This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File:                     qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier:          buLxIgRfH2avJeIKo+VoSaM7euFjX1a9kk6m8xO87T0=
Subject key identifier:   1E:08:2C:7C:CE:AB:1D:45:7D:F9:75:87:AB:00:58:C3:E1:02:EE:0C
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer:       /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial:       1CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number:          1CA9
Signing time:             Tue 16 Dec 2025 06:50:19 +0000
Manifest this update:     Tue 16 Dec 2025 06:50:19 +0000
Manifest next update:     Tue 23 Dec 2025 06:50:19 +0000
Files and hashes:         1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: ztk04LFzKcX/DR3MYQJvIoyqNhKqjcpW4tcAyTee+4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7373 (0x1ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
        Validity
            Not Before: Dec 16 06:50:19 2025 GMT
            Not After : Dec 23 06:50:19 2025 GMT
        Subject: CN=6941012b-a632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:f6:53:42:6e:33:af:d4:17:bf:67:26:72:
                    08:ee:90:16:5c:3d:57:d1:72:bc:36:e8:03:21:36:
                    56:20:a8:88:dc:51:12:52:76:43:11:b9:25:ab:28:
                    37:da:f5:8f:b7:24:84:39:d1:5d:bf:77:a7:96:b7:
                    e5:dc:be:ee:50:86:64:75:89:4e:eb:25:70:e6:66:
                    91:d1:cc:e1:04:14:78:c1:ea:4e:f7:83:0a:c2:f3:
                    2f:31:9a:71:47:19:01:48:f1:1a:dc:6e:90:67:2d:
                    ff:99:1e:0f:a5:80:24:b7:3d:fe:f8:24:c0:85:26:
                    2e:d4:d4:4c:bc:15:6f:15:3f:63:9c:4c:5f:b7:d4:
                    ed:f8:c4:80:bf:c5:0f:d9:dc:55:2e:66:92:20:d7:
                    ed:9b:bd:ca:68:4a:fa:2c:fe:04:ca:7d:f0:ba:ad:
                    f7:81:4b:c3:31:fc:fc:0f:0e:d8:9b:4c:40:d7:4a:
                    69:03:d3:69:46:4f:55:0e:87:d8:77:56:2d:fa:9b:
                    2d:e5:9d:ae:20:1b:f4:17:1d:ce:57:32:e1:8a:2c:
                    2f:72:d9:2a:6f:f3:6e:f5:65:f5:91:17:60:3a:a6:
                    d5:69:8c:72:67:76:7b:d6:0a:3f:cd:e5:a3:a9:75:
                    2d:6b:bb:fb:db:16:a3:ff:91:46:0f:24:da:d2:5c:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:08:2C:7C:CE:AB:1D:45:7D:F9:75:87:AB:00:58:C3:E1:02:EE:0C
            X509v3 Authority Key Identifier:
                keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:71:45:4e:32:38:9b:57:ff:83:58:c5:c0:ff:68:17:e1:02:
         d2:ab:47:e8:bd:6b:98:9d:a1:28:73:6e:62:c3:a7:b8:75:9c:
         f3:9b:17:7e:a5:62:6e:32:c3:eb:b7:2c:fe:7c:f1:b1:b9:5b:
         d9:00:bc:5f:9d:65:a2:8a:01:aa:75:d3:38:93:e6:5c:f0:9b:
         2a:68:33:cc:36:2d:ab:d0:2d:40:f5:08:32:3d:50:27:79:54:
         11:67:42:46:0b:35:bc:63:ee:34:55:fc:5d:ef:0e:f8:5c:df:
         2f:a9:3e:9a:36:b5:55:7a:84:60:1f:ed:cc:9d:aa:22:33:e0:
         7e:4e:19:41:2e:37:66:4f:48:68:b5:d4:b8:35:b2:95:94:c2:
         f8:dc:82:f5:e2:0d:41:f8:85:9a:08:57:31:e3:5b:b7:fc:f7:
         39:e4:cc:53:57:87:38:4e:b7:06:19:52:8c:d9:a7:f9:8c:7c:
         e9:61:ba:6f:49:6a:e0:22:6a:de:ba:ca:95:05:99:ee:f0:0c:
         02:c5:90:0a:c9:0a:cc:ec:90:25:90:65:e3:93:27:b5:4b:91:
         ef:dd:24:c8:69:dd:62:21:0c:24:a3:94:2c:ae:75:f5:7b:c3:
         35:76:bd:1e:b8:5d:68:18:7f:33:94:5b:0e:7b:e1:06:fc:40:
         52:9a:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----