This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
File:                     ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json)
Hash identifier:          m+0NpLLVaIFoE4dtGi4f8m8+P3q1O/mHKWi1kfO+BeY=
Subject key identifier:   0A:BA:E7:6B:D2:B6:9E:0B:56:FB:7F:70:1E:87:64:57:3F:B9:65:DA
Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F
Certificate issuer:       /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
Manifest number:          2F
Signing time:             Fri 23 Jan 2026 06:37:20 +0000
Manifest this update:     Fri 23 Jan 2026 06:37:20 +0000
Manifest next update:     Fri 30 Jan 2026 06:37:20 +0000
Files and hashes:         1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: KrrYGrDp6ExYUrBz9nm9c2kA4XQY6QH0un3a3PWCrOI=)
                          2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: SAspQcE3UhYSAhZA4XCGUAey+9nDMAa3DYVzr1PGnog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl
                          rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F
        Validity
            Not Before: Jan 23 06:37:20 2026 GMT
            Not After : Jan 30 06:37:20 2026 GMT
        Subject: CN=69731720-3325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:b0:d3:36:d2:ec:bd:52:13:61:be:72:33:
                    6a:2e:af:13:49:b7:33:dd:c1:8d:33:6f:25:35:94:
                    1f:fd:df:64:c6:73:b9:52:26:8e:fb:87:e6:3a:46:
                    f6:54:59:a7:7b:54:ce:15:62:11:74:92:fc:a4:d9:
                    4c:c1:23:43:f1:76:5c:3d:05:93:e0:ac:7a:be:f2:
                    57:53:26:f0:f6:0d:ab:2d:f7:31:50:7b:aa:13:37:
                    0f:9c:7c:ee:45:88:28:ba:a3:37:3a:9a:60:9e:5d:
                    97:2a:3c:27:3e:9c:51:2a:a3:73:5f:54:30:10:f4:
                    73:30:73:b4:f2:6d:6d:b8:fe:d0:c7:1b:1b:e3:4f:
                    23:fc:79:07:16:28:30:ca:af:46:76:e9:95:19:cc:
                    88:ab:6e:f6:25:55:1b:a6:0b:7c:ad:39:3a:e4:83:
                    69:6d:1c:d6:3a:93:e3:1b:49:e7:d8:e1:31:b0:ed:
                    3c:64:d1:2a:a2:42:e2:19:1b:44:ec:e1:ef:52:2c:
                    ef:27:72:e8:33:92:9f:73:f2:b2:d7:88:3f:98:2f:
                    65:d8:00:1f:59:7d:ee:26:90:68:1d:64:c0:a2:de:
                    a9:48:cf:da:47:76:9f:96:32:71:a2:44:86:9a:ed:
                    06:45:ac:1b:28:d5:e6:44:d0:55:97:e5:2f:b0:9d:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:E7:6B:D2:B6:9E:0B:56:FB:7F:70:1E:87:64:57:3F:B9:65:DA
            X509v3 Authority Key Identifier:
                keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:a6:9f:f0:a5:bc:5d:14:73:ad:bb:58:32:7b:f4:74:81:
         53:83:cf:70:2f:7a:80:4e:48:b7:50:d3:d0:51:79:cb:0b:52:
         b0:50:25:07:73:e6:7a:fa:a3:2c:2f:b1:16:f5:f5:72:07:ac:
         a3:a1:3c:38:f2:82:f4:ff:7e:d0:5d:eb:70:38:1a:fe:4b:8b:
         f1:ca:2a:75:58:da:73:9a:7e:6c:bc:e9:d3:d0:c6:aa:db:4d:
         4b:e1:47:55:d9:ea:e7:5a:8e:45:95:bf:84:f6:c5:56:f6:c3:
         a4:c7:6a:c6:35:20:24:97:fc:b5:bf:20:e9:54:a0:21:b7:dc:
         b1:24:c4:66:bb:5e:56:12:27:d2:51:be:d1:00:b9:c9:43:94:
         d4:16:95:71:df:96:f0:be:d6:a6:2e:22:b8:c1:23:20:d2:2c:
         66:c2:da:e2:9a:44:81:c7:8d:79:8f:e4:31:fd:46:7a:b5:e5:
         34:8a:79:63:88:69:bd:41:88:46:3c:fa:a0:bd:fc:01:d5:a3:
         3c:35:b8:bc:b4:43:4c:77:ea:93:f8:d5:b5:b0:1d:c9:3b:49:
         c1:90:73:85:1d:9f:d0:60:d6:b2:5e:4c:1e:c4:27:ad:82:b6:
         8c:11:d5:a6:85:b6:4c:28:c6:76:6e:59:75:8c:06:8e:a5:72:
         80:fb:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:02 2026 by rpki-client