This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
File:                     8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json)
Hash identifier:          2A6dXDNYzYhgq4vg0lXlwpjaxaXdZ+i1ROzkyxz7ma8=
Subject key identifier:   83:A5:E0:16:FE:FC:43:AD:B0:8A:AF:E7:E3:0A:04:DF:F9:93:2F:E6
Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C
Certificate issuer:       /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C
Certificate serial:       0A12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
Manifest number:          0A0B
Signing time:             Mon 21 Jul 2025 02:00:08 +0000
Manifest this update:     Mon 21 Jul 2025 02:00:07 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:07 +0000
Files and hashes:         1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: NUhoFAWDz6LzlojfNmIoEzJTlZeQWO7ftUEC6eSM+cA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4749, serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C
        Validity
            Not Before: Jul 21 02:00:07 2025 GMT
            Not After : Jul 28 02:00:07 2025 GMT
        Subject: CN=687d9f28-8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:c4:09:4d:bc:8c:13:04:0c:e3:8c:37:f2:
                    8a:85:37:88:8a:3e:ed:06:7e:ef:b0:ee:bc:2c:9c:
                    78:73:07:8c:23:e2:6f:13:83:29:93:a5:c2:88:90:
                    86:36:a3:71:be:a2:92:f3:77:49:fa:16:31:02:0c:
                    5b:c6:91:c6:e5:96:c8:73:14:61:81:e9:e4:a2:12:
                    3b:cb:71:bb:99:ed:98:9e:2d:77:80:1f:25:a1:11:
                    43:cc:1f:c7:a2:56:e0:aa:42:ff:4d:d7:c9:68:a1:
                    fb:66:2e:d3:41:c5:54:07:d5:18:dc:9d:c8:52:c1:
                    3b:16:b2:8e:b6:8d:ca:32:f0:24:76:8a:33:7f:97:
                    ca:d1:8d:86:d1:d0:19:ae:27:f9:39:e7:f2:4e:00:
                    73:14:0c:e0:31:ac:e8:6e:46:5c:f5:84:5e:7c:e1:
                    59:58:c2:ba:af:63:5a:df:05:61:b0:dc:68:50:b9:
                    e2:da:fa:f5:5d:cd:b9:3d:2c:a3:fe:29:cd:9a:9d:
                    e6:3e:fe:c6:87:8f:f1:d8:25:34:63:c6:24:6a:84:
                    a3:b6:9f:88:fb:cf:9a:d1:6b:14:1f:09:96:07:43:
                    c4:3f:95:a4:98:65:8a:0c:99:4c:27:ce:e4:e8:7c:
                    30:ec:bc:d2:3d:c7:fc:1e:dc:fe:af:ea:79:e2:21:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:E0:16:FE:FC:43:AD:B0:8A:AF:E7:E3:0A:04:DF:F9:93:2F:E6
            X509v3 Authority Key Identifier:
                keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:84:45:77:3a:49:c5:70:e3:89:28:41:6c:19:cb:f0:a8:e0:
         e4:1c:31:ff:b0:5a:14:68:d2:04:3f:0e:1b:44:e0:77:b2:08:
         a3:44:2d:81:d4:d3:4c:f1:c4:bb:8d:6d:d2:97:53:10:99:dc:
         1b:19:09:f3:ee:01:9b:cd:37:58:2f:a2:8d:c3:e3:6f:32:c7:
         07:61:1b:1a:ad:27:f4:09:1c:da:05:c2:4d:cf:b4:f3:6e:7c:
         15:87:0a:03:3e:2c:4f:3e:42:74:e7:99:88:24:92:6e:51:85:
         16:f6:f9:6f:dc:7d:73:71:1d:e0:e2:db:75:67:95:e1:af:e1:
         c3:f8:65:bf:dc:ba:f4:1f:e7:d7:01:49:b1:6d:33:74:91:02:
         f0:6d:32:97:c3:7a:78:a0:ed:89:55:4d:9d:53:5a:d4:3b:2e:
         5d:d4:72:e0:58:0d:aa:2c:dd:b9:83:d6:23:d1:c2:fb:9c:f6:
         9e:48:1e:59:1d:09:27:d5:d7:1a:ed:5c:fe:4c:ea:06:91:dd:
         8f:2d:80:75:55:17:dd:07:d5:8e:7c:3e:1f:08:f1:79:fb:7d:
         e4:a8:55:2a:27:47:bd:a9:f9:54:c9:23:00:8f:40:a1:ad:c2:
         63:c2:8f:7b:58:69:ae:9e:2b:e5:7a:62:a1:64:0e:71:86:49:
         6a:3a:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----