This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          iYyHNZ8IeJnkLMCku/w3NBwtAs5+5mUWy4d8UxIGJbY=
Subject key identifier:   C4:89:74:91:FD:BA:48:4A:64:7F:57:A8:FE:34:75:83:23:A7:7C:BA
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          01A4
Signing time:             Mon 22 Dec 2025 02:23:18 +0000
Manifest this update:     Mon 22 Dec 2025 02:23:18 +0000
Manifest next update:     Mon 29 Dec 2025 02:23:18 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: HZOAGMaiX0MSf/whhVTtUtAoClM6mhxg3r+/SjWIr3c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Dec 22 02:23:18 2025 GMT
            Not After : Dec 29 02:23:18 2025 GMT
        Subject: CN=6948ab96-f817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:63:67:5f:da:01:7e:6f:2a:c8:3f:e9:86:
                    82:7d:e3:bc:b2:32:dd:2b:25:90:30:d8:58:91:46:
                    2b:37:51:b7:05:5d:68:12:d0:4b:6f:ae:c6:b7:1d:
                    40:0e:ff:15:8f:62:31:4e:9e:90:e1:6a:75:01:f9:
                    f0:27:aa:f6:5c:09:b9:49:06:6f:7a:55:ba:24:9d:
                    69:f4:13:fe:8d:44:7a:f8:1f:85:7c:20:51:9d:06:
                    d0:bf:f9:80:a4:f4:13:f7:8a:92:3c:e1:f7:32:6b:
                    5f:21:c6:f5:35:43:d1:bf:5f:65:48:98:f1:ac:7c:
                    4b:06:c7:3b:f8:c1:aa:70:57:fa:68:75:f9:85:c2:
                    26:39:a6:3a:cf:df:42:55:f6:87:53:9f:4e:b0:cf:
                    4f:64:b4:39:d0:fc:f8:88:b4:29:57:a3:db:1b:54:
                    5a:e5:58:5d:8e:2e:3d:7d:2b:56:0e:29:7f:c1:af:
                    b2:75:93:67:60:f0:6f:45:47:6b:90:a9:d2:36:7a:
                    23:5e:16:78:0c:84:fa:35:52:e3:d4:38:21:3d:c6:
                    02:55:dd:46:ce:c1:95:e7:bd:74:e1:7e:5f:3a:50:
                    92:db:a5:03:34:bf:f5:17:db:71:ce:ac:b0:5c:dc:
                    c0:fc:06:f6:b1:28:fd:f0:d1:16:bb:77:93:3b:dc:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:74:91:FD:BA:48:4A:64:7F:57:A8:FE:34:75:83:23:A7:7C:BA
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:da:14:4d:38:2b:9f:25:0c:25:e5:d7:02:bc:36:18:ee:
         e6:e1:12:55:49:45:0d:6e:b5:81:81:51:ca:93:64:a7:29:f5:
         23:f6:9f:42:79:aa:41:86:af:5b:63:19:56:78:38:e2:74:64:
         aa:ca:03:a0:10:c5:c6:0b:9c:0d:aa:51:ee:ed:24:9d:a5:e2:
         89:90:47:a9:b3:f0:bc:87:06:53:b5:ce:46:44:a2:e8:f9:89:
         d9:0c:33:cb:96:b0:95:32:2a:b7:36:53:7a:41:c7:03:f2:9c:
         5e:f1:bc:b1:5e:32:b2:89:85:2f:53:d2:27:f4:3c:ba:3a:d0:
         4a:d7:f4:8b:40:b3:69:66:b2:d6:52:d5:d3:6c:98:21:d9:83:
         e8:5b:af:95:0f:fd:51:1c:0b:6d:c8:12:da:dc:1c:4f:22:e3:
         df:65:42:e7:cd:21:76:08:fe:a6:75:3a:e1:55:c5:91:5d:f5:
         ac:32:05:0f:88:b7:aa:b0:2f:46:80:0a:04:f2:3a:df:62:9e:
         bc:2f:64:eb:e5:06:f3:31:36:3e:2b:19:74:00:4c:52:a2:dd:
         3e:03:40:13:6c:60:2b:65:29:7d:21:eb:98:e4:bd:25:1b:8c:
         db:2b:2b:a8:9f:33:af:32:e0:9f:7c:34:bc:c4:60:6e:7c:ef:
         fd:3c:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----