This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft
File:                     xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json)
Hash identifier:          IJDoV7ZtqMURtwh3A5ALa+Irp0zZz93PX0YYdulYPes=
Subject key identifier:   04:8F:78:40:B4:46:08:D6:3D:AF:06:A3:2D:44:2A:E5:73:6D:88:6C
Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4
Certificate issuer:       /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4
Certificate serial:       02E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft
Manifest number:          02DD
Signing time:             Thu 09 Oct 2025 05:46:21 +0000
Manifest this update:     Thu 09 Oct 2025 05:46:20 +0000
Manifest next update:     Thu 16 Oct 2025 05:46:20 +0000
Files and hashes:         1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: M4OMaXxrkfmmlHj5pwgLp36pP9OvQ8aq+4ta0Aaomdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745 (0x2e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4
        Validity
            Not Before: Oct  9 05:46:20 2025 GMT
            Not After : Oct 16 05:46:20 2025 GMT
        Subject: CN=68e74c2c-58a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:63:41:94:47:a7:92:ac:7a:4f:29:5d:21:
                    c2:13:ba:36:fe:ba:bd:aa:eb:8e:78:83:39:de:53:
                    d0:44:b9:ed:5d:f5:9b:6d:8d:19:2a:8d:ca:d8:c1:
                    c3:17:fb:0e:78:33:c7:59:78:36:28:73:68:3b:16:
                    c8:e3:1d:7a:d2:b9:f9:88:b8:d6:87:9a:d3:f0:39:
                    42:ed:e9:0d:77:02:5e:9a:a9:07:76:fe:19:82:08:
                    93:33:19:4b:b4:3e:30:d9:4c:6a:e8:ed:16:de:f8:
                    4f:e1:14:24:dd:74:8e:ab:2b:8e:aa:77:87:75:a8:
                    8a:9e:c6:7a:74:0e:33:0b:1f:c9:21:90:35:7e:9c:
                    a1:e4:4b:53:25:3f:a8:9b:2d:6f:9a:aa:3f:11:3a:
                    a5:1a:82:36:48:9d:37:39:60:c8:a1:3b:62:67:b6:
                    2f:a3:f2:06:13:13:a2:bf:eb:b9:87:ab:17:7a:7e:
                    a9:77:b3:e0:d0:ae:fd:04:f5:26:6b:82:91:19:f1:
                    b2:42:90:1e:3c:ba:e9:19:35:6b:a0:00:44:f4:eb:
                    c0:72:51:ff:51:04:ea:ce:a6:6a:8d:ba:b2:88:a8:
                    c4:37:f5:3a:5d:b8:b8:80:0f:a5:6c:81:b8:01:94:
                    07:67:87:ee:d6:73:a1:da:b1:d2:de:57:0f:9c:17:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:78:40:B4:46:08:D6:3D:AF:06:A3:2D:44:2A:E5:73:6D:88:6C
            X509v3 Authority Key Identifier:
                keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:bd:ee:54:ed:c4:61:5b:79:94:1e:95:2f:a9:45:f8:50:d2:
         26:54:8e:5e:7b:f9:02:a4:8b:43:39:64:53:a9:28:59:01:fc:
         ad:a7:37:b3:cc:19:c6:a6:19:01:54:49:ab:63:c0:9a:f0:5d:
         87:d5:5f:b9:07:d4:80:1b:2a:b6:3f:f1:a0:9c:09:08:6f:01:
         8d:6c:03:4d:67:fc:99:ce:d2:8a:4c:b7:76:5f:6b:60:63:e1:
         a9:d4:b2:30:5d:19:56:59:4f:40:68:e1:a6:f2:e7:84:ca:6a:
         e3:37:c1:af:a7:ba:11:8f:1d:be:99:f9:6b:d7:52:e1:f5:fa:
         b6:a0:5d:44:5e:d0:82:61:1f:5c:c2:00:82:a1:d7:d8:68:75:
         93:06:41:62:aa:46:20:21:c8:cd:77:62:98:c6:b1:c4:4f:4e:
         6b:bc:a5:5a:34:89:ba:20:e3:26:f5:9f:82:1c:1f:a0:b7:7d:
         f0:de:71:26:db:3e:5f:98:1f:78:72:21:9d:59:63:fc:41:4b:
         7e:d4:84:50:b7:04:84:5e:4b:0e:aa:9e:bf:fe:dd:9b:5f:4a:
         35:20:c5:8b:68:1f:26:13:26:9c:9e:65:45:c7:1a:c2:1b:10:
         34:56:8a:84:75:b6:b3:54:39:49:ed:ca:00:f6:b4:db:61:3f:
         57:75:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----