This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
File:                     r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft (raw, json)
Hash identifier:          NvO3DujeSk9+o93v4eveLyfmJrtCtnbVcCs35VKTvK4=
Subject key identifier:   03:13:1B:96:47:29:63:80:2B:94:DC:27:4C:00:D6:09:AB:E7:1F:56
Authority key identifier: AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1
Certificate issuer:       /CN=A9178E22/serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
Certificate serial:       DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
Manifest number:          DA
Signing time:             Wed 12 Nov 2025 01:52:21 +0000
Manifest this update:     Wed 12 Nov 2025 01:52:20 +0000
Manifest next update:     Wed 19 Nov 2025 01:52:20 +0000
Files and hashes:         1: r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl (hash: 15oULwoTpDbM4XYiT7LXbBrkWyojlanktI0mixKVvIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E22, serialNumber=AF5D61CE12B7C3E58DC86C97872CBB2CDAAD27F1
        Validity
            Not Before: Nov 12 01:52:20 2025 GMT
            Not After : Nov 19 01:52:20 2025 GMT
        Subject: CN=6913e855-6748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:df:a1:9a:82:14:0e:37:c9:3a:a3:a2:4f:
                    e4:0e:8a:c1:09:e0:74:b2:f9:01:95:fe:ed:86:c7:
                    08:0e:9a:ad:49:53:93:df:a1:55:2d:79:10:37:66:
                    44:31:c0:6f:5c:e8:6d:de:6e:cc:dc:5d:ec:17:c7:
                    ad:c4:87:2a:d7:8f:09:78:a4:41:f1:2b:2d:c2:d6:
                    d3:06:7c:9b:2b:99:ae:29:b7:4f:07:07:23:2c:90:
                    81:3d:64:be:62:75:e6:5c:71:11:7d:29:94:70:05:
                    e7:f4:de:18:0a:e2:f3:49:fe:4c:9a:e9:35:be:23:
                    52:fa:4d:d3:d5:e3:21:a8:40:35:fc:d2:84:63:ab:
                    85:f2:96:34:dc:25:d9:64:9a:cf:b4:bc:ce:a3:ef:
                    ed:16:32:c5:08:b2:fa:ea:b0:ac:38:20:9c:8f:74:
                    78:ff:7b:39:4d:6e:d1:f3:a5:4c:3f:8a:bd:23:d6:
                    2f:0f:b7:07:22:c4:7f:e7:d4:13:c9:89:56:92:46:
                    0c:92:58:34:b4:28:cc:1e:d2:7b:bf:e9:e0:c4:33:
                    b3:6d:57:dd:14:11:61:8e:f8:f6:b0:30:fe:22:da:
                    b8:d1:88:8c:76:a5:a6:fa:bc:af:3f:e1:32:f3:bc:
                    53:e5:fe:c0:f2:80:75:e8:a5:ca:43:91:d6:3d:d8:
                    e6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:1B:96:47:29:63:80:2B:94:DC:27:4C:00:D6:09:AB:E7:1F:56
            X509v3 Authority Key Identifier:
                keyid:AF:5D:61:CE:12:B7:C3:E5:8D:C8:6C:97:87:2C:BB:2C:DA:AD:27:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r11hzhK3w-WNyGyXhyy7LNqtJ_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E22/B502638674DA11EF8039B026C4F9AE02/r11hzhK3w-WNyGyXhyy7LNqtJ_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:da:3a:fd:d6:7c:56:63:93:e1:06:84:a7:38:ba:17:a1:6d:
         98:7f:0a:33:6d:92:24:25:eb:06:d9:ce:7d:db:c9:ef:70:15:
         50:61:e6:72:76:bd:cd:e9:68:a9:4c:7a:a3:64:02:97:30:ab:
         10:1a:1c:b6:80:b9:d9:98:22:d0:b1:23:b4:6c:fd:dc:a9:84:
         ba:4a:c7:27:55:31:d0:6b:ba:76:ed:ba:3a:7d:49:2c:8b:5e:
         23:64:68:78:60:ff:3a:06:4a:82:9d:f0:fd:13:97:0e:49:c5:
         f9:64:5b:9b:4d:c0:8c:23:3d:52:1e:44:48:d8:67:51:78:bf:
         9d:9f:9d:91:e2:43:35:95:37:67:6b:f8:ab:5c:ad:b9:75:99:
         c3:d9:ed:89:64:ef:ed:68:af:41:dc:5a:ed:3f:86:20:4f:e0:
         c0:a4:7c:a6:f7:24:e3:3b:b6:0f:ac:8d:6d:e9:f4:c1:f5:80:
         0a:a9:09:92:25:a5:f4:58:07:eb:34:85:0c:c0:23:32:21:86:
         24:11:f4:a6:21:6c:14:c0:1c:87:41:18:80:93:ef:6a:87:a8:
         1c:7e:25:68:03:ac:39:c4:89:f6:4b:df:eb:e9:e0:6e:e0:ee:
         ed:1f:3f:5d:67:76:1e:9d:31:fd:6f:c0:0b:9e:25:fd:10:1b:
         5a:ad:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:41:02 2026 by rpki-client