This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
File:                     z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json)
Hash identifier:          8MwNsHIZ1/cFDe82BJFWJ5O4/nHU0x4nTyr7+2TPIeY=
Subject key identifier:   0E:52:8F:42:F5:16:3D:A7:7D:CD:D3:84:F5:C3:B0:D9:E1:50:46:A6
Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D
Certificate issuer:       /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
Manifest number:          E5
Signing time:             Fri 23 Jan 2026 04:40:41 +0000
Manifest this update:     Fri 23 Jan 2026 04:40:41 +0000
Manifest next update:     Fri 30 Jan 2026 04:40:41 +0000
Files and hashes:         1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: G37rz/KPcdJNtPX0wf+g6kOXmq44YEP7wRZ0/p3iyQ0=)
                          2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: FavPk/VPzNmdyfzTqwHdLB9v/tbBaIwGatOG8UgLR7M=)
                          3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: s1vpGIKirgtSHmf9KuCxnuNf6mZcAnxglDUHzp5/fcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl
                          rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D
        Validity
            Not Before: Jan 23 04:40:41 2026 GMT
            Not After : Jan 30 04:40:41 2026 GMT
        Subject: CN=6972fbc9-b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:e1:eb:31:b7:ac:50:af:2b:35:a2:6a:4f:
                    54:05:34:9f:ba:13:c7:74:c3:a6:74:8e:ae:8e:7c:
                    46:08:3b:1f:b0:75:9a:de:a8:0f:e7:37:1c:fa:b8:
                    7a:15:06:dc:e9:45:0d:dd:8d:35:4d:d1:3e:d8:b0:
                    68:ef:35:89:0d:22:9e:89:50:5a:46:47:79:ed:4b:
                    e7:dc:46:4c:54:20:d4:cc:4a:6f:82:af:8f:49:3b:
                    a6:4b:2e:79:0d:a2:11:1a:27:47:2b:af:39:cb:20:
                    a4:90:21:f4:b7:9e:b6:ae:c6:13:56:d2:06:19:24:
                    40:70:4b:19:57:5a:8c:a5:9b:20:36:7c:17:c5:09:
                    61:49:98:b1:42:05:ad:a5:e1:03:c8:9b:b7:2c:e5:
                    4b:32:db:fd:36:ba:ec:13:fc:27:f7:64:d0:d1:d3:
                    49:17:f8:ee:78:fe:14:bb:fc:c6:ae:20:ee:b9:d0:
                    31:83:86:e7:8f:04:77:cd:a4:15:b7:c9:15:02:b1:
                    5e:98:03:d4:d5:ae:25:7f:86:7f:b1:c9:f6:0f:c1:
                    07:2a:c3:3d:dc:19:4a:e3:c7:98:ba:3e:83:60:ad:
                    68:3f:da:11:a5:ab:52:f2:29:2e:e9:48:32:e0:72:
                    cf:f2:6e:82:70:e0:a0:05:3f:a4:aa:4c:12:eb:5a:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:8F:42:F5:16:3D:A7:7D:CD:D3:84:F5:C3:B0:D9:E1:50:46:A6
            X509v3 Authority Key Identifier:
                keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:92:76:a8:ba:e3:5a:81:8a:96:e9:fe:f0:ae:ac:58:5a:17:
         a5:8f:32:c5:85:30:85:6a:02:a2:83:32:7d:d2:93:78:d8:b2:
         81:12:80:d9:c2:ba:92:69:ab:9c:21:77:40:e8:4e:7b:ab:8d:
         20:2a:4d:f0:b7:6c:9b:df:77:03:3a:b3:96:40:7a:2a:76:a7:
         51:2e:0d:11:ba:c7:78:fc:f5:83:1f:3e:68:7b:4b:92:e5:ca:
         f7:41:0a:aa:93:e2:de:00:7d:54:ae:e5:90:2a:c8:f9:84:d3:
         7c:5e:11:fc:bd:3d:2d:db:4e:b9:3a:d7:e9:99:4b:ef:cb:22:
         c2:de:9a:b1:df:e6:b4:13:df:b6:18:ce:cf:c2:05:a0:ca:48:
         c9:68:02:93:f2:6e:21:b9:db:ff:2a:2e:9c:c8:25:e5:c7:27:
         75:fe:da:78:a4:a0:e7:5d:9d:7c:74:4d:70:7f:f9:76:f5:cb:
         85:f3:7b:a0:4e:71:83:0b:1d:a2:d5:79:24:67:8b:5b:78:8c:
         9d:c7:ed:b1:dd:7f:1f:d5:6f:87:b8:bc:2a:1b:36:63:f6:51:
         53:d2:14:16:74:ea:42:fa:7e:f2:eb:9e:45:b1:3d:48:96:6c:
         12:f4:38:27:6a:80:8e:48:e7:13:86:ba:47:49:7a:43:35:b0:
         3c:75:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:48 2026 by rpki-client