This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft
File:                     29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json)
Hash identifier:          XAzTGZ4dFCIvShSSLI2xrA8E5rlVQYKOeziOBVPHElM=
Subject key identifier:   E3:4F:7A:D2:09:BB:D8:3A:C3:66:0F:E4:AA:67:69:F5:2A:A8:48:4F
Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22
Certificate issuer:       /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft
Manifest number:          0122
Signing time:             Mon 24 Nov 2025 02:50:02 +0000
Manifest this update:     Mon 24 Nov 2025 02:50:02 +0000
Manifest next update:     Mon 01 Dec 2025 02:50:02 +0000
Files and hashes:         1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: 3qv1KVgNCZuKAVxraOiTNuopKvkb6Pk/1HVKqzEKotw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
        Validity
            Not Before: Nov 24 02:50:02 2025 GMT
            Not After : Dec  1 02:50:02 2025 GMT
        Subject: CN=6923c7da-e3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:d7:4c:70:2c:6c:c8:cc:a1:55:3e:cc:9a:
                    77:d6:e5:fa:69:48:c6:94:3f:cf:b4:37:84:fe:33:
                    72:aa:39:26:3e:bf:23:14:58:c0:9f:f8:6f:3f:bb:
                    53:45:83:18:1e:15:36:e0:ef:86:d3:f1:3f:8c:6a:
                    7f:ee:5e:1c:fa:22:54:9a:1a:23:fe:0a:42:e5:84:
                    4b:2c:f4:1e:49:4a:93:d8:a7:10:c5:36:82:f2:43:
                    ca:75:46:1b:4b:fb:36:c8:08:3e:0e:b3:57:6a:4c:
                    9f:de:19:92:fd:1c:1a:65:60:8a:16:21:9d:0c:42:
                    41:52:41:cf:ae:24:1d:f0:7f:3e:18:55:ee:7a:f2:
                    0e:f5:4b:08:58:21:29:e3:46:51:b5:8b:33:ff:8d:
                    f3:62:3b:3f:69:a6:6c:b1:4f:02:2b:7a:8d:54:5e:
                    d9:98:30:e3:13:cf:bd:2b:b1:15:a2:c6:6e:18:ff:
                    98:2c:cc:12:50:58:00:46:0a:a3:6a:03:90:f2:49:
                    bd:7b:20:2f:14:5a:86:7e:fd:1c:32:2b:76:95:59:
                    28:8f:d3:76:31:02:34:13:ad:da:c3:ab:0f:1c:cf:
                    a5:af:70:40:8a:ca:1d:20:40:c4:98:be:b7:73:16:
                    52:2d:7f:07:93:6e:93:b5:dd:0f:6b:eb:c8:55:e7:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:7A:D2:09:BB:D8:3A:C3:66:0F:E4:AA:67:69:F5:2A:A8:48:4F
            X509v3 Authority Key Identifier:
                keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:be:83:b8:86:7b:84:5e:1d:4e:f4:9f:64:29:62:e6:2d:68:
         0f:65:25:bc:ea:ac:30:f4:03:39:08:35:4b:86:64:c8:e6:51:
         f4:f9:22:21:ea:eb:c7:99:8b:d0:5f:f0:81:84:0f:73:cf:7c:
         33:16:66:b6:77:ee:9a:3c:e3:25:21:ad:84:b2:35:5a:97:3c:
         d3:80:a5:88:59:15:cf:f5:eb:83:99:84:35:8c:34:79:b9:91:
         bd:05:24:05:cb:82:2a:f0:2b:ad:33:b0:c1:ba:0d:dd:5c:4b:
         49:2e:fc:b7:07:7d:06:75:34:47:4a:d2:b0:11:ca:8f:0f:8d:
         92:06:d1:a2:25:67:a1:40:6d:d9:3e:51:ad:05:44:a2:78:d2:
         b7:bf:37:bd:96:e4:91:bb:d9:09:33:58:50:31:4b:a8:34:2b:
         7d:5a:d2:58:58:41:fb:3d:2d:06:8c:66:f0:54:d3:4a:5b:47:
         10:24:b0:32:d1:4b:a2:17:38:c5:89:e7:0c:83:e8:57:59:be:
         cd:e8:a0:d8:9c:23:36:40:0d:06:6a:fe:5b:2d:17:35:f0:fb:
         3e:3c:2a:f1:e8:98:cc:1c:5b:3f:88:68:28:d5:e4:c5:4a:71:
         b5:d8:c1:a2:09:9a:b9:56:2c:16:e1:8c:45:5e:bc:6e:b8:d4:
         62:f7:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----