This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
File:                     n9LoZrHrgid6tvVi_jLgg1mzAWU.mft (raw, json)
Hash identifier:          WMIK/PUGy8UecvOMO8QeboxU1fxql+YAp3KlxHb3uDk=
Subject key identifier:   2D:2F:B3:7A:89:51:69:48:BE:4D:61:7E:D9:E7:2B:F9:56:96:24:83
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
Manifest number:          067A
Signing time:             Mon 26 May 2025 22:33:39 +0000
Manifest this update:     Mon 26 May 2025 22:33:38 +0000
Manifest next update:     Mon 02 Jun 2025 22:33:38 +0000
Files and hashes:         1: n9LoZrHrgid6tvVi_jLgg1mzAWU.crl (hash: 7OTH+gGzmQF/L9CW3jgiWqVeH1wVANC8UHGlGhWPbyo=)
                          2: 3F2B1C3AB48E11EBB0455C2DC4F9AE02.roa (hash: sivEYBO7PXdxBzs49Sa2/GKGpQYDM3gFjYXpi1+OrJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E, serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: May 26 22:33:38 2025 GMT
            Not After : Jun  2 22:33:38 2025 GMT
        Subject: CN=6834ec42-bdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:ae:30:9e:d4:fa:54:41:45:36:95:db:3a:
                    70:93:24:e7:78:28:4a:0a:08:fd:7c:8d:64:26:df:
                    e4:02:d3:0f:32:ee:f3:8e:60:11:81:12:a2:ab:3e:
                    0d:31:b5:87:3f:bb:36:e2:18:c2:02:59:66:cd:0b:
                    9e:3f:32:2b:d0:ff:2b:db:90:e2:7d:04:70:8e:36:
                    10:fd:b2:57:c9:0a:de:1b:1c:75:14:cb:f5:b3:1d:
                    e6:32:14:67:77:9e:5f:08:52:6a:18:ff:22:2e:4d:
                    3b:b0:e6:09:14:89:a7:34:b8:49:55:b3:ad:c1:9e:
                    5e:a1:ba:e6:27:1e:8b:f2:71:d1:c4:b8:f8:76:91:
                    8f:a5:a3:3b:c8:5a:91:5d:4c:2d:b8:38:40:21:5c:
                    98:60:e0:72:8c:09:0e:89:16:5f:ce:a5:30:16:3c:
                    ad:64:15:b9:d2:cf:0d:41:7c:87:b6:0a:f3:0c:80:
                    fe:d3:3c:ab:c4:16:53:19:d8:50:a9:77:6b:ba:4b:
                    2f:d8:0b:0f:4d:e7:cc:06:5e:cb:fc:0d:7a:ba:9f:
                    49:80:a7:e9:34:e7:6d:41:81:00:bc:9e:a4:21:83:
                    1c:66:2b:ce:d0:2f:5d:f8:03:98:21:58:2c:78:7e:
                    bc:cb:c0:0c:3d:0e:05:8a:91:df:c9:f3:75:5c:cc:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2F:B3:7A:89:51:69:48:BE:4D:61:7E:D9:E7:2B:F9:56:96:24:83
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:b9:b5:9e:cc:a1:bc:70:ff:d6:fa:e2:98:25:19:11:68:
         23:9c:25:fe:42:33:63:ef:2f:75:a9:01:1f:99:6a:46:a2:d3:
         2d:a5:2a:c9:2e:25:c9:cc:a9:6c:24:e9:62:79:52:0d:fc:e1:
         2c:31:27:f3:ce:03:40:7c:67:62:46:16:1e:3d:82:86:05:62:
         30:81:5e:1b:6e:79:4f:1c:b7:d5:ef:e2:fb:b6:e1:76:f5:34:
         d8:b6:ec:e3:20:0b:94:86:11:f5:88:f7:65:fd:4a:ae:83:55:
         b7:8e:90:23:4b:e7:63:35:14:b4:a0:ea:e1:c7:f2:a9:eb:02:
         48:a3:b4:c7:e2:48:68:80:ca:43:85:2e:65:df:59:88:c3:8e:
         b7:6f:bd:68:a6:b2:00:15:19:7f:4a:f9:1c:19:98:8b:cd:c5:
         15:ab:53:b2:87:62:8b:31:79:71:cd:f6:2e:79:e2:d9:25:c4:
         b2:00:ec:0a:9b:4b:27:c9:ae:6a:22:7c:69:63:c3:08:a8:8f:
         7e:f7:96:95:3d:e9:f5:67:ad:50:c7:ed:18:ae:33:cb:ba:a5:
         8d:05:f1:84:84:de:b2:0f:e3:37:65:75:b1:05:87:da:d4:be:
         c2:21:b5:83:48:22:39:f5:c8:88:24:09:34:af:3a:49:e2:86:
         ca:e2:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----