This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
File:                     ZWJxEurnsskvifeninGipPqV9T0.mft (raw, json)
Hash identifier:          gyfMtUqRSmp8jQWk+xx0zSHVXvAPJFZZ0rY28oHHHR8=
Subject key identifier:   F5:2A:DA:5A:82:07:09:11:9A:B8:56:FA:2B:0F:0A:A5:EB:93:8D:BF
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
Manifest number:          0103
Signing time:             Fri 23 Jan 2026 04:29:39 +0000
Manifest this update:     Fri 23 Jan 2026 04:29:39 +0000
Manifest next update:     Fri 30 Jan 2026 04:29:39 +0000
Files and hashes:         1: ZWJxEurnsskvifeninGipPqV9T0.crl (hash: xBbYlP35i3dyJ9W2ozhXDA16Ju+c0NSD+wmDHAfx+mk=)
                          2: 495B172A8B5711EFBFF2106FC4F9AE02.roa (hash: aIccTTmQAjUWJG4JUc4O7rOJv+fkFbjRaovRWP1s9VE=)
                          3: 74D48D868CED11EF820CF762C4F9AE02.roa (hash: UFgXP3d4j2GI3NTGWnwXf4X/OP6k8PUcstTXQZolCsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Jan 23 04:29:39 2026 GMT
            Not After : Jan 30 04:29:39 2026 GMT
        Subject: CN=6972f933-21e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:92:52:fa:c1:b9:72:8a:b1:8c:5a:b1:13:
                    eb:80:24:60:f0:c7:4b:57:88:72:07:9b:1f:01:17:
                    dc:65:4a:ba:5e:b3:88:3a:19:af:ec:4d:56:69:c5:
                    a7:57:32:6d:8b:62:88:56:2f:99:5a:d2:0e:e4:4e:
                    cf:7c:14:44:70:87:64:0d:b1:70:50:d2:53:1c:d0:
                    77:99:7f:c6:18:31:69:e2:ef:c3:44:00:94:7c:3c:
                    b2:55:4d:5f:91:b2:59:73:9b:7d:d5:85:b8:05:f2:
                    31:e4:b5:b0:a2:b5:d6:ac:56:52:55:61:8d:62:09:
                    a5:b3:d6:f9:39:81:7b:ee:c9:fb:8a:33:bf:18:e6:
                    51:8b:cc:ad:19:25:08:02:95:9a:fd:08:eb:57:42:
                    e6:c6:68:a5:a6:a8:7e:3c:15:7a:ff:90:44:cb:83:
                    a3:4f:ef:33:ec:9c:a2:6b:76:21:7d:bf:a4:66:08:
                    f5:fb:a1:0d:9f:58:fd:b9:59:dc:b9:d2:93:ef:82:
                    0f:0d:b4:98:fe:95:d2:49:06:92:1a:f4:5b:2a:77:
                    9f:3e:a3:1f:e3:6c:40:b4:b4:7a:03:d9:6e:8f:9c:
                    ec:dc:67:c4:6a:9c:08:16:b3:b0:53:8b:00:2e:dc:
                    f5:9c:11:e8:16:a5:ac:3c:35:34:cb:42:34:12:a8:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:DA:5A:82:07:09:11:9A:B8:56:FA:2B:0F:0A:A5:EB:93:8D:BF
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:75:c1:96:c9:63:70:c1:43:58:f6:6e:d0:13:33:6d:78:
         52:ef:30:07:63:ca:04:54:0f:a2:4d:0c:2f:70:d0:1e:61:f8:
         0e:df:e5:01:3a:03:a2:6d:0d:7d:e3:55:39:b2:a2:b5:1c:f1:
         9d:d5:a6:82:34:5b:21:01:e0:ba:0a:58:36:9d:07:38:35:9f:
         e7:a3:c3:80:e0:e1:d0:b4:ef:52:ba:60:7a:83:68:df:45:b1:
         1d:6d:e1:07:cb:f3:aa:38:1a:d5:3b:30:33:b3:46:0b:80:36:
         1f:f8:5d:22:c7:f7:da:40:53:0a:ed:03:49:d6:17:84:b9:e6:
         a6:d5:70:06:4d:d5:2d:00:14:5d:c7:25:84:e3:91:8a:a2:12:
         ba:38:50:07:be:a5:47:8b:85:9c:3b:97:66:8f:15:91:a6:63:
         6c:56:0a:a0:96:c2:f8:8b:60:78:7b:2e:7b:d2:75:40:ff:39:
         12:96:87:b9:f2:26:aa:bb:76:12:91:12:cd:0a:60:c0:c3:55:
         8f:c7:d0:c0:44:4e:bd:0f:3a:e5:8b:8c:c7:98:8c:7a:9b:98:
         ab:a5:bb:a0:30:d1:3a:b6:15:15:f2:43:c2:82:30:22:d4:d3:
         be:47:6c:de:31:3d:d7:4b:a4:c2:ee:7e:06:bc:b3:c6:8c:a1:
         e9:2e:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:53 2026 by rpki-client