This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
File:                     Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json)
Hash identifier:          TXaPh1VE7b2ats2dA2yhF1xE0J1aAFk3MVXG8E6U3uM=
Subject key identifier:   60:9B:0B:20:9B:74:8F:6B:22:42:26:6F:09:59:E5:5E:57:AB:27:9D
Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11
Certificate issuer:       /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
Manifest number:          FA
Signing time:             Wed 17 Dec 2025 06:24:11 +0000
Manifest this update:     Wed 17 Dec 2025 06:24:10 +0000
Manifest next update:     Wed 24 Dec 2025 06:24:10 +0000
Files and hashes:         1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: dfYBg/Md1ym6fDXFLzMWZI15uckhO3rDrHgt2fk8otU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411
        Validity
            Not Before: Dec 17 06:24:10 2025 GMT
            Not After : Dec 24 06:24:10 2025 GMT
        Subject: CN=69424c8b-1461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:da:97:20:b7:3e:79:61:0a:f0:3d:51:90:
                    b2:e4:b6:13:f4:71:c5:b9:4f:c9:c4:a4:04:80:23:
                    e0:22:78:90:31:c6:33:32:54:d4:db:e5:35:6d:c0:
                    e4:3f:8e:72:76:e5:a3:6e:a2:b4:35:c5:b1:c8:86:
                    31:7e:60:71:a6:a2:2c:e1:33:ce:7f:e1:be:c7:af:
                    83:34:7d:82:9a:43:93:fa:c3:4a:90:c7:59:b9:d3:
                    9b:90:b7:57:cf:2a:af:f8:1c:4a:f6:eb:4d:a2:04:
                    1a:ba:f6:34:c8:b6:c1:cb:d7:ce:3f:93:87:76:7a:
                    99:d4:91:30:20:ae:2b:a7:0c:e0:65:5c:2f:d7:c6:
                    26:74:4a:23:04:26:51:f5:c4:19:80:13:83:e7:2f:
                    08:23:06:bf:d4:06:90:ed:06:52:32:55:33:ac:05:
                    34:85:99:9b:c6:be:e5:81:36:0a:0e:db:95:6c:6b:
                    62:fa:6e:6b:64:d1:a6:18:18:21:70:91:8a:a0:fa:
                    66:7e:65:67:b7:a9:eb:f6:3f:40:59:be:f2:3c:81:
                    66:54:b8:16:c1:51:cc:27:41:6c:15:5c:9a:9e:76:
                    6a:d3:0e:62:f4:55:d7:f9:f5:27:38:01:0f:35:d9:
                    db:28:12:e8:9f:fc:91:15:56:86:dc:36:0d:30:24:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9B:0B:20:9B:74:8F:6B:22:42:26:6F:09:59:E5:5E:57:AB:27:9D
            X509v3 Authority Key Identifier:
                keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:86:60:ce:3d:33:36:5b:53:2e:0c:5b:64:30:e6:da:7f:bc:
         80:df:77:b4:5c:0c:84:56:d5:21:5a:d0:48:7f:85:80:51:63:
         ec:32:e1:10:ec:87:7c:07:51:35:0a:57:cc:24:ee:1e:94:35:
         7a:02:b4:46:e9:21:63:f9:69:02:30:6d:5e:f5:6a:5e:10:25:
         64:4f:17:02:2d:dc:af:f5:49:19:81:ca:b6:65:74:3a:75:63:
         e5:89:c2:b7:6f:80:0e:c4:92:d6:81:86:f7:bb:22:e5:83:d0:
         d4:23:30:a4:b3:84:f3:1b:6e:75:7d:1e:43:2b:a4:26:a9:f8:
         54:7b:76:b0:c1:8f:73:74:09:65:ec:31:0e:38:45:08:b7:18:
         ca:23:e0:f6:47:80:5b:6f:77:98:4a:3b:29:dc:4f:8b:19:92:
         88:2f:50:cc:a0:f2:26:54:c3:41:b6:3b:e6:89:22:be:67:57:
         ae:ff:a2:9d:38:d4:b4:a4:c8:6f:4c:da:ea:69:fb:80:0f:a1:
         cc:23:c3:b2:18:f1:42:5f:b6:31:51:d2:8d:24:c2:48:20:fb:
         df:49:98:95:e1:19:61:d1:ef:c9:e1:79:87:77:98:e7:92:a1:
         88:b5:9a:e7:45:44:89:1e:40:c8:5a:19:09:7c:5e:32:98:b1:
         26:a4:4a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----