This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File:                     ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier:          Www25Z7U0w4GplMlnH5x8YQ9GiY51dcnxmvV5pFSQNU=
Subject key identifier:   6C:88:62:37:04:BD:C6:11:91:2A:07:2D:1D:1A:38:46:CB:48:42:4F
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number:          B7
Signing time:             Sun 25 Jan 2026 05:20:33 +0000
Manifest this update:     Sun 25 Jan 2026 05:20:32 +0000
Manifest next update:     Sun 01 Feb 2026 05:20:32 +0000
Files and hashes:         1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: 6QVkyTaezCYcQA8QENkkPsxfJE4D80CdMp1DOw6sbnE=)
                          2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=)
                          3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
        Validity
            Not Before: Jan 25 05:20:32 2026 GMT
            Not After : Feb  1 05:20:32 2026 GMT
        Subject: CN=6975a821-2b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:93:b0:6a:7e:21:34:71:63:0d:64:81:80:
                    74:f9:fb:d5:73:1a:a8:85:ec:64:c8:6f:3b:fa:75:
                    20:35:dd:4f:c0:e1:42:ae:b2:ce:be:54:a2:82:1a:
                    a4:ff:a7:7f:b9:69:64:22:4d:6a:0f:a4:49:90:a2:
                    ec:db:2d:81:87:d6:c8:e8:5b:b7:d0:7b:ed:b5:45:
                    07:e4:02:6a:ee:c3:ee:e8:7f:d4:e6:3c:a7:e5:43:
                    5d:ba:82:35:80:db:af:13:df:a8:c1:4a:df:79:03:
                    14:9c:83:fd:62:e4:be:fc:66:33:5b:11:48:d7:51:
                    7b:96:fe:7d:28:5b:9d:3f:e4:91:a3:b9:10:b8:20:
                    37:a6:b0:79:8f:53:a3:35:d5:9c:66:f4:f8:39:4d:
                    25:7f:be:33:ff:e9:d6:8f:2a:73:82:01:22:53:7d:
                    62:74:2e:99:9e:be:1c:bc:7d:6f:b0:4b:90:32:a1:
                    13:6f:59:4c:86:ae:e6:d4:b5:78:eb:7e:b8:cd:69:
                    8b:ef:3d:55:a6:df:41:ef:e8:94:df:29:c6:7b:73:
                    83:5c:1d:68:fd:81:87:03:36:92:2e:e3:72:e1:57:
                    c3:6f:7b:d5:4f:7c:ae:aa:99:ff:8d:f7:9a:c2:ef:
                    72:7e:a5:4c:b6:ea:6e:2d:8f:33:1e:46:08:bb:88:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:88:62:37:04:BD:C6:11:91:2A:07:2D:1D:1A:38:46:CB:48:42:4F
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:b2:51:72:1a:d2:e2:1a:65:b6:79:a7:e1:47:1c:8c:a0:
         fd:f6:fd:66:5b:f8:b1:06:94:2c:dd:fa:7f:c4:f9:9a:61:a4:
         b3:40:9b:68:74:4b:37:de:87:0d:b0:2b:d2:46:40:75:64:a2:
         cc:f6:e8:8a:f7:fb:63:57:e4:ce:7c:3c:c1:3a:38:74:37:7f:
         72:86:98:fc:c8:42:7a:d6:07:0a:0d:01:7c:3b:75:03:67:89:
         b1:14:36:4f:79:14:d0:75:a3:03:f8:b5:61:2f:b3:a3:fa:5a:
         47:7e:c8:87:29:41:e4:d7:80:da:6c:b1:b8:39:a1:58:bf:ef:
         95:23:4a:74:fc:c4:ec:cd:97:5a:23:1b:aa:f5:13:77:56:52:
         3d:44:ac:5d:48:00:df:82:c9:7c:f2:aa:64:47:a4:2a:3b:e8:
         83:2b:09:ce:bc:e5:8d:e5:40:a0:0d:22:fa:66:84:f4:79:7b:
         d8:85:c6:16:da:53:47:69:38:ea:0c:43:86:7b:1a:03:17:a9:
         b4:f4:98:a4:a9:1b:31:ff:ec:7e:14:8b:66:42:4e:6d:a7:7f:
         ad:49:3f:50:a7:6c:63:67:8c:4c:a3:6a:b0:c5:ed:ae:03:3a:
         64:95:03:51:07:cb:15:4b:3e:0a:c3:ca:e2:fa:78:78:d7:52:
         f3:96:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:27:18 2026 by rpki-client