This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
File:                     ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json)
Hash identifier:          MYAkEE/Aqz1jc1BCoMtSkxR6KaTdKa/O2rEQMJYW9vQ=
Subject key identifier:   EE:07:B7:43:5E:A4:09:4C:A0:C7:C9:E2:44:56:94:9B:0A:49:9E:1A
Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67
Certificate issuer:       /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
Certificate serial:       1194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
Manifest number:          118C
Signing time:             Sat 24 Jan 2026 16:55:29 +0000
Manifest this update:     Sat 24 Jan 2026 16:55:28 +0000
Manifest next update:     Sat 31 Jan 2026 16:55:28 +0000
Files and hashes:         1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: WG9xphJ1S1DUtBvc0JiuP9+N+MifNy0fdcS7X7j91j8=)
                          2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl
                          rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4500 (0x1194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67
        Validity
            Not Before: Jan 24 16:55:28 2026 GMT
            Not After : Jan 31 16:55:28 2026 GMT
        Subject: CN=6974f981-0a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ed:94:82:82:98:56:4b:1a:31:c5:8e:65:cb:
                    43:a0:2b:02:eb:04:2e:8e:68:c9:01:3c:90:c7:32:
                    85:59:b5:ee:2b:62:4d:da:16:bc:3f:fd:ee:4e:7c:
                    94:a8:1a:9e:76:bc:e9:61:42:21:16:4e:fe:36:3f:
                    4a:eb:20:59:e7:29:b4:ae:5e:a7:8d:3f:8f:21:1b:
                    51:ab:f0:b0:26:63:e0:c6:72:28:8f:05:28:15:3d:
                    76:14:3b:9b:88:01:b1:75:f9:71:ce:90:7d:4c:5f:
                    f9:7e:d7:34:5a:e3:53:48:9e:c2:3e:26:95:10:75:
                    b4:1f:1a:64:48:6c:23:7b:7f:fb:5c:b5:11:31:2e:
                    09:dd:16:34:61:58:c8:bb:8e:5a:fd:92:6a:50:a2:
                    cb:8e:43:29:99:ad:e0:63:6e:f4:07:40:7a:7b:6f:
                    fe:bc:fd:86:0f:54:3e:16:89:ce:11:2f:51:dd:8f:
                    e8:dd:aa:fe:10:a0:88:8f:20:c6:89:19:9e:59:6c:
                    d0:39:47:80:0b:37:ac:a3:39:fc:5f:9d:82:c7:d6:
                    46:1e:1b:ac:cc:df:0b:5e:00:56:44:40:98:01:ab:
                    d9:ce:24:93:91:f9:78:21:08:ed:c5:e9:97:0e:f6:
                    27:ed:9a:52:0a:a9:c2:cf:79:c7:a4:fb:da:28:c9:
                    56:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:B7:43:5E:A4:09:4C:A0:C7:C9:E2:44:56:94:9B:0A:49:9E:1A
            X509v3 Authority Key Identifier:
                keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:93:d0:e2:7f:82:69:24:2b:b4:c3:3f:62:e9:dd:4a:01:41:
         a2:72:cd:b0:f5:22:ce:fb:86:ca:75:0f:56:08:db:d7:96:33:
         fb:b9:08:e7:ea:88:ce:6d:44:b9:9a:f0:35:14:3f:ed:5c:37:
         58:a0:8d:9e:f2:95:34:4c:9a:19:a0:bd:38:f5:ed:a1:5f:c4:
         15:de:7a:42:12:b6:b2:42:64:49:ef:67:4b:1c:87:fa:12:11:
         38:d8:64:5a:32:0d:71:23:c0:a9:ab:bf:b7:e4:f9:c0:2e:8d:
         8e:99:19:aa:3c:65:e6:17:5e:b9:11:c3:20:86:59:1e:25:23:
         1f:b9:66:2f:b2:86:5d:76:6d:ae:f6:66:12:08:ed:ad:6d:90:
         8d:8e:fd:f9:b8:d8:66:61:5d:c0:56:c4:7b:9d:69:97:53:3d:
         87:3e:29:ad:90:ce:56:cf:5f:e1:0e:d2:f5:6e:53:fb:29:48:
         69:de:93:68:3a:0f:db:c0:29:91:1f:ef:a4:8a:da:a2:9e:e7:
         b8:63:a9:0c:1c:2d:e4:75:97:b5:96:a8:56:bc:21:11:f5:9e:
         8d:74:fb:c8:99:77:a8:5d:bb:f3:5d:7c:1f:bb:d6:96:a5:3a:
         94:e4:40:08:b1:64:6e:12:01:48:8b:6f:1c:2c:b8:2a:56:0c:
         94:e7:86:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC
NkIxNTJENjcwHhcNMjYwMTI0MTY1NTI4WhcNMjYwMTMxMTY1NTI4WjAYMRYwFAYD
VQQDDA02OTc0Zjk4MS0wYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAze2UgoKYVksaMcWOZctDoCsC6wQujmjJATyQxzKFWbXuK2JN2ha8P/3uTnyU
qBqedrzpYUIhFk7+Nj9K6yBZ5ym0rl6njT+PIRtRq/CwJmPgxnIojwUoFT12FDub
iAGxdflxzpB9TF/5ftc0WuNTSJ7CPiaVEHW0HxpkSGwje3/7XLURMS4J3RY0YVjI
u45a/ZJqUKLLjkMpma3gY270B0B6e2/+vP2GD1Q+FonOES9R3Y/o3ar+EKCIjyDG
iRmeWWzQOUeACzesozn8X52Cx9ZGHhuszN8LXgBWRECYAavZziSTkfl4IQjtxemX
DvYn7ZpSCqnCz3nHpPvaKMlWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4Ht0Ne
pAlMoMfJ4kRWlJsKSZ4aMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz
MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5
V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0k9Dif4JpJCu0wz9i6d1KAUGics2w9SLO+4bKdQ9WCNvXljP7uQjn
6ojObUS5mvA1FD/tXDdYoI2e8pU0TJoZoL049e2hX8QV3npCErayQmRJ72dLHIf6
EhE42GRaMg1xI8Cpq7+35PnALo2OmRmqPGXmF165EcMghlkeJSMfuWYvsoZddm2u
9mYSCO2tbZCNjv35uNhmYV3AVsR7nWmXUz2HPimtkM5Wz1/hDtL1blP7KUhp3pNo
Og/bwCmRH++kitqinue4Y6kMHC3kdZe1lqhWvCER9Z6NdPvImXeoXbvzXXwfu9aW
pTqU5EAIsWRuEgFIi28cLLgqVgyU54YB
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:15 2026 by rpki-client