This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
File:                     ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft (raw, json)
Hash identifier:          A44O3FKTmJ2kiKcQkAJUouQa9CTWSGtY4O+4d2xcw4w=
Subject key identifier:   3B:9F:33:C9:6C:4B:D7:DD:8D:24:2F:EA:C0:1E:66:EC:4B:20:46:C7
Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08
Certificate issuer:       /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
Certificate serial:       0414
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
Manifest number:          03C8
Signing time:             Sat 24 Jan 2026 23:56:38 +0000
Manifest this update:     Sat 24 Jan 2026 23:56:37 +0000
Manifest next update:     Sat 31 Jan 2026 23:56:37 +0000
Files and hashes:         1: ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl (hash: keqhA059VPxFLp4gTfNilhQL9nvVh7S+h38qJ1fjFWg=)
                          2: 0850C906FBE511EFA186694BC4F9AE02.roa (hash: YzPPgILZKE6lDl5xhT29Pv1yuU63V1h3+bCev5oeq5g=)
                          3: 209F6792FBE511EFBBA1A156C4F9AE02.roa (hash: GIgOcMZyhtX7VTZ29MPBad48l6w695oI6NBDvDD0h4Q=)
                          4: 05F2D47EFBE511EFA186694BC4F9AE02.roa (hash: 8+uTM15fVVQqKJcrdyIThEqD4hZkDcG+Ml5jr9eSYOc=)
                          5: 093547DEFBE511EFA186694BC4F9AE02.roa (hash: B3p8XBzeyqHMd+F5ha+PG4Fiao+20EDGEpkx39s5fZk=)
                          6: 22A96640A36111F08EA36434C4F9AE02.roa (hash: tQ0ZjbC9o07urDkHmNDFjc4gFzKzs7vpf1dxh+g7k+o=)
                          7: 0452FC52FBE511EFA186694BC4F9AE02.roa (hash: lZ3jyuS9kYtBcPX8UN7o2MuI6cCUiMG+t5ULrgC8fQk=)
                          8: 0778BE80FBE511EFA186694BC4F9AE02.roa (hash: pyXT3pXwTJRcDvv/bqtMGQigJmVIB+OS6D953xQfJq4=)
                          9: 03833742FBE511EFA186694BC4F9AE02.roa (hash: YHMHQ6hkORqwC3KiW9uyF2q4Z0Nzdkk2vTFJ/OJbByM=)
                          10: 0534699EFBE511EFA186694BC4F9AE02.roa (hash: V8jxioFBATYyyacUvA9Ne9bS/Pjgktz1YDqw/xsdisw=)
                          11: 06C73A8EFBE511EFA186694BC4F9AE02.roa (hash: gtu3Q8byYUFn3G8ghu+WaqFnDCahrh14LRgRGbgW9vM=)
                          12: 071307C4CF2711EFAE85C158C4F9AE02.roa (hash: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl
                          rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208
        Validity
            Not Before: Jan 24 23:56:37 2026 GMT
            Not After : Jan 31 23:56:37 2026 GMT
        Subject: CN=69755c35-c331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:1c:a3:9e:ac:52:2e:71:3d:52:e7:a3:c6:
                    80:b3:3a:ff:17:91:ef:ba:b4:73:33:c2:d8:9f:36:
                    31:78:69:b5:6d:95:61:48:ea:d0:83:ea:c3:75:b8:
                    19:3b:92:d1:80:08:da:47:92:8c:34:cb:b9:f6:93:
                    b7:04:2e:60:69:a4:94:a6:de:b6:82:74:9d:85:1b:
                    2d:61:b1:38:3a:9b:88:8d:4e:61:3e:23:7e:9d:39:
                    c9:cb:68:ef:d6:e4:aa:21:cf:0a:9e:d5:c3:be:5f:
                    3b:b6:73:10:a2:f3:94:55:55:76:da:fd:b0:c7:6a:
                    8f:ac:c5:c1:a4:48:63:f9:53:e9:8a:7f:1b:ad:50:
                    97:86:59:d9:92:90:ff:d5:fd:5a:26:c3:6a:4b:2e:
                    b3:62:36:03:0d:c5:f6:0b:9b:d3:50:58:3b:d6:f8:
                    a5:8d:0c:21:22:aa:47:a2:c3:c1:0d:50:f9:a8:dd:
                    4b:92:70:e1:d1:ed:a0:46:12:24:db:ef:a7:eb:6a:
                    dd:ba:3d:2c:af:8a:ab:d3:23:54:83:50:f2:43:5a:
                    c9:7b:90:58:df:bf:99:5c:08:c3:58:cb:84:97:92:
                    04:26:0f:81:8f:75:ec:56:58:a7:ef:9b:8b:94:bf:
                    6c:37:68:9d:ae:12:95:6d:c1:87:ec:1f:07:3e:1b:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:33:C9:6C:4B:D7:DD:8D:24:2F:EA:C0:1E:66:EC:4B:20:46:C7
            X509v3 Authority Key Identifier:
                keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:12:65:1f:64:6c:b0:e4:89:21:70:ef:70:c0:68:a8:79:c4:
         ef:9d:5b:cc:19:73:a6:ff:ee:a5:e6:97:a7:c2:6f:6a:20:4d:
         e4:6b:e0:f8:4b:ba:2c:a7:bb:28:fb:ac:dc:0e:0a:d9:fd:1d:
         25:7f:1b:ab:d1:9f:29:27:38:8b:96:61:e0:bd:6c:8c:2a:0c:
         e7:5e:9f:d0:43:c2:3c:43:e1:02:c5:1a:97:2a:62:4d:74:30:
         33:97:d3:95:d0:e8:77:ab:e7:48:1a:97:48:98:e3:42:f1:de:
         0c:fb:7c:75:46:4e:36:01:b1:0d:47:ab:cb:a8:a2:a7:75:b0:
         29:f2:93:f5:f7:f1:2f:52:be:87:40:af:f4:b8:90:23:0e:12:
         d7:7a:ff:90:ee:e8:d3:c5:b6:c3:eb:00:d3:d4:29:8e:79:99:
         c9:40:d0:bc:da:53:84:8f:69:b6:be:87:9b:6d:f9:25:68:93:
         f6:ce:b8:c7:73:2d:c0:58:9b:74:ee:fd:f3:0a:04:39:cb:ea:
         d8:32:e2:c2:aa:af:2b:c4:8d:4c:74:1b:57:51:01:84:1a:42:
         66:42:93:a2:05:65:5b:67:2b:f4:7b:01:92:20:1f:42:62:be:
         5d:e2:54:b1:73:4c:fc:f5:1a:c3:fe:ff:c4:b2:4c:22:6c:ec:
         53:98:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:49:54 2026 by rpki-client