This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File:                     ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier:          x2qhH7rhxYL5upWf8x+omRCaTo9ZJL6/ST7SjQI7Yug=
Subject key identifier:   F8:72:37:91:A1:6F:76:32:6B:9C:53:C5:08:34:9C:5F:CD:48:BA:0F
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer:       /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number:          01E5
Signing time:             Sun 25 Jan 2026 02:08:44 +0000
Manifest this update:     Sun 25 Jan 2026 02:08:44 +0000
Manifest next update:     Sun 01 Feb 2026 02:08:44 +0000
Files and hashes:         1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: LBPoO7v6zNUeb0JG+275T4Dy2ncR2AuFidDgKR9FdzE=)
                          2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=)
                          3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
                          rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
        Validity
            Not Before: Jan 25 02:08:44 2026 GMT
            Not After : Feb  1 02:08:44 2026 GMT
        Subject: CN=69757b2c-f765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:ff:7c:76:e0:57:2d:da:27:92:46:9b:18:
                    f7:b8:f9:81:43:42:10:9c:bc:be:13:3a:02:96:e1:
                    1a:26:fa:6e:2b:4f:ae:d8:8b:96:a9:82:83:ca:0d:
                    96:8d:a6:15:00:20:55:7d:61:b9:dc:ad:08:2b:1e:
                    e0:b6:c3:c5:f6:6f:d6:14:5d:ac:74:8a:5a:50:70:
                    d7:3b:c3:c8:fd:8b:c3:12:2f:ae:e1:d2:b7:1e:b6:
                    3e:af:1e:34:54:a5:5b:a1:a5:9e:bd:45:25:1a:2b:
                    21:1f:6c:34:62:96:d0:cb:fb:a5:f5:16:67:7a:b4:
                    a3:e0:9a:5f:2c:8e:92:b3:cc:1b:1f:6a:4c:4f:9c:
                    05:e7:c0:e7:9e:c1:7a:84:15:24:60:47:0b:9f:4d:
                    a9:49:85:d1:77:13:d6:a5:c0:ed:fe:cf:f5:ea:de:
                    18:3a:bd:8e:60:b8:02:63:78:6d:19:d4:88:2e:ae:
                    5e:60:fa:a5:02:92:6c:4b:18:8f:7c:01:40:8d:d0:
                    d9:56:b0:6c:9c:8f:28:22:3c:bd:18:f8:36:39:8c:
                    5d:2e:ba:dc:13:1b:7a:6e:a6:c6:8b:4e:9e:48:cd:
                    21:15:b0:e9:6d:e7:ef:58:9a:ca:cb:45:b3:32:62:
                    8d:7b:5e:22:9e:7c:1c:00:53:85:55:dd:b1:22:18:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:37:91:A1:6F:76:32:6B:9C:53:C5:08:34:9C:5F:CD:48:BA:0F
            X509v3 Authority Key Identifier:
                keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a1:cd:42:cd:94:e2:27:3c:bc:73:57:f1:ae:dc:1e:df:57:
         cc:26:e7:ba:3c:bf:18:b2:5f:eb:a8:e7:f3:4e:c3:0b:04:af:
         c2:3d:02:20:61:b9:38:65:ed:79:8f:e0:59:7a:76:72:74:5b:
         d1:59:b2:e8:1e:64:ee:f8:46:44:7f:6b:42:4e:bf:56:5e:c1:
         56:70:f7:9d:7d:58:1d:49:e4:38:a9:0f:a3:0f:87:82:a2:b6:
         49:d2:1d:e1:35:3e:8a:0b:b0:8e:b5:9b:05:5f:07:51:d2:4c:
         eb:ff:38:81:50:28:d4:31:01:06:c5:fa:57:d9:ae:2d:0e:03:
         59:37:9f:0c:c9:b4:06:00:63:e3:27:47:0e:bc:81:5b:a2:31:
         39:77:47:03:6b:7c:90:87:07:b1:fa:ae:05:8f:54:8b:3e:6f:
         c5:2f:96:2b:69:96:68:61:41:bb:ea:cb:37:fe:5a:47:ee:b3:
         5a:87:1b:9f:c8:9f:c0:33:92:03:7e:2e:85:19:b8:07:47:d7:
         87:37:44:c9:59:49:9d:0d:38:5d:17:14:fe:0f:0a:a8:cf:b5:
         73:6a:03:f7:67:0a:98:a5:b7:40:15:53:d9:51:79:da:74:52:
         da:0d:a2:e7:45:fe:62:83:33:ff:b8:bf:55:98:bb:22:6f:3d:
         02:73:a5:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix
MDZBMTQxQ0EwHhcNMjYwMTI1MDIwODQ0WhcNMjYwMjAxMDIwODQ0WjAYMRYwFAYD
VQQDDA02OTc1N2IyYy1mNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUf/fHbgVy3aJ5JGmxj3uPmBQ0IQnLy+EzoCluEaJvpuK0+u2IuWqYKDyg2W
jaYVACBVfWG53K0IKx7gtsPF9m/WFF2sdIpaUHDXO8PI/YvDEi+u4dK3HrY+rx40
VKVboaWevUUlGishH2w0YpbQy/ul9RZnerSj4JpfLI6Ss8wbH2pMT5wF58DnnsF6
hBUkYEcLn02pSYXRdxPWpcDt/s/16t4YOr2OYLgCY3htGdSILq5eYPqlApJsSxiP
fAFAjdDZVrBsnI8oIjy9GPg2OYxdLrrcExt6bqbGi06eSM0hFbDpbefvWJrKy0Wz
MmKNe14innwcAFOFVd2xIhhvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhyN5Gh
b3Yya5xTxQg0nF/NSLoPMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx
QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ
YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAooc1CzZTiJzy8c1fxrtwe31fMJue6PL8Ysl/rqOfzTsMLBK/CPQIg
Ybk4Ze15j+BZenZydFvRWbLoHmTu+EZEf2tCTr9WXsFWcPedfVgdSeQ4qQ+jD4eC
orZJ0h3hNT6KC7COtZsFXwdR0kzr/ziBUCjUMQEGxfpX2a4tDgNZN58MybQGAGPj
J0cOvIFbojE5d0cDa3yQhwex+q4Fj1SLPm/FL5YraZZoYUG76ss3/lpH7rNahxuf
yJ/AM5IDfi6FGbgHR9eHN0TJWUmdDThdFxT+Dwqoz7VzagP3ZwqYpbdAFVPZUXna
dFLaDaLnRf5igzP/uL9VmLsibz0Cc6UI
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:15 2026 by rpki-client