This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
File:                     gyzAVuI-OIrjeBpSC92RFpY25Zs.mft (raw, json)
Hash identifier:          3y+IYScShv3SakrBj619bbv1rfhnhJgCXb5hwtWU+Jg=
Subject key identifier:   2B:F2:15:1F:5A:52:3E:E8:BD:99:3D:BB:03:AC:D9:34:21:1E:F4:3D
Authority key identifier: 83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B
Certificate issuer:       /CN=A91F1029/serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
Certificate serial:       0798
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
Manifest number:          0791
Signing time:             Tue 25 Nov 2025 03:11:57 +0000
Manifest this update:     Tue 25 Nov 2025 03:11:57 +0000
Manifest next update:     Tue 02 Dec 2025 03:11:57 +0000
Files and hashes:         1: gyzAVuI-OIrjeBpSC92RFpY25Zs.crl (hash: XSxbJTqP9D1hPui1FCknMEt8DQUYWMz/YVRypQ65e6s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1029, serialNumber=832CC056E23E388AE3781A520BDD91169636E59B
        Validity
            Not Before: Nov 25 03:11:57 2025 GMT
            Not After : Dec  2 03:11:57 2025 GMT
        Subject: CN=69251e7d-1785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:86:82:e7:82:79:b4:6f:95:ef:36:39:d4:
                    57:18:a5:49:ac:50:69:b6:b6:50:b4:c5:d5:08:8b:
                    f0:b4:bf:93:30:8d:bd:af:fe:dd:61:12:cf:bf:7a:
                    fe:fe:98:58:8c:65:1f:38:bf:c7:0e:61:0e:c6:09:
                    05:8d:22:e4:e6:2b:25:88:f9:e7:52:ba:fe:07:08:
                    f8:25:f6:36:7b:d1:c7:1d:70:6f:fc:ea:91:ac:99:
                    1e:eb:2e:fd:36:a5:ab:71:d4:27:f4:b5:46:72:5a:
                    56:a4:95:04:f4:7b:a0:ae:5c:9c:65:a9:e5:a6:77:
                    e4:d3:52:f9:3e:48:b1:e1:41:df:a2:7a:4d:ff:16:
                    09:35:ef:72:08:28:4b:ce:61:ac:10:2b:99:36:86:
                    6d:79:09:f9:d1:ca:0d:51:43:d6:5d:27:f0:74:ce:
                    fb:ce:fc:ca:27:db:9c:98:a9:45:30:90:a1:38:5e:
                    18:df:a3:d2:81:7f:a1:6a:de:21:96:ec:e9:4e:d2:
                    97:46:f3:70:34:37:63:1c:83:e6:f9:bf:b4:49:69:
                    4d:3a:5c:38:5a:25:8f:11:89:9d:83:c3:5a:66:8d:
                    70:91:89:c7:63:d8:6d:fc:19:dd:d3:5e:21:e1:d4:
                    5b:4a:67:63:4f:cf:41:eb:d1:da:2f:d8:54:a5:e2:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:15:1F:5A:52:3E:E8:BD:99:3D:BB:03:AC:D9:34:21:1E:F4:3D
            X509v3 Authority Key Identifier:
                keyid:83:2C:C0:56:E2:3E:38:8A:E3:78:1A:52:0B:DD:91:16:96:36:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyzAVuI-OIrjeBpSC92RFpY25Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1029/10897B322FB011EBA866CF34C4F9AE02/gyzAVuI-OIrjeBpSC92RFpY25Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4a:a8:c3:52:62:a2:b1:be:90:da:ab:f5:56:c3:88:b2:08:
         a5:00:c2:18:2c:12:14:da:92:5a:ba:44:09:92:43:d1:80:b1:
         10:a6:8b:0b:d1:c1:eb:b9:68:ca:93:71:4a:40:2e:45:91:6b:
         82:61:3e:d7:13:fa:75:0f:9f:d1:96:a4:2e:05:8d:94:89:14:
         c8:be:cd:7c:ca:33:03:e3:41:2e:44:d1:d1:c8:d7:d2:f7:e5:
         6a:aa:62:75:8a:4b:26:58:65:4d:70:5f:9b:13:96:b2:56:41:
         b4:fe:37:89:1f:57:5f:7f:d4:e9:a9:3b:03:7d:22:e5:a3:78:
         9c:50:d5:37:0b:c2:53:cd:f9:a2:b3:5c:18:45:eb:41:41:6c:
         8d:f5:b3:d2:91:59:12:c1:cf:b1:16:79:a2:69:35:a2:30:f3:
         5b:38:22:9b:5c:06:65:04:81:26:a6:e7:94:98:bb:d1:bd:82:
         17:c6:69:b5:f4:a4:57:0f:e5:8e:81:a9:7d:5b:0e:68:f4:13:
         a5:07:6b:37:2e:1a:91:ec:33:32:ee:3b:51:15:9b:d3:a3:9a:
         15:fa:8e:77:07:10:55:3f:ea:ab:f0:60:f5:5a:14:4c:6d:54:
         8e:2a:4e:81:8d:9d:cb:38:1a:86:3d:74:d5:74:7c:bb:dc:30:
         14:3a:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:40:06 2026 by rpki-client