This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
File:                     se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json)
Hash identifier:          joWts1bdXeb1oqFaH+HjZ0+aQ0SHVVYCRAeQ4UWwuMY=
Subject key identifier:   26:99:34:07:9F:73:E0:4C:01:88:CE:40:AD:98:04:A4:E5:CF:CA:6A
Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98
Certificate issuer:       /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
Manifest number:          07CA
Signing time:             Thu 06 Nov 2025 19:33:20 +0000
Manifest this update:     Thu 06 Nov 2025 19:33:19 +0000
Manifest next update:     Thu 13 Nov 2025 19:33:19 +0000
Files and hashes:         1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: Tf1IzS4pf5ziqSvZHubJpj5dPTQvyuZjDThpY7FcAQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98
        Validity
            Not Before: Nov  6 19:33:19 2025 GMT
            Not After : Nov 13 19:33:19 2025 GMT
        Subject: CN=690cf800-d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:6e:82:a1:2d:7f:89:43:07:4c:31:15:c4:
                    cb:d2:04:ea:d0:0b:af:68:8f:13:6a:49:00:ee:83:
                    8e:c8:f4:3e:73:c9:59:61:be:2f:1d:ee:ce:6d:ef:
                    f6:cc:af:9e:51:32:4e:dc:29:be:05:78:48:f4:93:
                    4f:c2:30:8e:a8:60:7e:2d:5b:66:29:5e:ef:3b:d1:
                    11:87:53:c8:67:bb:81:37:a3:0d:33:f1:98:1d:83:
                    d7:9c:b3:01:83:40:50:b0:95:f2:28:f3:dc:6b:82:
                    50:60:08:a7:50:0b:e1:45:1f:95:8b:5c:f0:d9:2e:
                    86:f5:41:c7:a3:e4:2a:68:41:ed:76:72:ad:fa:3b:
                    ba:71:2a:62:94:b6:c8:3d:b8:0c:ae:dc:7a:0d:35:
                    20:11:e3:dc:a4:12:f3:57:00:43:8a:36:28:6d:3a:
                    e7:40:88:40:58:d0:f0:b3:83:64:9a:6a:f9:b9:88:
                    7b:4f:87:dd:5f:e0:17:14:52:36:21:2f:6a:88:e7:
                    c9:58:47:03:4b:c3:61:02:6b:79:a8:33:bc:fd:f8:
                    f5:a0:f4:1a:67:7a:0c:af:ed:15:14:ae:b6:d4:c9:
                    92:55:47:21:67:3d:a1:d5:c8:62:6a:94:1b:2b:0a:
                    7b:8a:33:60:c5:d9:d1:49:f6:10:77:86:29:2f:39:
                    70:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:34:07:9F:73:E0:4C:01:88:CE:40:AD:98:04:A4:E5:CF:CA:6A
            X509v3 Authority Key Identifier:
                keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:5e:da:58:db:c9:5e:d8:39:9d:15:10:61:92:91:59:44:
         5e:69:11:26:eb:d0:1c:a8:b7:5b:38:2e:a0:d3:7b:73:0e:1c:
         3e:0b:b5:09:05:8c:14:f3:e4:1c:45:a5:1f:14:b1:4d:b3:ef:
         2a:cd:2a:d8:3c:44:14:ff:14:3e:79:33:b5:48:97:49:9b:90:
         07:b6:cb:04:fc:2e:85:5e:55:98:4a:52:75:1d:e4:3a:14:72:
         74:a5:20:97:63:90:a6:ce:02:46:35:82:e9:5f:06:04:4f:65:
         1a:0f:8d:f6:12:7c:0a:31:cc:57:92:b1:e6:33:e3:18:a8:15:
         bc:b4:1d:37:2e:3e:21:da:e4:06:75:e1:10:63:06:39:d0:f3:
         f7:76:76:62:35:b2:ce:42:a1:29:d1:9a:13:55:0b:74:57:69:
         59:cb:12:34:72:cc:c5:e4:a2:d1:e1:5e:66:ba:57:f8:ed:9d:
         ac:8d:27:3b:7e:e8:b9:39:84:1f:9b:6a:56:bc:1f:d2:a3:c9:
         ee:ae:90:25:8a:58:6d:98:28:1a:ef:6c:77:ea:8e:6a:f0:e0:
         7d:2b:33:fa:4e:3f:a6:4a:52:d8:9a:37:49:2e:ab:fc:3d:92:
         3a:c5:e3:e4:a3:e5:f0:0a:30:64:ef:ac:68:70:bc:e5:b6:7d:
         fe:ac:ca:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG
RUQyOTdBOTgwHhcNMjUxMTA2MTkzMzE5WhcNMjUxMTEzMTkzMzE5WjAYMRYwFAYD
VQQDEw02OTBjZjgwMC1kMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2P9ugqEtf4lDB0wxFcTL0gTq0AuvaI8TakkA7oOOyPQ+c8lZYb4vHe7Obe/2
zK+eUTJO3Cm+BXhI9JNPwjCOqGB+LVtmKV7vO9ERh1PIZ7uBN6MNM/GYHYPXnLMB
g0BQsJXyKPPca4JQYAinUAvhRR+Vi1zw2S6G9UHHo+QqaEHtdnKt+ju6cSpilLbI
PbgMrtx6DTUgEePcpBLzVwBDijYobTrnQIhAWNDws4Nkmmr5uYh7T4fdX+AXFFI2
IS9qiOfJWEcDS8NhAmt5qDO8/fj1oPQaZ3oMr+0VFK621MmSVUchZz2h1chiapQb
Kwp7ijNgxdnRSfYQd4YpLzlwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaZNAef
c+BMAYjOQK2YBKTlz8pqMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD
RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O
czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtFV7aWNvJXtg5nRUQYZKRWUReaREm69AcqLdbOC6g03tzDhw+C7UJ
BYwU8+QcRaUfFLFNs+8qzSrYPEQU/xQ+eTO1SJdJm5AHtssE/C6FXlWYSlJ1HeQ6
FHJ0pSCXY5CmzgJGNYLpXwYET2UaD432EnwKMcxXkrHmM+MYqBW8tB03Lj4h2uQG
deEQYwY50PP3dnZiNbLOQqEp0ZoTVQt0V2lZyxI0cszF5KLR4V5mulf47Z2sjSc7
fui5OYQfm2pWvB/So8nurpAlilhtmCga72x36o5q8OB9KzP6Tj+mSlLYmjdJLqv8
PZI6xePko+XwCjBk76xocLzltn3+rMp2
-----END CERTIFICATE-----
Generated at Thu Dec 25 09:22:39 2025 by rpki-client