This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft
File:                     M4vXge0h5dsUBXs3uQOipAjiQgI.mft (raw, json)
Hash identifier:          vfSdsgqjdRBkMRHd/2NW7/gHRbHcNigjt1FGxDboCEU=
Subject key identifier:   61:EA:03:2B:EB:47:85:6E:93:F0:82:2D:1D:2D:9D:C7:A2:39:AA:CC
Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02
Certificate issuer:       /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202
Certificate serial:       34FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft
Manifest number:          34D4
Signing time:             Tue 02 Sep 2025 14:56:48 +0000
Manifest this update:     Tue 02 Sep 2025 14:56:48 +0000
Manifest next update:     Tue 09 Sep 2025 14:56:48 +0000
Files and hashes:         1: M4vXge0h5dsUBXs3uQOipAjiQgI.crl (hash: yVisuGbN+Yl5WsiMc8odNl6I68qb3B+1+5teCWhuaCE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13566 (0x34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E38C1, serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202
        Validity
            Not Before: Sep  2 14:56:48 2025 GMT
            Not After : Sep  9 14:56:48 2025 GMT
        Subject: CN=68b705b0-690b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:39:53:ab:61:2e:c9:a1:86:b0:9c:e3:70:
                    d7:6d:ac:23:42:92:c1:25:f3:19:38:4b:38:df:f7:
                    d2:cf:51:39:12:db:8d:7f:e3:61:cc:00:f6:4e:a5:
                    46:e3:dc:ed:07:16:2d:d4:1a:83:c2:8b:55:55:cc:
                    dd:88:c8:0a:3f:95:e1:a0:64:71:0f:81:24:4f:06:
                    54:60:0a:ee:88:fb:5b:68:64:76:28:d7:54:b4:d4:
                    df:11:3c:ab:51:2f:90:ee:bb:aa:8f:b1:dd:99:1b:
                    6f:c1:6a:51:4f:e1:00:e3:f9:02:ba:f0:42:04:01:
                    da:d9:36:41:95:9d:83:2f:44:80:87:b4:67:92:07:
                    ed:30:96:73:b4:e3:bd:8c:1e:b5:d1:5a:f4:1a:08:
                    97:20:c1:64:58:86:83:fb:fc:22:b0:b6:45:0f:b6:
                    4e:92:6f:9d:eb:f1:20:6e:ef:4d:b1:5c:8a:2f:52:
                    07:cd:92:d4:72:c1:1d:ca:3b:ec:6c:d5:97:63:79:
                    55:fe:1a:c2:1c:b6:95:b7:65:84:97:91:34:0c:16:
                    90:1a:35:03:22:c1:d5:27:56:69:2a:9e:fc:39:71:
                    71:79:37:87:1b:e2:c0:c5:46:3f:33:79:5b:ad:17:
                    ca:4c:25:d3:ac:86:c2:48:36:98:01:ed:4e:e3:c1:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:03:2B:EB:47:85:6E:93:F0:82:2D:1D:2D:9D:C7:A2:39:AA:CC
            X509v3 Authority Key Identifier:
                keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0e:7c:4f:46:45:de:92:13:7d:3d:fc:88:7b:cc:35:69:57:
         0a:ee:2e:6a:5a:e0:48:01:71:dd:c6:a7:de:23:ae:0a:a5:fd:
         7f:96:85:c6:bb:f3:1b:ab:a5:a8:4f:91:02:86:9a:40:72:d8:
         17:57:ae:f4:0f:a1:43:2a:7b:d1:f9:6d:35:d6:a0:42:64:6e:
         4e:c8:65:88:80:38:87:59:5b:6b:45:e4:d8:81:58:a7:2c:63:
         07:be:ed:58:c1:31:76:13:f1:1d:b8:d6:aa:1c:7f:a0:37:27:
         c1:f9:04:5e:9a:b1:39:07:c6:e1:bd:76:78:f5:22:33:1f:8e:
         05:13:b4:2e:30:ff:a5:f2:ae:a7:88:51:35:40:fc:48:24:53:
         c9:07:95:2b:1a:99:02:3e:94:89:21:d5:a8:ff:69:53:e2:85:
         53:aa:11:04:86:d3:4d:10:b5:8b:b3:d1:cd:ee:a8:4e:8b:ad:
         a5:15:47:22:4a:50:5a:79:6c:c3:57:ef:4e:32:43:26:3b:0e:
         20:51:22:58:3c:cc:4a:6f:0b:a5:7b:c7:cb:81:a5:a5:23:0f:
         28:96:28:75:57:47:7b:1d:f0:dc:26:6a:06:0b:2b:3c:46:7c:
         ea:b6:cc:f9:61:61:6d:60:b5:b3:3e:fb:53:95:c8:c9:be:e7:
         c3:e0:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----