This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
File:                     cXie4rLIt_u60_eFpd3s7xXMFaQ.mft (raw, json)
Hash identifier:          osHMaU64nmbhCjqgjEAPzdSt1ccnz8tpKKAKdG6Es+w=
Subject key identifier:   FD:C9:36:04:EF:11:E6:D3:F1:2B:FC:32:08:9C:BA:86:2A:2F:87:0D
Authority key identifier: 71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4
Certificate issuer:       /CN=A9138171/serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
Certificate serial:       07C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
Manifest number:          07B5
Signing time:             Tue 30 Sep 2025 21:40:00 +0000
Manifest this update:     Tue 30 Sep 2025 21:39:59 +0000
Manifest next update:     Tue 07 Oct 2025 21:39:59 +0000
Files and hashes:         1: cXie4rLIt_u60_eFpd3s7xXMFaQ.crl (hash: gh//O67wRw8hr0RvhpiFyjxn5Ga3fkCTlqn0EPowtik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138171, serialNumber=71789EE2B2C8B7FBBAD3F785A5DDECEF15CC15A4
        Validity
            Not Before: Sep 30 21:39:59 2025 GMT
            Not After : Oct  7 21:39:59 2025 GMT
        Subject: CN=68dc4e2f-d604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:81:fb:94:72:55:4d:96:2e:4d:21:60:76:
                    01:89:2e:7d:2a:35:87:1f:3a:39:5e:e4:7d:cc:d3:
                    56:06:13:7e:7a:42:a2:57:b6:3b:40:b0:10:68:a5:
                    87:dd:fa:35:a6:bc:ed:ec:55:a4:b4:f2:cc:39:7a:
                    09:39:f1:08:5a:98:f3:9d:a8:2e:26:b9:9c:50:71:
                    7c:ff:b6:69:aa:25:54:5d:ad:47:0c:92:3d:81:ee:
                    57:68:1e:2c:85:c3:05:4d:3a:b0:5a:4a:96:d4:7a:
                    8c:4f:51:63:62:43:d5:87:fd:01:ba:be:19:09:34:
                    af:36:b3:fc:dc:3e:eb:48:70:3f:9a:d3:d1:49:5d:
                    ae:39:8c:0b:3b:7a:30:93:9f:b5:f2:fe:fb:12:6d:
                    a2:aa:75:ac:cc:4e:f9:47:d4:ee:23:53:db:f3:69:
                    a2:e6:53:a6:f3:b7:36:81:33:78:b9:22:ab:ed:73:
                    c0:64:49:b3:0b:53:1e:5c:b7:5d:22:cb:0f:c1:56:
                    fc:c6:27:a6:2e:83:f8:da:2c:fd:c4:b0:61:eb:86:
                    44:ed:8d:1e:fb:a6:fc:6d:ba:82:5c:b7:23:4f:b2:
                    95:2d:10:a9:5f:9f:36:eb:f4:4f:50:a4:dd:a2:bc:
                    6a:4c:70:9f:81:69:2b:ca:b3:27:84:47:f2:a9:43:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C9:36:04:EF:11:E6:D3:F1:2B:FC:32:08:9C:BA:86:2A:2F:87:0D
            X509v3 Authority Key Identifier:
                keyid:71:78:9E:E2:B2:C8:B7:FB:BA:D3:F7:85:A5:DD:EC:EF:15:CC:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXie4rLIt_u60_eFpd3s7xXMFaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138171/75D64D1218BD11EB8B844345C4F9AE02/cXie4rLIt_u60_eFpd3s7xXMFaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:db:92:c6:d9:6e:7d:30:ce:76:ae:b1:59:61:4f:da:17:
         cb:81:f6:43:00:54:2e:f1:0b:8e:7c:10:fa:c7:9f:ff:1c:b9:
         4c:06:4e:12:7f:75:f0:6f:f7:80:a0:51:e2:f4:a8:06:01:66:
         ce:ef:7b:f4:39:01:a3:a2:77:05:97:da:ea:7f:dc:3f:8b:d8:
         c2:ba:a3:89:4d:79:58:34:06:2e:e1:f2:91:4c:2f:4b:2f:0b:
         8f:a1:89:d0:17:5e:60:a8:d4:76:82:d6:e7:1f:92:4b:ee:28:
         c5:70:35:63:1a:b7:05:03:88:1d:0c:0f:0a:51:25:34:df:53:
         12:83:1f:06:8c:a2:cc:4d:cb:be:4a:73:2f:38:1b:df:dc:f9:
         6b:1c:43:ce:c1:3b:18:fc:04:ba:3b:ec:a8:7c:7f:79:38:f5:
         1b:f6:15:82:a6:59:d3:00:8b:43:b5:d8:94:8a:f8:c4:c0:25:
         b4:74:49:ac:29:ed:ab:20:4e:cf:9d:65:55:0a:e9:7b:f2:01:
         f8:37:85:73:f6:bf:b2:1d:f6:69:56:39:b6:82:50:b7:57:41:
         99:ff:b8:97:34:f0:ba:23:1b:aa:42:e3:c2:7a:83:da:a0:b1:
         d9:0d:d0:0d:1e:79:c6:fd:87:19:76:27:6d:bf:f0:8d:d1:39:
         6e:e7:b8:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgxNzExMTAvBgNVBAUTKDcxNzg5RUUyQjJDOEI3RkJCQUQzRjc4NUE1RERFQ0VG
MTVDQzE1QTQwHhcNMjUwOTMwMjEzOTU5WhcNMjUxMDA3MjEzOTU5WjAYMRYwFAYD
VQQDEw02OGRjNGUyZi1kNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw/qB+5RyVU2WLk0hYHYBiS59KjWHHzo5XuR9zNNWBhN+ekKiV7Y7QLAQaKWH
3fo1przt7FWktPLMOXoJOfEIWpjznaguJrmcUHF8/7ZpqiVUXa1HDJI9ge5XaB4s
hcMFTTqwWkqW1HqMT1FjYkPVh/0Bur4ZCTSvNrP83D7rSHA/mtPRSV2uOYwLO3ow
k5+18v77Em2iqnWszE75R9TuI1Pb82mi5lOm87c2gTN4uSKr7XPAZEmzC1MeXLdd
IssPwVb8xiemLoP42iz9xLBh64ZE7Y0e+6b8bbqCXLcjT7KVLRCpX5826/RPUKTd
orxqTHCfgWkryrMnhEfyqUNzkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3JNgTv
EebT8Sv8MgicuoYqL4cNMB8GA1UdIwQYMBaAFHF4nuKyyLf7utP3haXd7O8VzBWk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE3MS83NUQ2NEQxMjE4
QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRfdTYwX2VGcGQzczd4WE1G
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NYaWU0ckxJdF91NjBfZUZwZDNzN3hYTUZhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODE3MS83NUQ2NEQxMjE4QkQxMUVCOEI4NDQzNDVDNEY5QUUwMi9jWGllNHJMSXRf
dTYwX2VGcGQzczd4WE1GYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgFNuSxtlufTDOdq6xWWFP2hfLgfZDAFQu8QuOfBD6x5//HLlMBk4S
f3Xwb/eAoFHi9KgGAWbO73v0OQGjoncFl9rqf9w/i9jCuqOJTXlYNAYu4fKRTC9L
LwuPoYnQF15gqNR2gtbnH5JL7ijFcDVjGrcFA4gdDA8KUSU031MSgx8GjKLMTcu+
SnMvOBvf3PlrHEPOwTsY/AS6O+yofH95OPUb9hWCplnTAItDtdiUivjEwCW0dEms
Ke2rIE7PnWVVCul78gH4N4Vz9r+yHfZpVjm2glC3V0GZ/7iXNPC6IxuqQuPCeoPa
oLHZDdANHnnG/YcZdidtv/CN0Tlu57hb
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:05:36 2025 by rpki-client