This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
File:                     dUx6CJILdd5uGzejtUuNUyXY33M.mft (raw, json)
Hash identifier:          HAh8zew11RjWSS0DH5geouqoCzkLt02+2QDUmsRcuBc=
Subject key identifier:   DD:76:88:FC:AD:AC:05:EA:48:92:D7:8D:19:1F:1E:7C:94:4A:E9:7C
Authority key identifier: 75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73
Certificate issuer:       /CN=A9160C86/serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
Certificate serial:       041A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
Manifest number:          0412
Signing time:             Mon 15 Dec 2025 03:34:21 +0000
Manifest this update:     Mon 15 Dec 2025 03:34:20 +0000
Manifest next update:     Mon 22 Dec 2025 03:34:20 +0000
Files and hashes:         1: dUx6CJILdd5uGzejtUuNUyXY33M.crl (hash: tI4PGxODJfvnfL5bPuce88YgpaxAoCc4xRIjswU+tfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C86, serialNumber=754C7A08920B75DE6E1B37A3B54B8D5325D8DF73
        Validity
            Not Before: Dec 15 03:34:20 2025 GMT
            Not After : Dec 22 03:34:20 2025 GMT
        Subject: CN=693f81bd-d401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:f2:07:42:b4:16:11:69:f2:46:78:9f:84:
                    c2:85:0f:f6:0c:81:06:37:6e:db:7f:57:95:5c:d0:
                    76:9b:29:54:10:9a:af:37:05:f6:af:d2:3a:b8:79:
                    78:cf:5b:93:c7:de:dd:1a:3e:d5:8e:e3:ca:57:c3:
                    0e:7f:3e:39:82:72:ae:ad:75:9d:fc:1f:9f:b8:d3:
                    c1:43:35:fc:06:dc:1f:11:63:7e:4d:a3:f3:2b:d8:
                    e1:1e:02:4a:d4:0c:2c:73:76:b4:cf:48:9b:a6:e3:
                    a8:f2:f3:48:06:09:b5:a8:6b:62:58:1c:44:73:45:
                    1d:bb:59:04:4d:e2:48:eb:d8:52:e4:d1:27:31:1f:
                    78:21:0c:2d:23:a1:70:6c:16:6f:e3:29:09:35:ba:
                    8d:d3:73:f0:98:2a:cd:63:b4:88:95:34:d3:e1:da:
                    72:35:2b:dd:0b:f5:1e:5f:c2:e5:0f:33:26:b3:a0:
                    7f:18:b6:c4:98:58:a6:1d:d4:5c:d4:e5:08:63:79:
                    55:2c:2a:8e:3a:04:15:ef:48:5e:81:72:1b:9e:a8:
                    81:8e:01:90:a1:0f:bf:2c:18:33:79:cb:13:72:d3:
                    22:d7:f0:15:de:67:72:25:0d:5b:f9:f5:13:67:ee:
                    c9:37:96:4d:e0:85:2c:6f:3f:b8:27:c4:e5:bf:aa:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:76:88:FC:AD:AC:05:EA:48:92:D7:8D:19:1F:1E:7C:94:4A:E9:7C
            X509v3 Authority Key Identifier:
                keyid:75:4C:7A:08:92:0B:75:DE:6E:1B:37:A3:B5:4B:8D:53:25:D8:DF:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dUx6CJILdd5uGzejtUuNUyXY33M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C86/83CC49E099F311ECB58EC70EC4F9AE02/dUx6CJILdd5uGzejtUuNUyXY33M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:f1:d5:b8:a7:7d:4e:0e:cb:14:a7:91:a9:8c:d7:87:f8:
         5f:fa:3f:d9:9d:0d:3f:ff:0a:b0:dd:c8:46:18:8f:33:e6:b5:
         de:ca:41:84:67:99:96:a5:1e:e4:5a:5a:1f:3b:0d:48:02:07:
         e3:6b:a6:2d:00:a2:f2:36:31:29:93:82:de:25:a1:63:14:cd:
         0a:10:24:79:94:30:ba:59:93:69:9e:7b:71:e2:3d:2c:85:a2:
         af:30:f3:aa:c6:92:b6:2c:33:3c:b9:e8:c6:85:38:51:85:2e:
         03:0a:43:9d:43:9f:9c:d4:41:05:ba:03:7b:6f:e2:61:f5:c5:
         de:bd:41:57:ec:fd:ad:92:f3:fa:67:7f:5d:b9:a3:16:f6:f6:
         c0:31:ec:9f:3d:25:62:1e:e8:b4:d9:e1:90:21:62:e1:15:ef:
         cf:25:42:3f:dd:bb:06:0f:09:92:38:d0:cd:6b:8a:e6:2a:dc:
         f7:1f:f5:f3:fd:69:7f:9d:97:9a:96:db:a6:ca:e0:f4:0b:ef:
         f2:f9:95:32:08:c8:93:dc:51:2b:b8:15:1b:53:db:76:a8:09:
         cd:92:a5:fb:9d:65:ca:23:c8:6e:f9:6d:c1:02:d6:d6:19:a9:
         fc:3c:91:e8:fb:b9:b8:66:a6:2f:3f:2b:e9:ca:cc:6f:70:13:
         e5:d5:17:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDODYxMTAvBgNVBAUTKDc1NEM3QTA4OTIwQjc1REU2RTFCMzdBM0I1NEI4RDUz
MjVEOERGNzMwHhcNMjUxMjE1MDMzNDIwWhcNMjUxMjIyMDMzNDIwWjAYMRYwFAYD
VQQDDA02OTNmODFiZC1kNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+nyB0K0FhFp8kZ4n4TChQ/2DIEGN27bf1eVXNB2mylUEJqvNwX2r9I6uHl4
z1uTx97dGj7VjuPKV8MOfz45gnKurXWd/B+fuNPBQzX8BtwfEWN+TaPzK9jhHgJK
1Awsc3a0z0ibpuOo8vNIBgm1qGtiWBxEc0Udu1kETeJI69hS5NEnMR94IQwtI6Fw
bBZv4ykJNbqN03PwmCrNY7SIlTTT4dpyNSvdC/UeX8LlDzMms6B/GLbEmFimHdRc
1OUIY3lVLCqOOgQV70hegXIbnqiBjgGQoQ+/LBgzecsTctMi1/AV3mdyJQ1b+fUT
Z+7JN5ZN4IUsbz+4J8Tlv6rmhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN12iPyt
rAXqSJLXjRkfHnyUSul8MB8GA1UdIwQYMBaAFHVMegiSC3Xebhs3o7VLjVMl2N9z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM4Ni84M0NDNDlFMDk5
RjMxMUVDQjU4RUM3MEVDNEY5QUUwMi9kVXg2Q0pJTGRkNXVHemVqdFV1TlV5WFkz
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RVeDZDSklMZGQ1dUd6ZWp0VXVOVXlYWTMzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM4Ni84M0NDNDlFMDk5RjMxMUVDQjU4RUM3MEVDNEY5QUUwMi9kVXg2Q0pJTGRk
NXVHemVqdFV1TlV5WFkzM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMbPHVuKd9Tg7LFKeRqYzXh/hf+j/ZnQ0//wqw3chGGI8z5rXeykGE
Z5mWpR7kWlofOw1IAgfja6YtAKLyNjEpk4LeJaFjFM0KECR5lDC6WZNpnntx4j0s
haKvMPOqxpK2LDM8uejGhThRhS4DCkOdQ5+c1EEFugN7b+Jh9cXevUFX7P2tkvP6
Z39duaMW9vbAMeyfPSViHui02eGQIWLhFe/PJUI/3bsGDwmSONDNa4rmKtz3H/Xz
/Wl/nZealtumyuD0C+/y+ZUyCMiT3FEruBUbU9t2qAnNkqX7nWXKI8hu+W3BAtbW
Gan8PJHo+7m4ZqYvPyvpysxvcBPl1RdH
-----END CERTIFICATE-----