f:e4:3e:ff:8e:a7:2e:d4:64:2a:72:bd:
                    32:40:5e:16:30:76:e2:8e:8f:3f:09:77:ca:1a:f1:
                    50:75:39:5c:c9:ca:67:f1:bf:b1:6f:ea:42:83:be:
                    70:27:98:6e:33:5b:d8:76:84:14:86:43:0b:9f:a8:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F9:F7:B2:FF:61:30:2F:EF:92:7A:BC:D9:91:4C:65:B8:63:B5:8A
            X509v3 Authority Key Identifier:
                keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:36:80:a9:4c:1d:c0:ab:ff:83:39:fc:cf:f1:07:60:5a:
         66:18:d4:07:3f:38:ae:fa:50:b0:8a:de:bd:fb:21:d7:a8:e9:
         88:32:3f:43:13:68:88:f0:e1:fd:ce:38:bd:54:4f:69:b4:ef:
         70:d6:77:f7:1c:a7:c5:23:17:86:00:db:85:e7:82:31:ad:22:
         74:e8:38:1f:fd:66:47:9d:e7:43:9d:f7:2f:a9:35:61:1f:50:
         82:62:7f:bf:bc:31:30:0b:b5:ca:c5:16:cd:f6:46:7d:4d:28:
         58:0a:d7:ac:27:cb:9a:4b:5f:c0:85:32:38:93:0f:1e:76:e7:
         c5:d9:b8:ac:5c:22:20:5d:cc:a3:93:f8:47:e0:06:65:9e:3c:
         5a:ca:7c:f5:29:ff:38:69:fc:92:da:a9:2d:c1:5e:f4:c8:7e:
         72:86:08:8c:36:3c:20:5f:5d:e2:c2:53:b4:0d:4a:d7:b3:6a:
         a9:0a:95:2a:ca:76:ba:54:2d:5d:48:df:02:68:ed:ef:a0:0d:
         2e:64:fa:d9:37:79:61:b3:61:dd:c1:2c:f5:a7:89:63:03:1f:
         39:81:ac:30:e0:11:50:d4:62:51:cf:5e:11:55:b1:f8:49:fe:
         7b:4a:4b:f9:1c:66:59:8c:c0:d1:e7:db:06:94:38:8b:1d:ae:
         9b:89:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----