This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
File:                     3gyPQrygWy9Vgea8y0wUpuZxthk.mft (raw, json)
Hash identifier:          PPOyjZIAgrWaupzSAzl6wTMyGcafaeTKRt7m56Cfl8w=
Subject key identifier:   F7:73:BC:2F:D5:9C:2A:0D:26:58:66:E2:8A:E3:BF:BC:A2:D5:F8:27
Authority key identifier: DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19
Certificate issuer:       /CN=A9187386/serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619
Certificate serial:       10C1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
Manifest number:          10B2
Signing time:             Tue 02 Dec 2025 17:01:10 +0000
Manifest this update:     Tue 02 Dec 2025 17:01:09 +0000
Manifest next update:     Tue 09 Dec 2025 17:01:09 +0000
Files and hashes:         1: 3gyPQrygWy9Vgea8y0wUpuZxthk.crl (hash: hTSLbfiMQcnTL4APd4XxFdzYgnj3xW8hRdmxskAvPCs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4289 (0x10c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187386, serialNumber=DE0C8F42BCA05B2F5581E6BCCB4C14A6E671B619
        Validity
            Not Before: Dec  2 17:01:09 2025 GMT
            Not After : Dec  9 17:01:09 2025 GMT
        Subject: CN=692f1b56-26a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:5b:fb:73:19:eb:2b:12:e3:3a:fe:4d:9b:
                    89:9e:16:f7:20:e9:47:12:5f:d3:6b:1e:07:2f:6e:
                    44:84:a8:b2:3b:97:ef:91:6d:da:b2:52:58:10:bc:
                    b1:7e:97:2f:ad:45:79:e3:1f:41:89:7f:7c:b1:54:
                    7e:09:d8:ab:40:1a:64:93:cd:35:d6:ca:79:1a:40:
                    9e:9d:44:56:cd:7d:e3:4e:fc:5d:db:cd:d7:6b:a9:
                    0f:eb:ef:d4:61:d5:2b:15:5a:3b:46:bf:4b:e6:a9:
                    68:6a:37:a0:b6:2c:04:b3:4e:30:11:ab:bc:40:60:
                    04:e3:59:c5:45:d2:21:7c:5c:dd:a4:1b:dc:49:02:
                    4a:00:2b:e1:1b:5b:78:25:78:1f:14:08:2c:6a:b0:
                    f3:75:7c:e9:a1:ca:04:cd:d3:87:79:44:dd:19:29:
                    46:89:70:31:ec:f9:d3:bf:26:a7:3d:f0:b0:8f:1a:
                    9f:e5:54:9f:0f:82:f6:c2:b8:a0:c7:c5:da:02:fd:
                    d5:f7:ae:73:8f:8d:a8:95:80:b2:11:ca:10:fb:6b:
                    ea:1d:0a:75:a0:b9:2b:24:4e:7b:48:1f:58:10:96:
                    3c:b7:59:75:a0:fd:7f:e7:66:2c:cf:a9:0f:e9:60:
                    1d:23:22:17:a6:4f:90:03:ff:e3:12:e5:44:df:d4:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:73:BC:2F:D5:9C:2A:0D:26:58:66:E2:8A:E3:BF:BC:A2:D5:F8:27
            X509v3 Authority Key Identifier:
                keyid:DE:0C:8F:42:BC:A0:5B:2F:55:81:E6:BC:CB:4C:14:A6:E6:71:B6:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3gyPQrygWy9Vgea8y0wUpuZxthk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187386/49CD6A3C3B2611E9B20D2681C4F9AE02/3gyPQrygWy9Vgea8y0wUpuZxthk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:81:a8:8b:ab:60:8b:b0:f3:68:ea:71:8d:41:63:3d:e1:0b:
         3a:5f:fc:22:8e:8f:7d:c7:ae:f2:76:6a:95:fe:a8:43:3d:1c:
         54:af:96:25:fe:2b:31:fb:96:7d:3f:44:6a:d4:d1:e7:ce:d2:
         dc:89:60:10:f4:a7:ab:79:71:24:8b:a2:2e:54:f9:c9:c3:79:
         ca:56:5b:7b:7b:ae:41:fa:9d:b1:56:45:65:44:8d:3a:0e:08:
         b7:54:a8:b5:80:31:ab:dd:5d:24:99:3b:7c:ad:ee:b7:43:c2:
         fd:ec:27:d7:ee:52:64:46:dc:ab:ec:a6:82:2f:7a:db:a9:83:
         ee:17:80:94:c5:a2:0d:9a:60:84:01:ea:71:44:e0:9d:e9:06:
         2e:a3:b0:94:2f:9a:5d:7e:ae:de:d7:dc:50:ad:65:78:70:48:
         d0:a3:b1:83:44:8f:58:5f:fe:89:6c:06:20:32:d7:f7:c6:b8:
         a9:12:3b:37:11:12:cb:cc:4b:18:ed:dd:0d:c0:bb:86:cc:3d:
         cc:1d:17:b7:e0:9b:60:30:6d:c6:f9:c1:de:3e:ea:37:02:f2:
         68:0f:7c:36:41:75:8f:3c:29:5f:8a:9a:a1:43:10:b6:37:c8:
         08:2d:d8:23:d2:5d:fc:52:0a:85:67:5b:c7:33:4f:9b:99:21:
         30:17:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----