This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
File:                     ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json)
Hash identifier:          R7NKfSzCCZ7o0pAf9tfvIZEivOEgJfyeakjMvcGojMw=
Subject key identifier:   42:C6:92:C9:28:6E:CA:A9:EA:45:29:EA:C6:7B:1F:36:BD:18:DE:9F
Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD
Certificate issuer:       /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
Manifest number:          8F
Signing time:             Sun 25 Jan 2026 05:40:38 +0000
Manifest this update:     Sun 25 Jan 2026 05:40:37 +0000
Manifest next update:     Sun 01 Feb 2026 05:40:37 +0000
Files and hashes:         1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: XQIZpRbbILE+327qtO+xbCcNW712rrPLlUqwmmcVJyA=)
                          2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl
                          rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD
        Validity
            Not Before: Jan 25 05:40:37 2026 GMT
            Not After : Feb  1 05:40:37 2026 GMT
        Subject: CN=6975acd5-6979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:6c:24:fe:9c:88:cd:4f:c4:ba:31:09:20:
                    2e:b2:84:54:a0:9c:63:6c:7f:b3:5d:7d:e2:d4:f0:
                    26:cd:1c:d8:a6:99:23:97:be:20:a1:fb:b1:57:b2:
                    54:4f:cb:4b:1a:b6:5b:5d:02:d4:2d:ca:4c:5d:3f:
                    7f:f2:d4:82:71:28:b2:d9:a2:40:e8:95:bd:a3:66:
                    e5:d6:91:0a:c5:4d:1b:87:80:e1:2f:88:21:5e:41:
                    fa:6b:3f:45:d3:7c:f2:9e:9f:7c:91:fd:74:9b:3b:
                    f6:2c:f8:3a:d5:63:55:30:2d:7a:da:94:c8:04:c7:
                    88:90:13:a1:a7:d0:b6:38:5e:da:d9:11:fc:81:03:
                    4d:80:92:2a:87:7b:62:73:8c:a1:69:39:8a:32:ed:
                    9d:ac:bc:d0:dd:d0:ae:af:13:b0:98:ca:80:21:82:
                    a4:6a:5d:8c:b9:74:1d:ff:59:de:8d:18:e5:17:5e:
                    14:53:d8:3e:09:36:4d:5c:3d:40:26:35:a0:f1:45:
                    83:bd:2f:ee:21:ea:13:9a:a4:b9:36:8f:f7:1b:c1:
                    b6:f0:0f:3f:56:80:0c:6a:5e:fa:8a:4c:e3:4e:33:
                    78:2f:1b:6b:e7:6b:5b:45:4d:7e:b7:94:05:b8:08:
                    4b:f7:37:81:12:80:be:36:d6:04:97:f6:d0:8e:ea:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C6:92:C9:28:6E:CA:A9:EA:45:29:EA:C6:7B:1F:36:BD:18:DE:9F
            X509v3 Authority Key Identifier:
                keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:28:a7:5b:40:7c:42:be:ff:0d:bd:92:33:67:0b:04:3b:f2:
         d8:12:e3:6c:14:8c:f6:13:d5:5d:cd:35:8a:ab:5f:e7:63:c6:
         82:5a:86:eb:4a:0e:21:70:db:20:b5:6e:88:02:6c:f7:65:3b:
         bc:78:89:b7:ff:6a:aa:bf:33:56:81:1b:98:40:59:b1:0f:19:
         7e:d5:74:82:9d:2e:be:39:d9:4a:e0:bb:21:20:eb:71:0d:ba:
         46:7e:5b:de:40:ba:7d:13:1f:c5:48:d7:79:ab:db:50:be:40:
         11:42:ef:75:3a:62:98:8c:ff:d5:8a:83:31:25:39:29:b6:1a:
         09:f2:ad:2c:d1:09:42:9d:3e:02:fd:de:70:56:8a:30:8e:2c:
         74:7a:32:21:dd:80:6e:40:03:41:69:6f:86:9c:77:a6:0c:36:
         d9:a2:a9:ad:bf:d7:2d:9f:e6:09:e1:f7:34:ab:ab:03:04:9d:
         fd:88:1f:e8:b3:e7:07:ca:8a:46:18:13:bb:3d:3f:52:06:d7:
         47:21:7d:cc:57:46:69:a1:96:2a:3a:b2:03:37:3c:4b:ac:eb:
         97:7f:37:af:89:84:25:d3:97:34:b1:af:e1:01:df:00:63:c8:
         92:a9:f0:4d:bb:81:69:6c:26:08:e6:e3:4b:8c:4b:32:94:87:
         f2:33:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:39:52 2026 by rpki-client