This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
File:                     Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json)
Hash identifier:          KgJsE7nzJwcrdzwhb5mmpjUt9a/66ovirVGLD8DU+JU=
Subject key identifier:   9E:D1:52:08:CE:A1:69:48:77:53:74:B8:3B:97:1E:F7:BD:50:96:06
Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35
Certificate issuer:       /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
Certificate serial:       0CC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
Manifest number:          0CBE
Signing time:             Sat 24 Jan 2026 17:53:40 +0000
Manifest this update:     Sat 24 Jan 2026 17:53:40 +0000
Manifest next update:     Sat 31 Jan 2026 17:53:40 +0000
Files and hashes:         1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: +iNSFBkbkBRYzF8mMWBsfJpC87g179Dr9cnxp/nojcQ=)
                          2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: QfGMdR7Uov5mHwO7nve3pQizSQl2DkOhX5cYoqv4O50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl
                          rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3269 (0xcc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135
        Validity
            Not Before: Jan 24 17:53:40 2026 GMT
            Not After : Jan 31 17:53:40 2026 GMT
        Subject: CN=69750724-769d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:8e:4d:16:72:26:f2:eb:10:72:e7:c9:3c:
                    bf:99:5b:fe:9b:35:6e:1b:25:d8:65:e4:53:44:6a:
                    09:42:9c:f3:ff:56:b3:9c:ef:b1:f3:ca:9c:09:c5:
                    0c:50:b1:01:fa:8d:5e:e4:2c:5d:2d:18:2b:80:70:
                    83:34:80:77:d6:75:ea:32:d8:13:57:f1:27:a7:b0:
                    c1:39:b4:86:7c:14:af:9a:f0:2d:8f:76:90:65:9a:
                    21:23:87:79:c6:3d:1b:06:5f:74:03:00:7c:f2:8f:
                    e5:9e:5f:cb:e6:92:03:ef:77:7a:3f:07:91:67:dc:
                    25:a9:e7:97:6f:46:f0:76:c1:3b:0a:3f:91:93:f6:
                    b5:4d:ef:ed:eb:88:87:b3:05:a4:00:fd:f2:aa:07:
                    38:fc:da:ba:90:a1:f0:6f:79:77:cb:81:5c:cc:33:
                    ab:41:e1:f6:54:43:ae:7c:8f:90:1e:39:50:16:59:
                    8a:68:08:0f:86:c0:77:6f:d1:b6:7f:23:ec:70:b1:
                    3c:73:f9:db:83:96:38:a8:47:d8:bc:40:ad:1b:40:
                    fa:46:4a:fe:27:d8:b5:ba:a6:6c:52:49:99:b3:de:
                    fc:f8:ee:02:39:ae:41:42:13:0c:3d:4a:e8:d8:26:
                    84:1c:f3:15:68:e4:5b:86:36:5c:87:fb:03:9a:51:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D1:52:08:CE:A1:69:48:77:53:74:B8:3B:97:1E:F7:BD:50:96:06
            X509v3 Authority Key Identifier:
                keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:30:c3:99:44:73:db:f5:1f:0a:61:be:75:f1:ae:f0:24:
         9d:e4:14:bd:d5:3e:aa:a1:43:bc:af:f5:af:32:c5:8c:bf:d1:
         9f:6d:f8:43:9e:88:d6:db:45:6a:a0:16:5c:66:cb:6b:be:a2:
         02:fa:60:56:ad:96:d8:38:ca:81:c1:6c:74:66:ed:5a:a4:f2:
         c2:07:e3:fd:2e:ce:af:2a:d9:2e:79:e7:95:e5:a0:da:58:d0:
         22:40:6f:f1:85:f3:ee:9a:42:1e:1e:fc:01:14:ad:a5:4a:8b:
         2c:96:ff:a8:ab:56:d7:5f:d7:0f:27:f1:9f:ed:92:3b:b7:50:
         f7:0a:fd:56:51:32:80:fb:cd:39:36:ad:e5:83:67:e2:bc:4a:
         73:3f:d3:81:13:21:cb:c6:6e:86:f0:74:46:1f:8f:64:c6:32:
         52:4c:43:4a:2c:51:58:33:47:b0:96:7c:1e:aa:3c:49:d1:c1:
         4b:51:2c:f9:0f:e8:d5:27:60:f7:31:22:ac:61:ba:b8:aa:68:
         06:8c:1b:6e:e5:43:f9:30:01:fe:51:07:8d:55:5f:16:67:6b:
         a3:b2:4c:fb:b2:a7:f3:23:24:d1:4c:9f:0a:f7:52:31:f6:63:
         d6:35:1c:2a:b0:5a:50:cc:39:08:2f:ee:19:8e:17:d6:74:ce:
         ad:1e:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:27:48 2026 by rpki-client