This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
File:                     _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json)
Hash identifier:          abFLyt2+uUt0Oqv9OAej1N5IJTYS/+OXLc1uZp2yxn4=
Subject key identifier:   DA:9F:89:87:2E:17:A7:07:FB:EC:09:7A:89:DE:94:EB:B8:2C:5D:D8
Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23
Certificate issuer:       /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
Certificate serial:       087C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
Manifest number:          1482
Signing time:             Mon 01 Dec 2025 09:50:28 +0000
Manifest this update:     Mon 01 Dec 2025 09:50:27 +0000
Manifest next update:     Mon 08 Dec 2025 09:50:27 +0000
Files and hashes:         1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: ZnDDnDMnMrpXImimPYVMuEOBGLOCNQMoorOJVVHLyFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
        Validity
            Not Before: Dec  1 09:50:27 2025 GMT
            Not After : Dec  8 09:50:27 2025 GMT
        Subject: CN=692d64e4-5f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:1b:26:ed:b0:ed:db:7b:4c:f8:ce:77:03:
                    7d:5e:27:39:5a:a9:71:03:79:f5:c2:bd:7f:6a:d8:
                    1e:05:44:71:56:0a:79:89:d0:14:96:a9:89:51:41:
                    a3:39:dd:81:06:6e:ec:c7:e9:b1:4a:45:f7:62:9b:
                    05:e0:14:55:ed:9a:94:f2:06:b6:88:2d:36:f8:a1:
                    15:78:38:73:a3:3a:c2:6e:38:00:23:04:b5:51:ac:
                    1e:2d:2b:47:b8:78:8b:0d:2e:ad:26:b5:0f:c1:fb:
                    3a:0b:60:a6:72:5c:a7:25:29:ba:1e:c3:8a:39:a0:
                    10:a7:fb:69:94:4d:12:02:c5:0c:49:c2:a8:a8:8c:
                    89:c6:ac:6a:e1:51:3f:f4:cc:1a:22:bf:fa:3f:f8:
                    e3:61:4c:c2:38:d5:2b:79:e6:fd:af:f4:87:cb:51:
                    74:94:f0:db:fa:3d:07:52:36:ae:af:88:bb:ed:fb:
                    e1:33:71:0e:39:40:b1:80:23:f2:1c:c4:35:19:5d:
                    cd:52:58:aa:8a:53:d2:da:e5:c4:02:bc:6b:a1:91:
                    c4:b2:c1:90:df:30:9f:83:f1:4c:3b:b1:f2:0d:65:
                    ce:5f:d4:1d:22:51:91:b7:8a:8c:9e:27:18:6e:48:
                    c4:a8:b8:89:7b:6e:6c:d4:d2:f8:5a:62:92:53:f1:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9F:89:87:2E:17:A7:07:FB:EC:09:7A:89:DE:94:EB:B8:2C:5D:D8
            X509v3 Authority Key Identifier:
                keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:9c:6e:73:90:5b:3e:8b:45:50:17:2b:58:73:2b:1d:bd:
         0a:f7:ef:72:aa:73:f3:cd:ea:6e:38:b0:ee:fa:69:61:03:64:
         76:ca:2d:48:72:cb:be:36:41:93:19:57:0e:ad:e3:90:8e:29:
         2c:2d:10:4f:0f:ce:e0:b9:94:45:d8:ab:9e:ea:9a:2b:ae:3f:
         54:e9:dd:5b:cb:67:74:fe:15:61:8b:4b:67:11:21:5e:fd:88:
         87:e6:59:e9:c1:eb:7b:2a:c6:c4:7e:6f:05:f3:cb:47:8d:a6:
         a9:2f:2b:d2:10:6c:b2:79:cc:b8:36:95:d1:68:51:58:ce:e4:
         2c:9b:5b:9e:e3:f1:91:34:be:42:ff:8c:fb:bc:56:b5:9e:1b:
         f5:f7:95:ac:14:8b:30:47:c9:40:e0:41:86:7b:be:c7:59:b7:
         09:9e:12:90:1c:a5:61:7e:4a:3f:f3:a6:32:78:86:20:8e:6b:
         71:90:59:28:f2:db:53:34:08:2d:6c:8a:c7:a6:85:73:6b:e0:
         56:b9:89:36:0f:d1:7a:94:d1:7e:6d:8a:98:1b:81:73:1b:79:
         e8:1d:9d:c0:05:03:24:b0:04:a7:da:31:94:a1:96:df:a9:44:
         f1:8b:1d:7d:a4:8b:3e:c8:24:9c:91:7e:d1:39:7a:1c:fc:9a:
         29:36:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----