This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          FZcvKXV1JJ/d0fwN1YdEofVVx9JMLFrUyi//PLv7cu4=
Subject key identifier:   FC:31:BA:E7:03:AA:B3:7F:52:6F:F2:94:D0:BD:0B:5C:FF:D8:8E:AF
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          016E
Signing time:             Sun 25 Jan 2026 03:17:24 +0000
Manifest this update:     Sun 25 Jan 2026 03:17:24 +0000
Manifest next update:     Sun 01 Feb 2026 03:17:24 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: ric9W/08wJNUOlvrV1EaOPyKfmn2asIHeLIFJx59MCQ=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Jan 25 03:17:24 2026 GMT
            Not After : Feb  1 03:17:24 2026 GMT
        Subject: CN=69758b44-8b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:d1:59:86:90:d8:1b:6e:61:3b:16:19:81:
                    ae:c9:31:88:43:93:58:eb:f1:9a:0c:39:16:f0:4e:
                    27:e9:99:e8:e2:63:c1:7e:e5:d0:53:b9:04:0a:fd:
                    26:e4:31:7d:3d:c0:0f:70:e6:21:3b:b6:8b:18:23:
                    7a:e9:ac:1c:32:48:fb:2b:ca:bd:da:0c:ca:86:8d:
                    96:d4:97:c3:49:13:93:82:e8:66:d2:8c:49:fe:0d:
                    2c:b6:fb:88:a2:a8:88:02:2d:1f:4e:03:41:4e:44:
                    80:3f:29:25:b9:56:28:20:da:96:3b:d3:b1:a9:21:
                    80:f8:83:8a:86:80:c1:eb:b5:4c:c0:79:d8:f5:c3:
                    ff:4c:f8:82:0c:0a:38:e7:3c:25:58:9d:12:2c:ee:
                    7b:6b:cb:ca:f5:e5:00:03:54:e4:a9:7c:f8:32:e2:
                    f1:03:1c:76:d1:bd:ec:b9:64:cb:79:e4:60:60:21:
                    ee:78:a7:77:47:00:83:c2:f1:34:bc:11:8f:60:c7:
                    e4:58:0b:8e:48:ef:31:dc:8d:92:3a:8d:83:e4:43:
                    d0:ae:49:2b:e6:70:5b:a6:d2:14:52:39:d1:ab:e2:
                    3e:32:08:9f:82:8a:ab:f3:f6:52:6f:ee:00:36:8f:
                    83:aa:c2:fe:97:9f:04:84:b1:10:80:1c:03:cb:e1:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:31:BA:E7:03:AA:B3:7F:52:6F:F2:94:D0:BD:0B:5C:FF:D8:8E:AF
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:17:a0:b1:70:32:21:a0:5b:1a:42:f0:d7:a8:76:4b:b4:
         b4:c7:56:03:ba:62:8b:f2:99:bb:43:d4:ba:3a:18:77:a6:6b:
         59:03:9f:b7:a6:64:61:91:2a:f0:74:a9:47:fd:7b:3e:5a:26:
         d1:37:9a:fe:b2:e8:6b:a2:87:73:b2:fc:6a:69:11:b2:b5:00:
         35:91:52:0a:00:e0:13:2d:79:d1:6e:65:f4:e0:85:3a:52:28:
         7d:15:cd:c6:78:ee:25:f7:e4:87:42:0b:5f:f7:b9:9d:2a:37:
         54:1e:10:79:24:6a:4e:23:f7:b6:18:3c:62:a6:8b:05:cc:d6:
         21:57:87:5d:a6:c4:b9:d9:8b:9c:7a:aa:d8:51:35:5d:bf:ba:
         2b:5b:cd:0a:23:1f:f2:2f:b0:d5:a3:d1:ce:0d:2a:c9:40:7d:
         06:f7:82:dd:55:2d:1b:ab:68:59:d5:17:5c:98:e9:6d:3c:8a:
         72:49:60:d2:63:a7:97:64:bc:f5:12:fb:c7:b7:a7:48:45:b4:
         3d:ae:38:1e:04:d5:72:31:a9:63:18:b8:fe:e0:6a:b2:d4:32:
         70:45:f2:a1:af:b3:23:6b:eb:b1:e6:6f:22:98:5c:1d:e7:32:
         34:05:5e:de:0e:67:01:96:c8:64:91:6c:91:5f:43:4e:f5:31:
         bf:ee:c2:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB
QTczMUI1NTIwHhcNMjYwMTI1MDMxNzI0WhcNMjYwMjAxMDMxNzI0WjAYMRYwFAYD
VQQDDA02OTc1OGI0NC04YjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJXRWYaQ2BtuYTsWGYGuyTGIQ5NY6/GaDDkW8E4n6Zno4mPBfuXQU7kECv0m
5DF9PcAPcOYhO7aLGCN66awcMkj7K8q92gzKho2W1JfDSROTguhm0oxJ/g0stvuI
oqiIAi0fTgNBTkSAPykluVYoINqWO9OxqSGA+IOKhoDB67VMwHnY9cP/TPiCDAo4
5zwlWJ0SLO57a8vK9eUAA1TkqXz4MuLxAxx20b3suWTLeeRgYCHueKd3RwCDwvE0
vBGPYMfkWAuOSO8x3I2SOo2D5EPQrkkr5nBbptIUUjnRq+I+Mgifgoqr8/ZSb+4A
No+DqsL+l58EhLEQgBwDy+FH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwxuucD
qrN/Um/ylNC9C1z/2I6vMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5
RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx
VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1txegsXAyIaBbGkLw16h2S7S0x1YDumKL8pm7Q9S6Ohh3pmtZA5+3
pmRhkSrwdKlH/Xs+WibRN5r+suhroodzsvxqaRGytQA1kVIKAOATLXnRbmX04IU6
Uih9Fc3GeO4l9+SHQgtf97mdKjdUHhB5JGpOI/e2GDxiposFzNYhV4ddpsS52Yuc
eqrYUTVdv7orW80KIx/yL7DVo9HODSrJQH0G94LdVS0bq2hZ1RdcmOltPIpySWDS
Y6eXZLz1EvvHt6dIRbQ9rjgeBNVyMaljGLj+4Gqy1DJwRfKhr7Mja+ux5m8imFwd
5zI0BV7eDmcBlshkkWyRX0NO9TG/7sIj
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:55 2026 by rpki-client