This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          iQBncEcezNrhMasqjG2XaGCQvlV0inOrS8EZS8CoIc0=
Subject key identifier:   9C:D3:73:D6:EA:9E:4B:C6:78:23:2D:6C:01:58:97:46:41:07:61:09
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       07D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          07CD
Signing time:             Wed 29 Oct 2025 08:47:05 +0000
Manifest this update:     Wed 29 Oct 2025 08:47:05 +0000
Manifest next update:     Wed 05 Nov 2025 08:47:05 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: H7fPD1gxYfd0ZSH6imfZPsGNydOJcESe4EiVFsT+Ukk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2, serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Oct 29 08:47:05 2025 GMT
            Not After : Nov  5 08:47:05 2025 GMT
        Subject: CN=6901d489-d9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:14:59:6c:a4:0e:7b:a9:64:65:39:53:cb:
                    08:0e:73:b1:45:6c:ad:ef:cf:81:7b:ec:e3:7b:95:
                    e4:96:a6:f6:2d:db:ba:45:0e:da:bf:93:17:be:ab:
                    ad:a0:d3:44:94:16:b2:52:89:23:53:11:55:b9:c1:
                    91:b1:51:e2:31:b6:4b:9f:8f:6c:66:d7:f2:7b:0c:
                    4b:5d:cf:87:01:27:5a:58:6b:d8:bc:84:fc:94:9b:
                    ef:74:d6:77:20:ad:bc:ac:89:2b:bf:3f:68:7b:61:
                    54:af:97:ac:a7:25:8f:d2:26:cf:fd:89:6b:27:c2:
                    c7:20:a4:9d:72:85:da:da:58:75:2d:b4:29:b1:66:
                    0a:d2:2b:60:69:31:70:94:ac:be:00:01:89:ba:06:
                    d9:b4:0f:fc:3b:8e:67:08:37:d7:fd:11:94:35:f7:
                    e1:77:2b:87:7c:6a:e9:5c:33:85:67:ca:8d:20:af:
                    ef:88:34:c7:cc:df:4a:a0:b8:8b:20:6b:cd:86:ed:
                    05:d0:54:d5:43:6b:df:79:75:09:af:7c:ea:1f:82:
                    89:60:27:c2:e8:66:e7:40:e1:cb:34:94:a0:47:76:
                    94:f8:cb:e5:9a:60:db:9d:69:7e:b5:e1:a8:61:96:
                    be:27:a5:7f:4f:bf:83:73:06:7b:20:99:2a:ca:ee:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:73:D6:EA:9E:4B:C6:78:23:2D:6C:01:58:97:46:41:07:61:09
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:e4:f8:5e:86:58:63:5b:fd:82:de:80:8f:72:49:22:e9:
         9b:a0:84:07:f4:94:77:5b:64:24:f5:7c:55:f8:87:ae:bc:ed:
         3a:39:20:15:50:d9:e3:c9:c8:7d:f6:5f:5a:ba:d6:d3:0b:0f:
         9e:0b:6c:4d:bb:35:f7:7c:2f:03:4f:8b:ea:24:b6:5e:9b:bf:
         5d:e5:e4:40:4a:d3:26:ce:ce:41:34:95:00:ee:bc:bd:ce:e3:
         66:52:c8:ec:32:72:d7:f6:10:ae:24:0f:82:46:75:a6:16:17:
         4b:39:5b:65:c4:89:4d:2e:87:f0:c0:0d:da:b0:f3:4d:17:e9:
         b4:b4:6d:5d:9f:d7:c9:b0:75:4f:6d:39:c1:f3:22:e2:26:4d:
         91:9d:a5:db:21:e5:d3:a5:c1:45:b7:15:52:d5:32:6d:08:63:
         c1:36:1e:e3:85:a7:ea:1d:1f:13:16:13:70:d4:52:ad:89:ca:
         b5:6a:3c:4f:86:19:80:11:8d:26:36:ce:3c:31:91:02:64:64:
         32:4c:96:0d:6f:34:eb:d3:52:81:11:b7:e0:a1:a7:98:56:6d:
         e0:3e:18:4b:54:32:20:48:57:a3:e2:09:49:9d:bc:68:a5:d8:
         a0:a8:9e:f6:0b:4a:01:10:ea:1f:e1:f0:6f:a4:76:f1:0d:7a:
         3b:59:32:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTIxMTAvBgNVBAUTKDhDOTk2OEEwOTQwMEYzMjJGNDk1OThFMjc1MTFGQ0Ux
QjhGODhCRjUwHhcNMjUxMDI5MDg0NzA1WhcNMjUxMTA1MDg0NzA1WjAYMRYwFAYD
VQQDEw02OTAxZDQ4OS1kOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLcUWWykDnupZGU5U8sIDnOxRWyt78+Be+zje5Xklqb2Ldu6RQ7av5MXvqut
oNNElBayUokjUxFVucGRsVHiMbZLn49sZtfyewxLXc+HASdaWGvYvIT8lJvvdNZ3
IK28rIkrvz9oe2FUr5espyWP0ibP/YlrJ8LHIKSdcoXa2lh1LbQpsWYK0itgaTFw
lKy+AAGJugbZtA/8O45nCDfX/RGUNffhdyuHfGrpXDOFZ8qNIK/viDTHzN9KoLiL
IGvNhu0F0FTVQ2vfeXUJr3zqH4KJYCfC6GbnQOHLNJSgR3aU+MvlmmDbnWl+teGo
YZa+J6V/T7+DcwZ7IJkqyu6FrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzTc9bq
nkvGeCMtbAFYl0ZBB2EJMB8GA1UdIwQYMBaAFIyZaKCUAPMi9JWY4nUR/OG4+Iv1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFMi85ODc5MjQyNjEy
QTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5TDBsWmppZFJIODRiajRp
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKbG9vSlFBOHlMMGxaamlkUkg4NGJqNGlfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzRFMi85ODc5MjQyNjEyQTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5
TDBsWmppZFJIODRiajRpX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuL+T4XoZYY1v9gt6Aj3JJIumboIQH9JR3W2Qk9XxV+IeuvO06OSAV
UNnjych99l9autbTCw+eC2xNuzX3fC8DT4vqJLZem79d5eRAStMmzs5BNJUA7ry9
zuNmUsjsMnLX9hCuJA+CRnWmFhdLOVtlxIlNLofwwA3asPNNF+m0tG1dn9fJsHVP
bTnB8yLiJk2RnaXbIeXTpcFFtxVS1TJtCGPBNh7jhafqHR8TFhNw1FKticq1ajxP
hhmAEY0mNs48MZECZGQyTJYNbzTr01KBEbfgoaeYVm3gPhhLVDIgSFej4glJnbxo
pdigqJ72C0oBEOof4fBvpHbxDXo7WTLo
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:57:14 2026 by rpki-client