This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
File:                     WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json)
Hash identifier:          MMdsnqkICGx8HBEHJTyv3wBX954YgkxFUEP/5DRqFOQ=
Subject key identifier:   D4:1B:81:D2:7F:14:A6:BB:95:7F:DD:5D:CB:EE:F1:D2:E2:A0:4B:1A
Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81
Certificate issuer:       /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
Certificate serial:       0B9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
Manifest number:          0B88
Signing time:             Mon 25 Aug 2025 22:58:51 +0000
Manifest this update:     Mon 25 Aug 2025 22:58:51 +0000
Manifest next update:     Mon 01 Sep 2025 22:58:51 +0000
Files and hashes:         1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: m0TjOAusPcb+GdBm1v0amlFnDl7DoifuhQEW06hztvA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81
        Validity
            Not Before: Aug 25 22:58:51 2025 GMT
            Not After : Sep  1 22:58:51 2025 GMT
        Subject: CN=68aceaab-6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:b0:9d:f0:7d:d0:8b:1c:59:95:11:19:2e:
                    52:5b:0e:ff:8f:82:2f:9f:67:e6:f3:f5:ef:3b:5a:
                    a8:ef:69:7f:62:0e:ac:e6:41:5d:74:2c:d9:54:dc:
                    f0:6c:76:31:cb:ce:5f:a4:46:e2:ee:ce:31:cf:7b:
                    9d:0e:90:17:2b:ca:2d:86:c2:89:2f:55:8a:bb:a1:
                    0e:2c:82:e5:ba:ee:28:7f:57:6f:51:10:dd:f6:60:
                    c8:c1:22:5b:c6:14:1c:9c:5b:98:74:6c:11:75:f5:
                    22:d2:90:f2:4c:31:19:4b:8d:89:6b:ca:47:79:60:
                    04:8a:cd:44:da:0a:3b:2c:7d:64:41:53:6b:6b:d4:
                    40:6f:4f:24:97:1a:52:1f:0e:15:3b:4b:53:f9:46:
                    c3:1d:42:af:43:96:fa:1d:7f:fa:6e:56:f8:97:2a:
                    c6:13:a1:78:9e:41:0a:4e:bc:b7:16:c9:89:d8:9d:
                    7e:50:be:15:8a:6c:5a:6e:36:5e:77:a6:70:fe:1a:
                    a9:c7:98:2f:56:08:5a:72:80:ef:a7:fc:0d:33:47:
                    eb:b6:9a:bc:9e:68:05:21:85:54:be:3a:1d:2c:3b:
                    8b:60:af:3f:05:30:6a:de:a6:61:ab:a5:d4:f7:34:
                    ef:03:02:0a:ed:09:07:a9:80:45:72:5d:3e:7b:fb:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1B:81:D2:7F:14:A6:BB:95:7F:DD:5D:CB:EE:F1:D2:E2:A0:4B:1A
            X509v3 Authority Key Identifier:
                keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:bc:e3:e1:61:ea:4c:c1:59:12:2d:80:4f:f8:16:f5:b4:
         01:9b:e9:59:fb:24:7c:b5:a7:94:ce:a6:f1:37:82:ac:52:f3:
         ec:3e:18:f8:4d:e8:4b:bc:a8:33:a1:46:8d:1c:e3:12:a4:1d:
         7c:42:4c:aa:e6:11:d0:e8:d2:08:58:0d:04:f8:4f:c5:29:dd:
         d2:11:4e:aa:97:61:82:b1:9e:c8:d0:07:cd:32:d2:0e:40:9d:
         bb:f2:8a:fc:0e:a1:be:cd:a0:13:9f:25:46:dc:12:b5:67:3b:
         fd:75:a0:15:ac:34:e6:5e:ec:5d:f0:1d:af:54:62:6f:d9:c9:
         a7:fe:e8:c0:64:95:3f:36:33:67:be:10:86:98:2e:88:b6:6d:
         3b:09:5d:13:05:f6:a9:8f:58:d2:b9:35:20:23:39:6b:62:54:
         4f:17:89:79:81:92:6b:00:78:2f:22:ad:35:34:9a:77:a3:99:
         7d:da:bb:ca:fb:e5:a6:ac:1c:9c:b7:a1:cf:85:45:32:63:6b:
         9b:f8:78:3b:5d:5a:17:42:3d:ea:5a:d7:dc:ea:32:38:aa:e3:
         eb:38:51:53:48:8b:3b:04:77:11:12:7c:96:8e:fe:e8:7f:1d:
         3c:ab:21:4b:15:d2:b9:ca:b9:dd:c7:40:b2:ef:82:e5:63:6d:
         06:6d:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----