This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
File:                     m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json)
Hash identifier:          jfaNPQxjnnjd6WlDAVzvj2La2HsayFz3mzokYKFswOo=
Subject key identifier:   A7:BA:F8:0D:AB:2F:A1:FA:D4:48:B6:6B:D2:69:1B:98:46:F9:29:66
Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29
Certificate issuer:       /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
Manifest number:          07FB
Signing time:             Mon 06 Oct 2025 03:52:10 +0000
Manifest this update:     Mon 06 Oct 2025 03:52:10 +0000
Manifest next update:     Mon 13 Oct 2025 03:52:10 +0000
Files and hashes:         1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: EHHaxk7lV9utf9IRmx5nX0klg3qwethcsuKXopq9YAs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157BF7, serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629
        Validity
            Not Before: Oct  6 03:52:10 2025 GMT
            Not After : Oct 13 03:52:10 2025 GMT
        Subject: CN=68e33cea-bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:ac:21:24:11:e1:93:fb:6a:55:e2:ab:8e:
                    c9:14:dc:8a:09:ff:8e:a3:67:ca:4a:38:eb:c6:79:
                    d4:f1:67:46:43:1b:9a:81:6a:09:8e:56:6d:f6:6d:
                    5f:3a:e9:6e:29:5f:2f:8b:d9:97:60:88:53:74:28:
                    0d:f5:74:c5:5e:11:24:00:00:4c:48:da:ab:dc:22:
                    33:76:c4:39:8d:56:47:65:0e:2f:47:0f:e1:f6:07:
                    2b:a1:19:d6:cb:67:0f:dd:2a:8a:be:0d:f4:61:90:
                    7d:7f:4b:5e:b1:5b:fd:e7:aa:ee:b5:6a:a8:f7:9f:
                    56:1d:d8:20:97:8f:67:15:4d:6a:4a:88:5b:a8:37:
                    ab:70:82:61:08:ca:a8:9d:92:f5:35:9a:45:23:18:
                    17:ea:4f:0b:1f:f6:97:1d:ab:41:ff:89:36:d2:a4:
                    5a:51:06:c1:c4:1d:5e:de:2c:f9:68:21:10:0c:c8:
                    19:19:69:c7:08:af:60:3c:0b:0f:03:5e:b3:a0:9c:
                    c8:95:fb:5d:bc:55:79:bf:94:f8:75:eb:d5:01:65:
                    38:30:de:b2:b0:c4:1b:96:2a:91:af:ed:ee:07:32:
                    6a:cd:4a:5a:ac:c2:b3:0c:c0:85:65:59:cc:88:c4:
                    f5:fa:a8:84:cc:9a:d4:61:17:61:d7:75:e1:69:f4:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BA:F8:0D:AB:2F:A1:FA:D4:48:B6:6B:D2:69:1B:98:46:F9:29:66
            X509v3 Authority Key Identifier:
                keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:4f:1a:03:21:81:85:f4:d8:e2:84:04:5c:fc:f4:cb:5a:
         eb:52:39:0e:b4:6e:1d:67:21:4f:c9:72:50:82:d2:a0:13:b5:
         bb:60:b7:bb:ba:4a:80:1d:5a:56:7c:33:63:05:29:22:c6:f7:
         d9:bd:b8:eb:ea:43:ca:6a:cf:3c:e9:a9:21:20:2c:4c:bc:d4:
         9b:09:c5:15:df:f9:dc:92:7d:26:ed:c1:cf:09:98:63:88:96:
         b1:b6:e3:04:ba:93:51:11:17:0e:fe:0c:dc:fa:16:d8:47:de:
         5b:5c:7d:c4:0e:80:69:5a:95:1b:17:52:66:e4:a6:ef:19:b7:
         38:e8:42:f8:9a:07:8f:3c:b3:18:a8:fd:c1:bb:f2:b1:1a:ca:
         2e:11:f1:3e:87:b9:f9:6d:b7:a0:bc:4e:58:ea:14:27:c4:11:
         69:47:28:3e:a7:5d:a2:c4:fd:d5:a1:2d:e5:0c:b9:e8:92:ad:
         2a:3d:78:02:c7:c9:2c:37:a3:af:54:01:b8:3e:5a:0c:b6:8f:
         2c:ce:46:d9:ec:2b:03:41:f5:ad:84:c4:ec:53:46:2a:5b:89:
         87:9d:d2:a5:f7:89:0e:a9:d1:2f:c8:be:eb:96:1e:d7:c9:cf:
         e6:b5:27:6a:72:11:51:30:e7:26:90:56:75:0a:66:2d:21:07:
         b4:dc:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:02:26 2025 by rpki-client