This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
File:                     mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json)
Hash identifier:          4Zfh+XvWedGOXSdY4WgOXcnpZuszkymdEm9ZDCqtz1k=
Subject key identifier:   C6:A2:FB:5C:95:F9:F1:78:E7:5F:09:4D:DC:C0:1C:18:DD:52:09:D2
Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
Certificate issuer:       /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Certificate serial:       02D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
Manifest number:          02CB
Signing time:             Sun 25 Jan 2026 00:34:27 +0000
Manifest this update:     Sun 25 Jan 2026 00:34:27 +0000
Manifest next update:     Sun 01 Feb 2026 00:34:27 +0000
Files and hashes:         1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: ABX1k3gw8PYWzrNgzbAEcvVOpydNSsqYW/fcnZPuzF4=)
                          2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: omp1fXUs+vDBv/MaKIuGTrmCJ5TEGYnfoKG3I8GKsAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
        Validity
            Not Before: Jan 25 00:34:27 2026 GMT
            Not After : Feb  1 00:34:27 2026 GMT
        Subject: CN=69756513-6a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:03:c2:24:a2:93:e0:79:99:81:0f:7b:8a:
                    5f:8c:19:51:49:c1:ec:0d:2c:2a:1e:ad:61:98:9a:
                    aa:12:59:ee:b2:15:f2:5d:c2:e8:f6:2a:d8:5c:1b:
                    a3:e6:37:94:6d:c4:26:c8:a9:d5:00:7a:f2:03:43:
                    6e:4f:84:be:0b:4a:13:52:c3:c0:09:07:94:8b:f4:
                    dd:44:80:f9:b6:14:a5:00:cb:12:b9:66:1c:bc:f2:
                    b4:86:ef:bf:ca:2d:35:d4:76:4f:1f:36:da:db:cb:
                    ce:cd:35:e4:c5:36:d4:25:79:53:6b:de:a2:82:43:
                    3c:8e:89:e1:ef:00:d8:0c:33:16:2f:90:84:df:db:
                    ba:12:9e:0a:1f:fd:5c:01:96:91:12:e8:3f:22:78:
                    ea:85:4d:2d:20:65:4a:a6:be:51:df:49:a0:0f:b9:
                    bf:d6:c1:1a:b6:0e:55:e4:bb:e6:3d:89:5e:32:7c:
                    a0:4c:23:1a:fb:6c:95:f4:14:cf:2f:b0:09:be:a5:
                    0d:67:e8:83:a0:cd:58:c7:93:6e:41:21:4d:16:1d:
                    78:76:76:c8:29:29:f5:81:c1:5c:89:58:4a:d9:d2:
                    78:09:4c:33:5e:70:11:1e:0c:f9:9a:6b:e9:f2:d2:
                    cd:5a:d0:82:50:17:25:ab:1a:a6:b1:61:d2:b6:f3:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A2:FB:5C:95:F9:F1:78:E7:5F:09:4D:DC:C0:1C:18:DD:52:09:D2
            X509v3 Authority Key Identifier:
                keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:77:57:4e:1e:14:d2:09:63:28:43:c8:d2:c1:57:9f:be:56:
         bf:3d:ee:4d:46:06:fd:22:ca:d9:5a:9a:27:12:c2:c3:26:c1:
         dd:5b:ff:80:42:6b:2f:f9:8c:ed:be:43:70:9c:f6:71:8f:9a:
         30:ba:ea:84:0a:08:c3:4f:f9:f6:d8:e9:5b:f2:91:83:39:9a:
         51:8f:ac:60:bd:d2:a3:0f:2f:b6:aa:19:b7:f8:57:07:e5:0a:
         22:f8:0c:58:22:42:11:ac:bc:f4:2e:bd:a8:78:a4:23:1f:6f:
         b1:29:ce:f9:d0:44:30:f8:58:dd:4d:ed:cd:64:d6:11:c6:9b:
         e3:5b:71:83:f0:1e:c5:df:0a:94:3a:fd:d0:42:6a:52:7e:7f:
         f4:bd:51:e5:79:63:70:c9:61:0a:18:38:e9:53:7e:49:6c:eb:
         dd:cb:91:0b:7d:61:13:71:04:57:b2:fb:5f:eb:36:7c:24:88:
         77:e1:b4:ff:23:fd:8e:82:f4:dd:36:83:f8:ec:0f:fe:29:8a:
         fd:37:1c:a1:00:4c:be:63:39:6e:aa:a7:65:09:3d:51:63:53:
         9c:81:da:67:6d:4b:2f:0a:e6:0e:5f:0a:44:70:48:6e:b0:4a:
         f0:17:26:2b:a3:d1:9e:31:3d:8e:ae:10:fd:17:1a:56:9a:ef:
         04:8c:ad:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:20 2026 by rpki-client