This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
File:                     nC3RgnBi24kuOEZaEK_kkWg1wCc.mft (raw, json)
Hash identifier:          gUu3OE4jOOoVMNA3oxMs0Iuw9aVetqxDenQrqTqDaIM=
Subject key identifier:   FC:9E:F9:C8:68:D6:8D:F3:24:7B:AC:FD:D5:E5:87:80:D6:65:72:55
Authority key identifier: 9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27
Certificate issuer:       /CN=A91B1F27/serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
Manifest number:          01AB
Signing time:             Wed 27 Aug 2025 03:26:41 +0000
Manifest this update:     Wed 27 Aug 2025 03:26:41 +0000
Manifest next update:     Wed 03 Sep 2025 03:26:41 +0000
Files and hashes:         1: nC3RgnBi24kuOEZaEK_kkWg1wCc.crl (hash: LTYVLg8BU5az4uG9sWBJ2BKngZamiyAffXP5R0KeWcY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F27, serialNumber=9C2DD1827062DB892E38465A10AFE4916835C027
        Validity
            Not Before: Aug 27 03:26:41 2025 GMT
            Not After : Sep  3 03:26:41 2025 GMT
        Subject: CN=68ae7af1-0426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:b8:26:c4:bd:20:f9:dd:5a:10:29:64:66:
                    11:78:1a:cf:bb:fb:42:6b:34:6b:51:95:b1:20:64:
                    58:eb:b0:8b:72:b0:23:7d:65:1a:da:f8:34:47:54:
                    ac:e5:6a:a6:98:9d:98:2e:f7:2b:c1:74:54:65:62:
                    60:f0:e7:e2:e5:99:de:1a:d7:12:19:94:bf:68:c3:
                    07:d1:f3:4e:06:36:dc:06:96:9c:d6:cf:ca:34:4e:
                    5f:9b:55:fe:86:39:20:0a:51:a1:bd:41:82:eb:76:
                    4e:8f:50:e6:31:61:05:b3:aa:4a:66:ff:33:7e:d5:
                    f2:be:12:1d:fc:f5:58:73:a7:d1:64:2c:72:59:60:
                    62:65:47:af:ec:f2:bb:25:60:31:dd:cc:71:82:0c:
                    d8:3e:dc:1d:bf:47:cd:f3:39:f4:33:79:13:d1:c5:
                    82:1e:63:d9:f1:a7:13:80:54:0c:98:e3:7a:d5:bd:
                    06:1c:1f:75:ba:64:a2:68:11:80:9e:dc:ee:0a:ac:
                    8a:62:f0:00:91:59:57:c2:19:56:c6:de:20:a5:a7:
                    6f:8a:a5:bc:c1:99:c4:84:62:c4:43:76:41:bc:6d:
                    8e:36:ae:aa:7f:ed:43:2a:08:f2:e3:40:f0:9a:82:
                    79:a0:8e:50:e8:b9:82:78:af:a3:32:8c:96:ff:f7:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9E:F9:C8:68:D6:8D:F3:24:7B:AC:FD:D5:E5:87:80:D6:65:72:55
            X509v3 Authority Key Identifier:
                keyid:9C:2D:D1:82:70:62:DB:89:2E:38:46:5A:10:AF:E4:91:68:35:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nC3RgnBi24kuOEZaEK_kkWg1wCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F27/F77C109AFBA511ED88D0C96DC4F9AE02/nC3RgnBi24kuOEZaEK_kkWg1wCc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f7:1f:71:63:ba:a4:40:3d:43:a7:65:cd:70:32:6c:70:fb:f4:
         58:1b:bf:04:53:b0:1d:48:a2:02:27:78:3c:7d:9f:a3:8e:e7:
         8f:1c:6c:55:34:9e:28:45:80:46:a4:a0:81:f8:f7:dc:45:05:
         ce:b0:4d:19:4e:8e:d4:5b:81:be:09:03:aa:0c:af:58:28:3f:
         67:85:82:f3:51:08:17:b2:6f:a9:41:82:a4:1c:01:25:bd:8a:
         8e:6b:c9:73:c0:5d:31:4e:fc:1f:1f:c7:07:5d:92:86:4e:a8:
         b1:ef:70:26:e9:54:20:ea:3c:46:1f:01:be:b4:1b:d1:5a:de:
         5c:cd:c3:eb:44:b6:58:6b:bd:4e:61:11:29:25:0c:d5:13:30:
         ad:35:ae:b1:38:9f:ba:85:8b:3e:d9:71:90:b1:cd:4c:44:cc:
         17:8d:23:d2:27:3e:69:51:ba:a8:49:ec:cf:a0:dd:5f:8a:90:
         e6:ce:08:c8:85:2b:e5:45:78:3d:24:2f:9d:34:2a:0a:53:f7:
         35:bd:8b:b8:69:0d:18:1d:36:a5:b3:0e:f8:9f:fc:bd:7d:5e:
         ea:af:2f:41:40:3c:0e:30:05:1d:ae:a1:a1:94:9d:92:1b:e8:
         5e:80:eb:74:c4:5e:05:06:fb:45:a3:e4:54:5b:77:37:a8:26:
         41:8f:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----