This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
File:                     ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json)
Hash identifier:          1nCExOnX4lw47kkuEbRp92xe62EPdiW8q2YChKi8zsA=
Subject key identifier:   EF:30:66:50:50:06:8A:DD:DF:FB:D3:50:67:C6:9A:32:28:12:82:E0
Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
Certificate issuer:       /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
Manifest number:          01ED
Signing time:             Mon 15 Dec 2025 04:22:03 +0000
Manifest this update:     Mon 15 Dec 2025 04:22:02 +0000
Manifest next update:     Mon 22 Dec 2025 04:22:02 +0000
Files and hashes:         1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: VFlqZ+npTB03qEVFwqeugzTrKG/3psGl3VK5fdiWNog=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42
        Validity
            Not Before: Dec 15 04:22:02 2025 GMT
            Not After : Dec 22 04:22:02 2025 GMT
        Subject: CN=693f8cea-95fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:e8:89:4f:fc:45:64:b1:79:49:20:44:99:
                    d5:10:81:d7:02:21:a1:04:a7:36:25:a4:cc:c2:64:
                    cb:36:73:65:9e:42:74:81:e3:15:57:0b:50:72:bd:
                    02:a0:9f:76:57:85:bf:78:96:3b:29:03:78:ca:08:
                    b3:b7:51:66:ec:75:01:bf:40:7d:2b:63:d4:5f:97:
                    81:ce:e5:77:9d:5b:84:ca:15:32:ab:85:0e:75:50:
                    86:4b:b4:b2:a6:07:7b:1a:1f:34:9b:2a:f7:80:ac:
                    89:a3:91:66:70:88:9f:f0:d3:14:e2:df:35:5b:4e:
                    49:9f:51:c8:76:9f:34:23:f9:b4:f4:3f:81:af:2f:
                    29:79:97:67:be:f9:40:41:48:a2:2e:22:9b:3c:05:
                    c1:17:4e:2a:fa:d8:5b:6e:4b:3b:3e:7a:e8:a8:ae:
                    2b:66:63:9b:80:0a:3e:52:88:80:58:1c:97:c3:02:
                    3c:19:64:ba:c0:de:18:7f:3c:be:00:fc:83:fd:b4:
                    6d:92:ad:20:2f:7f:22:16:1f:f5:80:ce:9b:29:fc:
                    06:c1:7e:e8:e6:2e:eb:f2:da:5a:f9:59:ff:40:9f:
                    31:cc:f9:3d:88:c7:44:89:9b:42:1d:d3:c3:a1:26:
                    7c:06:0b:bb:c2:95:90:b2:93:0f:99:69:3f:e2:fe:
                    11:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:30:66:50:50:06:8A:DD:DF:FB:D3:50:67:C6:9A:32:28:12:82:E0
            X509v3 Authority Key Identifier:
                keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0c:f4:de:9a:a5:09:0d:0c:5b:61:56:bf:eb:95:df:4c:e5:
         14:2b:41:cc:59:3d:34:69:0f:51:6f:77:c4:2f:59:c5:33:d7:
         73:42:a8:51:7d:26:4d:bc:e1:ec:7e:25:50:3f:c3:7b:4a:c2:
         3e:17:4b:02:c0:2f:78:e1:6d:0c:d9:3d:77:ce:30:1b:dc:aa:
         59:ec:03:b4:26:55:8d:c6:98:1b:3c:6a:4f:5c:ba:1a:30:f0:
         ce:ec:b4:c9:61:7d:a3:a2:5b:05:33:a8:5a:b8:94:40:c9:40:
         be:c6:9f:50:14:0d:17:f6:3b:0c:0f:d6:9a:9b:b5:bc:f8:45:
         d4:b0:39:dd:40:fb:af:77:8d:73:f3:21:1e:4c:6f:24:07:c9:
         d0:b9:4b:9a:f6:8b:30:b1:8a:4a:e0:a8:cb:ce:ce:69:ab:0f:
         96:db:17:56:fb:5e:18:35:6f:8d:80:29:b3:1a:ca:d1:79:ba:
         82:8a:c1:4b:cf:c2:eb:40:56:b2:a1:99:35:47:9f:6f:0c:1e:
         c6:81:03:8f:5a:d5:45:b2:8d:ef:0c:a3:ab:58:b8:64:d6:8c:
         6e:26:4b:1c:48:4d:26:22:26:d4:e6:b0:b7:de:b6:60:8f:87:
         57:6e:82:7a:9b:30:05:ce:c8:d7:dd:43:65:bd:d8:65:06:fc:
         68:72:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----