This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
File:                     zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json)
Hash identifier:          /nWkUBl1TGGs7S+ZbQeZAenfD4EIvGcRAmsRlHtKAaU=
Subject key identifier:   68:3D:8B:9B:D4:8D:77:CF:96:87:B8:AC:C3:E1:75:96:3D:D3:B0:16
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Certificate issuer:       /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial:       04C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
Manifest number:          04BB
Signing time:             Sat 24 Jan 2026 23:11:03 +0000
Manifest this update:     Sat 24 Jan 2026 23:11:03 +0000
Manifest next update:     Sat 31 Jan 2026 23:11:03 +0000
Files and hashes:         1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: L/ouefE6TTDacazRZfJZzhW0H9dVem9niAouXkrF0LE=)
                          2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: b5iA+EjgFRRRDPTOxN9OZK4W7cd+DE4anCRmuLNq9SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
                          rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
        Validity
            Not Before: Jan 24 23:11:03 2026 GMT
            Not After : Jan 31 23:11:03 2026 GMT
        Subject: CN=69755187-69dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:14:8b:23:45:c6:4a:c3:ef:15:6e:63:26:
                    01:ac:16:c0:e4:e1:0c:c5:55:57:0e:84:07:04:54:
                    7b:81:6d:bd:12:22:ff:3f:9f:e7:4c:96:62:a7:57:
                    0d:ae:3a:7b:dd:71:57:d8:e1:40:25:57:51:ff:bb:
                    2b:cc:b3:c6:56:cd:57:9c:98:e5:75:9c:57:48:6b:
                    d1:39:7e:11:47:77:d4:63:ef:b0:7b:f7:3f:d4:51:
                    4d:8a:3c:e3:50:a2:45:47:7f:b3:46:47:49:5f:1a:
                    fc:ce:41:a6:cb:ae:5d:af:8c:84:65:4e:ca:f2:6b:
                    c3:bd:07:54:fa:88:b8:0c:9e:ab:da:b2:64:60:09:
                    27:43:b7:34:30:9d:b9:75:13:be:a1:78:a4:b1:20:
                    ba:3f:34:e2:a0:39:3d:31:a4:81:c9:76:27:ed:bb:
                    2e:d5:64:27:68:b5:98:7c:ac:03:96:11:78:5c:fd:
                    1f:52:7c:ca:42:ee:26:0c:fb:14:e4:ec:4b:0b:05:
                    ef:df:71:1b:f2:6f:5c:a4:a7:25:e0:78:24:e8:58:
                    af:ad:2e:33:b8:ac:71:e6:45:74:f3:b1:b0:08:ce:
                    51:c2:71:c4:cc:ef:10:29:67:9a:ff:30:70:51:82:
                    31:98:78:c4:f3:0d:ad:17:b6:5b:12:24:be:76:35:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:8B:9B:D4:8D:77:CF:96:87:B8:AC:C3:E1:75:96:3D:D3:B0:16
            X509v3 Authority Key Identifier:
                keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:25:94:b1:cd:ec:04:41:e2:1e:f8:c0:1e:af:f4:b9:a8:
         42:75:d8:07:ed:04:f2:5b:99:b6:5d:b6:c2:b4:b6:d6:e2:09:
         7c:88:99:ab:89:d6:0e:fd:6f:aa:ef:27:a6:66:05:7d:28:18:
         32:06:19:42:c2:68:57:07:ce:6b:c7:42:9b:37:f6:72:03:6e:
         ca:a1:23:5c:3b:6b:46:a1:a3:9e:7e:81:2b:ff:86:8d:4c:7d:
         e6:9d:86:f2:94:37:93:ee:ee:1b:ca:a9:6d:eb:4d:06:3e:29:
         c9:04:72:e6:db:09:27:a8:19:12:f8:17:4d:2b:23:eb:4c:25:
         15:14:c7:ef:20:be:a6:f3:cd:51:73:b1:3f:5b:b0:92:ee:f3:
         c0:6e:50:18:0d:09:4f:a9:59:cd:8e:b1:ea:35:36:a7:83:62:
         23:8d:91:e2:f9:4d:e2:7a:d1:93:ec:ce:b3:2e:e2:df:ae:b5:
         cc:a5:9e:ff:f9:62:f0:ba:d4:bf:80:46:b6:e1:c1:bd:d5:42:
         72:f1:1b:6f:37:7e:a0:e8:6d:65:bd:7e:cd:cd:21:7b:28:5e:
         e0:e7:5b:34:aa:73:4b:04:d3:91:6e:28:d8:b0:c9:d4:1f:68:
         88:ea:08:77:f6:3d:18:06:be:c5:21:f6:35:2c:0a:60:b0:ed:
         3e:e3:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:53:56 2026 by rpki-client