This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File:                     Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier:          wm2aGzsr5967Hg+MgoNI0LNE0yU9N6g5NaZDtmp2McY=
Subject key identifier:   2D:80:DA:97:06:E5:D0:30:3B:58:F1:B5:09:7B:51:C8:7E:0D:66:45
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer:       /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number:          26
Signing time:             Sun 25 Jan 2026 06:45:32 +0000
Manifest this update:     Sun 25 Jan 2026 06:45:31 +0000
Manifest next update:     Sun 01 Feb 2026 06:45:31 +0000
Files and hashes:         1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: jFWeNWt27D5DHmyYEDWWFJdqpKd3MctGQFT2qt1OjXs=)
                          2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: /mzz/AJTEGVq5CmNLpj54f75vIZrjYQeeBhkulDSR3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
                          rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
        Validity
            Not Before: Jan 25 06:45:31 2026 GMT
            Not After : Feb  1 06:45:31 2026 GMT
        Subject: CN=6975bc0c-5d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:35:6a:d3:19:6a:39:e5:8b:a8:dd:73:79:
                    9b:b9:6b:a4:d8:ef:a1:5e:2b:66:2d:7f:b0:ce:98:
                    41:55:42:7e:5a:3d:28:d8:22:1f:f5:44:16:cd:0d:
                    8d:a1:05:c5:09:91:23:db:8e:98:ad:a2:6e:55:cc:
                    38:64:38:47:b6:b3:d1:8b:3b:0d:ea:82:7b:54:75:
                    fd:60:fa:f7:3b:39:6a:11:4b:1a:82:68:03:b1:c4:
                    40:a3:3c:3e:ce:8e:16:d6:72:c5:96:18:db:97:d1:
                    28:3e:44:ec:99:db:73:0c:28:1b:4e:7d:95:64:0f:
                    c2:81:1f:f8:62:ce:64:b5:75:4e:d6:55:98:ec:9e:
                    58:d6:a6:f9:54:8d:f7:f0:70:fc:39:51:65:8b:c3:
                    4d:40:eb:95:c7:24:0f:51:8d:89:f4:17:1e:76:ac:
                    7b:74:8a:a8:47:5a:7d:5e:ea:87:86:0f:74:5c:c8:
                    91:33:1c:81:c8:1e:12:2c:b6:ee:56:31:05:59:be:
                    44:92:33:39:2b:60:07:e9:e4:54:8d:d9:1e:55:1b:
                    4c:60:4b:e4:2f:8e:d6:93:ec:5c:db:19:f6:ae:da:
                    0c:af:59:b0:46:86:c9:0d:82:45:d6:e5:a7:70:f8:
                    78:e2:db:ea:15:c2:49:e7:4d:6b:d8:47:d9:80:cf:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:80:DA:97:06:E5:D0:30:3B:58:F1:B5:09:7B:51:C8:7E:0D:66:45
            X509v3 Authority Key Identifier:
                keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:80:6f:76:24:ea:93:a6:3c:ca:4f:70:86:85:c5:f7:ff:
         30:8d:0f:71:a6:a0:a7:ba:34:a9:dd:04:b0:d8:46:41:80:1f:
         9c:0e:e3:2b:fd:af:fb:c7:ff:02:91:ad:af:f6:5a:63:b3:fb:
         c2:59:82:55:4c:0f:e8:79:fb:7d:19:9c:27:f8:79:98:44:4f:
         d8:3c:78:38:6a:3b:f0:64:7b:d9:1b:be:c3:30:8c:75:fd:27:
         d6:e0:15:d4:bd:2f:22:99:19:00:0e:ea:54:c7:80:6b:d2:6b:
         f9:ad:6c:42:4a:06:2e:d7:92:1b:ae:0a:46:6e:64:b7:9e:cf:
         e3:fd:e0:93:45:6d:40:8c:8d:ae:80:bb:ce:b7:d3:c2:76:e0:
         88:ef:0c:89:8c:ac:cd:91:4d:8c:41:eb:59:d5:3d:4e:ce:73:
         32:39:92:e2:de:4d:46:a1:a8:34:92:36:29:5f:02:e0:28:b0:
         55:c9:ed:4b:2b:cd:61:11:2f:6e:bd:16:01:08:eb:e9:bb:52:
         e2:35:e1:2f:a8:ed:72:7c:76:38:1a:c8:04:df:d0:2a:63:f4:
         96:4e:98:67:e3:b6:ad:99:74:59:8b:b9:cd:cd:98:4d:de:c2:
         8a:da:18:21:30:db:92:4b:bd:8a:3e:a5:85:1d:b9:9a:b3:07:
         cb:82:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:25 2026 by rpki-client