This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File:                     ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier:          +WL9kaylZyeQzArAU6/hwtjXAjJUyu2/IQt7AqWk9oM=
Subject key identifier:   E6:9E:90:6A:BA:33:9B:6D:15:8C:05:D1:5D:49:E0:28:3E:33:6D:BF
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer:       /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial:       23D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number:          23C3
Signing time:             Sat 24 Jan 2026 15:39:06 +0000
Manifest this update:     Sat 24 Jan 2026 15:39:05 +0000
Manifest next update:     Sat 31 Jan 2026 15:39:05 +0000
Files and hashes:         1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: TNST2fKZF9Z7i4OV93sx7BYtl/15DLJq5UHrfwLxZAg=)
                          2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
                          rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9172 (0x23d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
        Validity
            Not Before: Jan 24 15:39:05 2026 GMT
            Not After : Jan 31 15:39:05 2026 GMT
        Subject: CN=6974e799-a3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:35:e1:ee:67:d2:42:9d:87:73:b9:1b:df:
                    e8:09:a6:6b:80:85:60:32:31:98:dc:17:54:33:54:
                    cb:1c:9f:b1:c9:48:94:06:4f:2a:b6:7d:15:25:fd:
                    ff:b2:26:1d:8b:4d:17:47:79:84:a3:01:2e:cd:ee:
                    1d:42:86:8e:6a:cf:ba:aa:e1:0b:c1:bb:34:af:f1:
                    9a:37:61:cc:a1:13:cf:67:6b:8f:6b:21:43:f2:71:
                    bb:ce:c6:1f:f3:c3:3d:fd:3f:99:74:19:b0:96:63:
                    6b:f2:5d:0d:66:31:18:27:a4:9b:87:5c:a9:50:e6:
                    fb:a2:6a:3f:02:7b:80:1e:ee:22:d0:32:94:25:2b:
                    42:16:6d:ff:73:84:e8:c2:28:3d:04:53:3d:a7:17:
                    3e:54:04:fc:09:f0:61:de:0b:94:a7:fa:18:4b:31:
                    0b:f5:de:76:a5:18:18:3f:91:ac:32:81:17:83:e6:
                    35:d6:92:c4:ce:63:89:db:b1:cc:24:66:a4:36:68:
                    37:5f:55:51:1e:06:8e:42:83:9a:db:0e:cf:5b:7c:
                    60:c9:df:ea:26:e9:ac:49:df:25:c8:99:62:59:66:
                    27:7a:4d:ea:de:cb:54:b4:1c:e5:68:2d:68:95:88:
                    af:ff:14:74:d4:ed:e4:f1:90:45:7c:d7:fd:34:ec:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9E:90:6A:BA:33:9B:6D:15:8C:05:D1:5D:49:E0:28:3E:33:6D:BF
            X509v3 Authority Key Identifier:
                keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:08:e6:65:71:51:19:2c:c3:ac:27:49:3c:d9:7b:3f:e2:09:
         b2:17:2a:b8:60:60:aa:11:b2:05:bf:51:3c:a0:70:d6:19:dd:
         ba:59:bd:99:b0:53:45:d3:f8:0a:b0:7e:a9:49:ea:77:e1:a0:
         f7:bc:6b:df:6b:73:49:05:b9:2c:48:8b:47:dc:56:bd:87:fe:
         38:bc:20:d5:eb:0a:69:07:53:cf:3b:5b:86:d7:fc:ff:45:6f:
         ea:fb:10:ed:78:e8:b0:22:58:c2:c0:55:d0:5c:49:42:7d:a4:
         bf:f1:b4:a8:15:8b:e9:4b:9b:09:76:3a:d6:d6:b7:97:91:66:
         26:db:8f:3f:56:fe:99:83:29:55:99:a9:df:69:49:d1:0d:ee:
         48:c4:23:d6:44:5b:e0:7c:7e:c2:62:45:e9:82:8e:4b:05:4d:
         7f:cb:59:9b:c7:8f:1a:99:2c:b5:3a:0d:e6:84:ab:c9:dc:5b:
         17:37:13:74:7b:00:8a:ad:ae:8e:37:44:70:8e:3a:51:12:cf:
         7c:87:d3:bd:a8:81:b7:2f:16:de:4f:ba:a1:5d:f8:39:52:2f:
         1c:6a:3e:8d:e0:b4:cb:20:01:b3:52:0d:06:e0:9c:c0:e7:4b:
         b8:c8:e7:e8:12:a6:42:e1:9a:f6:a2:ac:c5:17:56:b0:c3:83:
         e4:cd:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:10 2026 by rpki-client