This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft
File:                     v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft (raw, json)
Hash identifier:          /jASJMnaLSC40DxHpOSOJrpFNHKqB7dZ85QpKTDGUI4=
Subject key identifier:   47:16:AC:3F:16:9A:C4:C3:DD:C4:67:78:9C:E7:B9:38:9A:E7:1A:B9
Authority key identifier: BF:59:0A:97:E5:5D:EC:C3:50:33:B0:06:D0:03:6F:93:8F:8D:78:8C
Certificate issuer:       /CN=A918C287/serialNumber=BF590A97E55DECC35033B006D0036F938F8D788C
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft
Manifest number:          12
Signing time:             Tue 25 Nov 2025 05:58:41 +0000
Manifest this update:     Tue 25 Nov 2025 05:58:40 +0000
Manifest next update:     Tue 02 Dec 2025 05:58:40 +0000
Files and hashes:         1: v1kKl-Vd7MNQM7AG0ANvk4-NeIw.crl (hash: xuRjpQZJw3E19t8tpU56FYx3vZJ+DBuCffxCKv4tWfg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287, serialNumber=BF590A97E55DECC35033B006D0036F938F8D788C
        Validity
            Not Before: Nov 25 05:58:40 2025 GMT
            Not After : Dec  2 05:58:40 2025 GMT
        Subject: CN=69254591-324b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:93:41:1c:c7:2a:6f:e1:86:2a:d9:23:8a:
                    1f:01:07:df:a6:98:b3:84:5f:f1:b2:9d:27:1c:77:
                    23:95:eb:07:ab:d4:fa:27:ef:9a:a6:4f:d1:96:6e:
                    d6:7b:10:d6:c1:86:89:22:ec:e9:69:ff:03:48:ed:
                    d4:37:b7:ab:ad:d8:e8:4c:37:1d:e1:39:15:9e:d9:
                    ce:0b:15:f7:4e:08:84:27:4c:d0:4e:6b:e8:03:a4:
                    d4:3d:a3:b0:f5:32:eb:04:19:ab:47:7e:9b:99:f0:
                    72:27:d5:a5:a3:f3:f0:48:08:98:29:26:53:db:29:
                    68:ee:c5:c2:6d:e7:b3:db:56:b2:f0:45:1d:3a:33:
                    e4:1c:2a:b8:61:a8:d7:77:4d:b1:23:57:1c:a4:9a:
                    53:df:5a:83:f2:46:5b:29:0a:ab:8a:57:4e:31:d1:
                    c6:f9:aa:87:42:f1:9b:61:66:03:bb:73:97:34:90:
                    d2:2f:9b:e9:3a:a3:e0:b4:61:bd:53:27:3f:bd:06:
                    f7:52:fa:1d:17:de:74:c2:7c:3e:37:4f:52:c8:7f:
                    75:0b:1e:ae:a2:5c:62:8b:31:0b:c8:41:1f:e5:29:
                    68:52:56:50:8f:a4:2c:b5:69:d2:e5:9e:04:a0:a1:
                    f9:95:dc:d4:76:14:ce:01:eb:fd:fb:6e:cc:68:d4:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:16:AC:3F:16:9A:C4:C3:DD:C4:67:78:9C:E7:B9:38:9A:E7:1A:B9
            X509v3 Authority Key Identifier:
                keyid:BF:59:0A:97:E5:5D:EC:C3:50:33:B0:06:D0:03:6F:93:8F:8D:78:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/7F4D1FDEBF7E11F09C365086C4F9AE02/v1kKl-Vd7MNQM7AG0ANvk4-NeIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:e8:ee:fd:7c:5b:df:74:2f:4e:bb:04:79:9f:2f:c2:ea:
         9d:40:46:07:a5:c8:e8:fa:5e:3b:72:e0:cd:b8:bd:dd:29:6f:
         5a:72:a9:1d:33:b3:49:dd:e4:f9:cd:56:53:20:5e:d2:d1:78:
         04:89:cb:a5:1d:7a:c2:78:0c:e3:60:a2:c8:18:5e:2b:4e:a3:
         f8:2b:6f:fd:ec:69:64:68:7e:ca:3b:8b:28:a7:92:c9:b6:c9:
         27:b1:08:1e:67:e1:29:4f:e3:26:02:f2:d2:29:c0:e6:04:76:
         88:d7:75:63:84:6b:aa:10:ca:31:b9:32:b8:52:c9:58:84:43:
         ab:fb:b9:e4:45:ee:2d:7e:9c:b3:c8:7a:13:91:77:fe:e8:13:
         fc:d8:eb:30:0f:f6:bb:79:d4:bc:ad:d3:92:f6:c6:e1:8e:1e:
         08:25:94:ae:9c:e9:04:e4:4e:19:cb:b6:48:77:d0:3b:82:a1:
         4d:cc:ff:2a:c9:c6:e4:f6:c5:60:9d:88:36:d2:ce:bd:cd:17:
         a9:df:f2:8f:bb:07:9a:a3:5d:ba:19:86:d9:25:d6:7f:4c:f1:
         87:63:99:7c:c7:ac:81:10:85:a6:cb:a4:cf:fa:5d:8a:d6:5e:
         ce:fe:26:66:7f:6b:2e:6e:41:69:f9:f5:b3:61:91:d2:d2:0e:
         79:27:6a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:57:46 2025 by rpki-client