This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
File:                     5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft (raw, json)
Hash identifier:          TOMfkT6NSIwa881+R/uNrfeiNiwdlRXnP3BCyRvgS+o=
Subject key identifier:   97:2B:0E:00:6E:E4:3A:68:8F:07:80:36:21:BC:C3:7E:43:DB:53:42
Authority key identifier: E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46
Certificate issuer:       /CN=A9170533/serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
Manifest number:          03F8
Signing time:             Mon 15 Dec 2025 03:39:19 +0000
Manifest this update:     Mon 15 Dec 2025 03:39:19 +0000
Manifest next update:     Mon 22 Dec 2025 03:39:19 +0000
Files and hashes:         1: 5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl (hash: NZV78LpUSH4Jmz5Eu0bGZgTZghgLi2qCVrX2Fek26I8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170533, serialNumber=E58F98E3C61421465453AC4255F0AFB0AD95D246
        Validity
            Not Before: Dec 15 03:39:19 2025 GMT
            Not After : Dec 22 03:39:19 2025 GMT
        Subject: CN=693f82e7-ac66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:2d:4e:ff:09:ac:a3:06:06:dc:8f:ba:a8:
                    05:f3:10:9e:d8:b9:29:f7:80:59:7a:30:c7:12:35:
                    b1:f4:55:9e:22:2c:5c:a7:7d:ee:8a:56:4d:3d:cc:
                    46:c0:d7:47:64:bd:08:41:68:96:96:75:cf:6a:89:
                    cb:d0:45:47:d7:15:7b:2a:f4:44:c9:96:d8:a3:a1:
                    18:87:e5:1b:2d:85:8b:23:69:63:53:af:91:5f:9c:
                    94:fc:5f:29:31:16:fc:57:99:84:d9:b9:4a:44:39:
                    16:8d:de:cc:23:34:6a:ed:31:9b:24:e0:7d:6c:99:
                    cb:a3:5e:81:db:a7:d0:45:5a:6e:4f:b9:68:ce:31:
                    f5:2f:d4:e6:5a:cc:20:80:60:f7:a1:81:26:0e:93:
                    43:27:f7:5d:cf:f4:fc:09:99:a8:23:c7:50:e6:2d:
                    90:6e:44:bb:3e:20:d3:22:eb:0a:6d:34:b1:12:03:
                    4f:23:9b:a7:ea:c0:dc:b7:fa:1a:70:6b:87:09:f6:
                    e1:9a:8d:47:42:64:ba:79:b0:ee:7a:91:2f:87:0b:
                    cb:76:6f:55:ab:0e:d3:07:d0:2b:8d:c1:4e:83:16:
                    7a:b7:d1:e3:76:d9:6e:e8:b2:d7:06:bb:09:ed:fd:
                    79:04:56:10:e4:08:f1:79:ae:a6:60:08:be:fe:c3:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:0E:00:6E:E4:3A:68:8F:07:80:36:21:BC:C3:7E:43:DB:53:42
            X509v3 Authority Key Identifier:
                keyid:E5:8F:98:E3:C6:14:21:46:54:53:AC:42:55:F0:AF:B0:AD:95:D2:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170533/22ED2C9A9F8211ECBFC3CF1CC4F9AE02/5Y-Y48YUIUZUU6xCVfCvsK2V0kY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3d:7b:a6:02:72:ff:1c:59:2a:bc:7a:95:6b:31:11:e1:d4:
         aa:23:c7:b1:22:0e:d7:83:4a:68:e0:14:43:5b:a9:ea:0a:e5:
         b8:58:b9:d3:66:eb:e2:e9:81:c3:20:52:91:18:6d:6a:10:1f:
         12:53:82:e6:ab:26:36:64:de:d3:83:fb:ab:ba:1c:a7:7a:1a:
         0a:e0:c6:8f:de:a3:44:0f:6f:d7:0d:41:1a:c5:4d:50:0f:3e:
         85:70:c1:97:cc:a4:c6:f9:7a:59:d9:8a:c1:03:28:3f:6b:b8:
         f1:51:27:81:dc:c3:3b:fb:1e:18:4d:8f:f6:4e:83:dd:64:d0:
         f8:5a:5b:bf:88:dc:04:37:fd:5f:a5:76:0c:1a:14:1c:1e:ad:
         84:ad:84:d2:4d:2b:38:87:40:da:2b:71:2c:35:31:94:d0:0f:
         2e:94:bb:dd:15:71:4f:69:e2:53:37:6c:ce:9d:23:2a:d7:8d:
         75:91:72:24:ba:76:f4:fd:11:50:a3:fe:ff:e1:32:1d:2d:07:
         c7:7f:63:e8:2d:90:65:a0:2f:c5:40:a1:bf:0f:b3:a3:b7:cf:
         6b:ac:97:a7:43:40:28:95:47:4c:8c:f3:5c:7e:09:d2:cd:0e:
         05:3d:23:b8:ce:7a:da:a2:6d:4a:50:3b:2c:bc:09:91:36:4b:
         65:27:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----