This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File:                     Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier:          YcckgahuNFFE5CpoXs0hldelKpoMNWbivgPM3GSvSJU=
Subject key identifier:   53:77:97:45:0C:48:45:2E:80:AB:C4:CF:14:05:E8:60:D2:CC:AC:76
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer:       /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number:          0168
Signing time:             Sun 25 Jan 2026 03:14:27 +0000
Manifest this update:     Sun 25 Jan 2026 03:14:27 +0000
Manifest next update:     Sun 01 Feb 2026 03:14:27 +0000
Files and hashes:         1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: PC7TT43gAr9Tq4B0dLfme1SG2cZsmFphVQsPvpZAYNo=)
                          2: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: tLouppKY1O/6GXH+SdYfoILqmDN1F4xwDCVD59ai06g=)
                          3: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: bDk0dTCcXXwoyGNHG7dXikKHkNDvJb46kkua1d0llpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
                          rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
        Validity
            Not Before: Jan 25 03:14:27 2026 GMT
            Not After : Feb  1 03:14:27 2026 GMT
        Subject: CN=69758a93-54b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:c9:73:4f:83:37:80:9c:ca:0d:11:89:99:
                    cc:41:ed:dc:a7:fa:21:13:89:35:d5:a0:e8:79:14:
                    19:0f:81:c6:c9:4f:a1:3b:43:bb:56:f0:00:cf:57:
                    2a:2d:c1:8c:2f:2b:a1:db:ff:7a:c2:a1:3f:40:b2:
                    28:04:b6:66:90:9f:95:80:be:00:83:eb:4a:0e:e3:
                    f1:d1:2f:02:65:c8:f6:56:ae:80:0a:c7:38:b2:b4:
                    0f:b8:d3:03:9c:20:09:61:8a:c1:26:77:13:f0:15:
                    0a:e6:71:0b:10:86:53:39:d0:8d:25:ca:dc:c6:52:
                    ff:54:3b:73:30:bd:f1:f2:f2:71:08:aa:5b:a2:33:
                    1e:ef:6d:26:66:aa:ae:f2:d5:c8:1a:d4:73:d0:ed:
                    73:f1:ab:75:6b:8d:3a:53:97:ad:fe:84:a3:90:44:
                    c3:de:cf:e3:66:31:da:2e:84:26:05:68:46:0b:50:
                    21:b9:c5:fc:80:1d:46:3f:95:18:42:e3:82:f7:be:
                    ad:3b:9c:49:8d:0d:01:82:63:2d:a0:42:d5:8a:c7:
                    0c:9f:f5:0c:0b:0f:f2:7c:25:6d:67:8e:90:6f:61:
                    9f:14:f5:5b:68:26:61:9b:e5:e2:54:ae:5c:a0:9a:
                    2f:9a:3a:86:8f:18:e9:44:a5:fe:12:44:c1:6b:6f:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:77:97:45:0C:48:45:2E:80:AB:C4:CF:14:05:E8:60:D2:CC:AC:76
            X509v3 Authority Key Identifier:
                keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:52:b6:b6:27:ff:41:5f:f7:e7:34:a7:46:24:31:f3:ce:3c:
         03:f1:34:55:8b:6d:3e:45:23:92:23:9b:97:9f:79:4b:ae:b3:
         ff:48:ad:bf:14:c0:b1:ec:c1:58:7c:ee:e3:e3:9a:5e:50:58:
         1d:50:06:59:fd:c7:67:25:5e:e6:d9:4e:aa:14:45:1a:7a:36:
         4e:78:3c:79:96:b1:af:13:e3:b1:f5:6f:fd:04:c7:71:1f:1d:
         d5:d1:4b:22:6a:20:2b:18:da:58:50:55:97:a4:24:58:31:42:
         6d:82:07:a3:ad:71:f1:2a:18:05:de:9d:4b:a1:83:48:b1:1b:
         40:3e:82:f7:2b:1d:bf:1f:6a:57:da:6c:b8:18:12:5c:d2:29:
         bd:49:e8:a7:b1:a0:1a:04:bd:f3:07:e7:5f:0e:b5:84:14:dc:
         87:7a:af:36:da:26:18:6a:0d:b3:55:bb:00:8b:4f:07:7e:30:
         8a:5d:4e:87:c9:d5:74:46:6b:7d:07:b8:44:96:d7:65:55:24:
         dc:28:03:c3:f2:0b:a1:98:d9:83:94:af:4a:d4:ba:fb:b9:03:
         cc:99:d1:40:46:ea:9c:ef:82:9c:2e:a9:57:79:0b:09:ae:3c:
         9f:e0:3b:0c:09:85:67:fe:c6:32:2d:e7:ce:3a:23:54:13:67:
         e4:fe:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:32 2026 by rpki-client