This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft
File:                     s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json)
Hash identifier:          T1y1o7y/MfmEY6VXr/Q4QUO7Lxff8OD2t1aA5goaEVU=
Subject key identifier:   00:57:76:7E:3F:34:8B:12:BF:75:C7:DB:46:D4:D6:A5:DD:1C:54:E2
Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56
Certificate issuer:       /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft
Manifest number:          0D0B
Signing time:             Tue 16 Dec 2025 17:54:39 +0000
Manifest this update:     Tue 16 Dec 2025 17:54:39 +0000
Manifest next update:     Tue 23 Dec 2025 17:54:39 +0000
Files and hashes:         1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: SLvXR671cAAiON+B6HmykbozcOyxysDhd/i/2vayJKw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56
        Validity
            Not Before: Dec 16 17:54:39 2025 GMT
            Not After : Dec 23 17:54:39 2025 GMT
        Subject: CN=69419cdf-870e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:0d:d2:73:ec:d2:29:0a:cb:30:fb:b0:79:
                    5c:df:4d:bf:6b:13:42:79:f3:3f:c4:d9:db:66:79:
                    e0:68:e8:78:6b:9d:cd:21:b5:86:5b:2b:70:51:03:
                    2a:c9:89:7a:29:9c:f5:3f:19:25:ad:29:85:56:84:
                    2e:15:a0:44:e6:07:ca:01:42:d4:d8:ac:55:6e:19:
                    90:ce:08:af:27:fd:26:df:ea:00:c7:c5:cd:97:99:
                    a8:fd:e1:2b:3b:a7:ec:c7:d8:8c:5a:24:37:8d:88:
                    ef:fa:39:cb:69:96:e9:0d:20:a6:50:1a:38:b8:e7:
                    3f:73:84:52:58:8e:74:72:f2:5c:aa:e6:2d:b3:a6:
                    99:16:2d:3b:a0:0e:17:ac:98:e7:d9:3a:90:3c:03:
                    50:a6:ad:ae:72:1b:47:02:45:8f:73:6f:44:1a:79:
                    cf:22:46:6b:35:ce:6a:03:06:5a:1e:03:84:38:15:
                    d1:da:32:1c:3b:10:c1:86:62:f3:9d:47:fc:b2:fe:
                    f1:5e:49:23:8e:ea:c8:c8:e1:d4:10:5a:88:a3:99:
                    44:ed:f1:f0:3d:a5:d5:34:74:54:56:e2:c9:4b:d8:
                    4b:0e:7d:7b:81:fe:2d:bf:38:31:4e:69:c6:d7:ad:
                    84:e4:37:70:ac:22:22:92:ec:c6:1b:d5:73:4d:c0:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:57:76:7E:3F:34:8B:12:BF:75:C7:DB:46:D4:D6:A5:DD:1C:54:E2
            X509v3 Authority Key Identifier:
                keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:57:d3:91:43:db:6b:f6:ac:fa:e8:78:7f:7c:5e:73:76:d5:
         c5:96:81:df:24:18:d3:4c:ed:f2:9d:c8:e2:e6:80:42:54:a0:
         af:51:f2:e8:37:95:db:13:a2:2d:4f:ba:51:8d:13:32:46:3f:
         21:1b:5d:a8:6a:0e:9b:40:90:9d:13:e3:b8:cb:b5:54:1c:94:
         b1:2a:70:9e:5c:8d:c9:60:ec:ea:98:59:60:31:0f:d3:98:ee:
         dd:7a:48:02:a2:d7:34:f4:70:00:22:22:d7:f8:35:dd:0f:01:
         23:74:e2:4a:aa:a8:f4:f8:f0:9a:aa:a1:f7:60:b7:bf:d2:b3:
         38:2d:c6:75:bd:6b:4e:7b:d7:3b:68:2f:bf:b2:b0:2c:88:8c:
         25:5c:b9:57:58:c7:73:d8:84:a5:80:fd:94:8e:17:07:06:a7:
         6d:4e:02:96:e9:18:4f:9b:bd:99:95:5b:b2:99:60:04:34:d2:
         ed:22:1f:dd:a4:bb:80:c9:6f:f8:e3:69:24:b1:83:2f:25:d2:
         f7:3f:8d:a1:44:c2:e1:3a:a0:dc:e3:67:f9:56:1d:9e:87:07:
         83:09:85:68:9c:e3:9e:de:53:28:7b:f6:c6:3e:8b:bd:54:79:
         e9:a0:bc:74:3e:56:70:87:c6:10:fe:bd:13:b8:9d:e9:df:4c:
         cd:17:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----