This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
File:                     OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft (raw, json)
Hash identifier:          p9GBZl4l2nWGtl6IWWALtiW0Cmfsk8W9+IXraQbHXL4=
Subject key identifier:   66:52:2E:C7:62:0C:9B:14:88:3A:E3:9F:A3:62:D0:D3:A2:81:9E:0E
Authority key identifier: 38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4
Certificate issuer:       /CN=A9151638/serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4
Certificate serial:       04B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
Manifest number:          04B2
Signing time:             Thu 25 Sep 2025 04:21:20 +0000
Manifest this update:     Thu 25 Sep 2025 04:21:20 +0000
Manifest next update:     Thu 02 Oct 2025 04:21:20 +0000
Files and hashes:         1: OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl (hash: 9Wf4cGZWYI54lXL9v5ZxOp4feEHoX+Po82FP8KszScU=)
                          2: 2404BA68477011EC8A31B762C4F9AE02.roa (hash: LZSDyQE8pTBtNGB8AYE8ckz2kTeKfiBGL7LhbO/Zt7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151638, serialNumber=38592F056F83CCD40A62AE1160292694285A2CF4
        Validity
            Not Before: Sep 25 04:21:20 2025 GMT
            Not After : Oct  2 04:21:20 2025 GMT
        Subject: CN=68d4c340-966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:db:67:34:4a:63:6c:dc:8a:09:2f:f2:66:69:
                    9d:8e:f0:99:ba:f2:fc:2d:74:28:9f:1d:c5:ca:d3:
                    b6:62:9a:d8:26:f0:8f:85:9c:d3:24:37:b5:4d:16:
                    72:63:a6:f0:60:7b:f9:32:df:9c:87:25:d7:be:76:
                    cb:02:48:ff:40:c7:82:12:a0:e0:70:38:38:07:36:
                    43:68:46:3b:07:7e:69:00:70:56:6e:e3:77:c0:11:
                    3b:54:c6:4b:82:f6:37:75:35:b5:02:2c:13:30:de:
                    ec:86:1f:11:53:01:e4:af:94:bf:39:c9:83:08:5d:
                    45:56:01:19:2f:29:26:e1:37:c7:1a:56:6a:f4:d8:
                    57:2c:57:a3:7d:d8:57:61:5a:5c:77:c2:f7:f9:1e:
                    59:b2:4e:a9:40:55:e8:f4:f1:b5:c7:51:bc:48:cc:
                    40:52:2e:76:e0:a2:ff:ab:ef:41:ef:bb:cd:9c:e5:
                    11:58:25:11:44:38:75:c2:29:34:d4:b8:95:24:f1:
                    e5:9d:32:61:88:72:50:81:02:c2:e3:e1:a4:90:68:
                    15:f9:02:1b:17:40:86:52:94:38:58:06:e7:12:5a:
                    44:aa:16:c9:74:ea:1d:19:30:5f:5f:63:15:ac:c6:
                    68:73:71:72:8f:f4:ef:d7:fe:f4:27:4e:e7:bf:3f:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:2E:C7:62:0C:9B:14:88:3A:E3:9F:A3:62:D0:D3:A2:81:9E:0E
            X509v3 Authority Key Identifier:
                keyid:38:59:2F:05:6F:83:CC:D4:0A:62:AE:11:60:29:26:94:28:5A:2C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OFkvBW-DzNQKYq4RYCkmlChaLPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151638/12711732476C11EC89EF6239C4F9AE02/OFkvBW-DzNQKYq4RYCkmlChaLPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:c8:0d:b3:de:2d:ae:11:00:de:fd:5f:93:e0:f1:84:6c:
         df:8d:44:b1:88:4a:46:05:1c:4b:0a:94:1a:3f:75:27:79:02:
         8b:47:95:80:fa:52:e2:fd:50:72:14:7a:bb:ab:12:4d:47:9d:
         de:3a:e5:f8:00:29:47:68:0f:c1:e5:14:08:85:4b:f6:cc:1f:
         7f:24:31:b2:f3:ee:0e:c2:6c:88:16:c6:6f:ef:30:ee:a9:04:
         39:2a:3f:2e:09:0a:1c:1a:f6:02:69:68:e6:f7:3b:98:72:d7:
         8c:57:63:3e:12:2a:fa:f7:3e:10:8e:ad:59:ba:c8:98:09:ae:
         14:2e:65:51:a1:26:0f:1f:98:22:86:d5:6e:4a:d5:40:bb:87:
         46:01:b0:57:72:27:79:87:2a:d4:f8:8f:2e:89:92:39:68:be:
         f7:9c:e6:83:00:57:eb:f0:45:f9:99:5d:59:7c:c1:1b:7c:54:
         b1:ee:66:25:5c:0e:77:80:f7:7f:68:4f:ef:9f:af:58:82:af:
         58:a8:0e:dc:9c:c6:75:17:ba:77:bc:77:63:3a:38:8a:89:7d:
         21:3c:1e:1d:0e:ae:6e:a0:ca:b5:a2:9e:f8:03:5d:5b:4f:35:
         c6:34:75:0d:41:60:7b:e6:0d:8e:be:3a:8c:5e:7a:e9:e7:67:
         6c:11:b9:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2MzgxMTAvBgNVBAUTKDM4NTkyRjA1NkY4M0NDRDQwQTYyQUUxMTYwMjkyNjk0
Mjg1QTJDRjQwHhcNMjUwOTI1MDQyMTIwWhcNMjUxMDAyMDQyMTIwWjAYMRYwFAYD
VQQDEw02OGQ0YzM0MC05NjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7dtnNEpjbNyKCS/yZmmdjvCZuvL8LXQonx3FytO2YprYJvCPhZzTJDe1TRZy
Y6bwYHv5Mt+chyXXvnbLAkj/QMeCEqDgcDg4BzZDaEY7B35pAHBWbuN3wBE7VMZL
gvY3dTW1AiwTMN7shh8RUwHkr5S/OcmDCF1FVgEZLykm4TfHGlZq9NhXLFejfdhX
YVpcd8L3+R5Zsk6pQFXo9PG1x1G8SMxAUi524KL/q+9B77vNnOURWCURRDh1wik0
1LiVJPHlnTJhiHJQgQLC4+GkkGgV+QIbF0CGUpQ4WAbnElpEqhbJdOodGTBfX2MV
rMZoc3Fyj/Tv1/70J07nvz++IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZSLsdi
DJsUiDrjn6Ni0NOigZ4OMB8GA1UdIwQYMBaAFDhZLwVvg8zUCmKuEWApJpQoWiz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzOC8xMjcxMTczMjQ3
NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpOUUtZcTRSWUNrbWxDaGFM
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Ga3ZCVy1Eek5RS1lxNFJZQ2ttbENoYUxQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTYzOC8xMjcxMTczMjQ3NkMxMUVDODlFRjYyMzlDNEY5QUUwMi9PRmt2QlctRHpO
UUtZcTRSWUNrbWxDaGFMUFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgd8gNs94trhEA3v1fk+DxhGzfjUSxiEpGBRxLCpQaP3UneQKLR5WA
+lLi/VByFHq7qxJNR53eOuX4AClHaA/B5RQIhUv2zB9/JDGy8+4OwmyIFsZv7zDu
qQQ5Kj8uCQocGvYCaWjm9zuYcteMV2M+Eir69z4Qjq1ZusiYCa4ULmVRoSYPH5gi
htVuStVAu4dGAbBXcid5hyrU+I8uiZI5aL73nOaDAFfr8EX5mV1ZfMEbfFSx7mYl
XA53gPd/aE/vn69Ygq9YqA7cnMZ1F7p3vHdjOjiKiX0hPB4dDq5uoMq1op74A11b
TzXGNHUNQWB75g2OvjqMXnrp52dsEbm6
-----END CERTIFICATE-----