This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
File:                     zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft (raw, json)
Hash identifier:          qH5SuJcqtBMhO3Z7cKDEwL26aQPEMhjjQa8BkI0YEpE=
Subject key identifier:   36:58:6E:88:5D:0D:9A:02:17:7F:C9:B1:58:BD:05:A7:F5:4D:9F:9C
Authority key identifier: CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8
Certificate issuer:       /CN=A9133239/serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
Manifest number:          012A
Signing time:             Sun 25 Jan 2026 03:49:33 +0000
Manifest this update:     Sun 25 Jan 2026 03:49:32 +0000
Manifest next update:     Sun 01 Feb 2026 03:49:32 +0000
Files and hashes:         1: zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl (hash: Y/qaY8VTf/SKDYGhuH9DDYvFf9bRvekKMNr+9Rmp9YM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=CC6F44C1E25F37A3ADF7627B9777DFA177D9D1E8
        Validity
            Not Before: Jan 25 03:49:32 2026 GMT
            Not After : Feb  1 03:49:32 2026 GMT
        Subject: CN=697592cd-f2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:1a:8e:e9:31:bb:fe:5d:ad:6f:aa:26:97:
                    00:88:83:4a:f8:c2:8b:5d:7c:f5:a0:1f:44:72:7b:
                    50:76:9a:84:87:83:ae:05:94:6e:f5:b3:97:7b:4f:
                    c0:cc:4c:24:9e:c7:32:eb:8b:0e:03:d7:e9:90:11:
                    b1:d7:f3:df:c8:ce:42:74:36:43:9c:6b:1a:1d:47:
                    b8:2e:40:78:12:17:2c:1f:be:87:38:5e:45:30:b1:
                    3a:34:18:60:c8:7d:89:0d:b8:0a:a9:a6:2b:df:7c:
                    70:93:7e:94:f9:15:12:09:92:92:36:27:91:01:80:
                    e0:22:e4:a9:77:d5:ab:87:71:4a:e1:d9:41:13:c9:
                    a0:a9:fe:4e:29:d0:88:88:8a:40:64:41:67:d4:e5:
                    3e:b0:58:de:b8:d8:f6:7c:3d:63:c9:6c:e3:13:0c:
                    2e:a5:d6:2b:77:d6:4b:6d:72:20:d4:f0:9f:bb:2b:
                    1f:54:7f:8b:66:17:fb:26:d0:4e:a1:82:a8:a9:38:
                    74:3f:4a:ce:2c:c8:46:ee:e4:7d:2a:f1:b5:8d:fa:
                    f4:8e:5d:f4:af:b4:de:7d:fd:12:60:a8:29:2e:45:
                    9d:03:35:94:90:43:62:28:97:e1:89:f5:76:3f:d5:
                    e6:24:bf:65:ec:13:34:2b:65:5e:e7:3d:14:84:fc:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:6E:88:5D:0D:9A:02:17:7F:C9:B1:58:BD:05:A7:F5:4D:9F:9C
            X509v3 Authority Key Identifier:
                keyid:CC:6F:44:C1:E2:5F:37:A3:AD:F7:62:7B:97:77:DF:A1:77:D9:D1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zG9EweJfN6Ot92J7l3ffoXfZ0eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/7D129B582F0211EF8C7A5870C4F9AE02/zG9EweJfN6Ot92J7l3ffoXfZ0eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:ce:45:99:74:1a:a2:1e:02:e3:33:d7:2d:97:e0:de:c6:
         36:99:1c:67:29:86:d9:36:e1:b4:a2:35:48:1c:70:f2:64:c4:
         11:42:aa:42:ac:94:cd:6a:1c:c4:70:42:0d:7a:83:b8:58:41:
         58:a6:bf:79:75:ac:e1:38:0c:6a:be:aa:c9:58:6c:1f:66:e6:
         9b:12:34:6a:71:1e:bb:02:ec:a0:e0:89:ea:a2:c5:6e:3f:26:
         68:9d:8d:39:e1:f5:94:de:78:8d:c4:fd:fe:5b:a8:c5:cb:57:
         51:ff:70:08:dd:c7:b4:53:28:26:b2:26:a1:83:f5:03:bd:44:
         6f:df:55:cd:cf:f2:2e:71:3a:9c:f1:78:35:3d:d0:3a:8d:da:
         08:ae:cb:c7:6f:22:2c:ad:2b:92:0c:df:00:8c:26:af:69:0d:
         86:1a:15:f7:95:d7:0f:cc:f5:75:b0:35:4d:28:9d:7c:07:4a:
         42:49:df:5a:9c:a4:84:76:ec:76:4e:19:f0:76:6b:d2:1d:61:
         f6:70:03:34:2e:09:08:70:81:c0:e0:48:96:48:58:30:6f:bc:
         7f:23:63:26:67:38:fd:a1:98:86:3f:d0:31:64:81:9a:2e:e2:
         ee:12:d6:ab:45:b4:3a:44:66:23:cd:7a:22:14:0f:8e:71:54:
         99:58:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:58 2026 by rpki-client