This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
File:                     3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json)
Hash identifier:          L0vSfxwp85Z1U9mlR/4CIg/t10VACrx77wqk06JPPAM=
Subject key identifier:   EA:44:03:3F:A6:06:C9:E4:1C:39:C7:29:3F:E8:AC:FB:7F:0B:D2:18
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
Manifest number:          90
Signing time:             Sun 25 Jan 2026 05:42:50 +0000
Manifest this update:     Sun 25 Jan 2026 05:42:50 +0000
Manifest next update:     Sun 01 Feb 2026 05:42:50 +0000
Files and hashes:         1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: laGzblKgHqep8uOliWT9ktSCZrXWtRcl2za4GJDqaPE=)
                          2: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: TKYCIXjYDfxKBYRDIucVJqM6YAGNqcFrboZxfDC0WWc=)
                          3: A209D9E4BC2311F09A8FB280C4F9AE02.roa (hash: ROMimlav+Kwv4KL5aZPE3FnW4mOvCmbzzXBU2NVsmwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Jan 25 05:42:50 2026 GMT
            Not After : Feb  1 05:42:50 2026 GMT
        Subject: CN=6975ad5a-104d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:4a:83:b7:3f:32:79:56:a0:b4:f0:3f:26:
                    54:7d:6d:66:0e:ad:39:21:e4:ce:27:81:68:d8:a6:
                    4e:64:1d:7e:ae:ad:d0:67:60:b4:1c:0e:c9:5a:70:
                    57:5a:ba:f9:a6:5a:e1:62:8e:88:c5:28:8b:07:22:
                    5d:fb:4e:f7:7e:4e:e2:c9:85:45:ac:dd:c9:17:62:
                    44:f2:90:0f:e0:bb:51:5b:95:ed:7a:d9:d0:7c:77:
                    21:e6:bb:72:20:68:37:42:b9:3b:25:14:71:e3:31:
                    a1:2a:5b:03:d2:06:62:0e:bf:cd:57:cd:f1:04:c7:
                    78:8d:b4:2c:73:1c:f5:c2:10:50:1e:03:c3:d9:2f:
                    67:84:08:f7:d0:82:a9:e0:d1:a2:8f:d6:1d:95:c4:
                    bb:f3:dd:0e:48:12:95:07:6c:4c:e3:88:ca:32:94:
                    cc:1d:a8:64:55:df:b9:77:0c:82:b0:6e:1b:ce:6d:
                    d5:a3:7a:3b:98:03:93:8f:63:b0:a4:c2:b7:b7:92:
                    01:ef:20:b3:bc:c5:c3:e2:05:eb:f7:69:96:35:e4:
                    88:e0:9a:ec:bd:cd:bd:89:92:6c:6c:c4:f4:be:84:
                    6c:07:80:37:85:0f:ee:78:3c:34:40:5a:c8:16:93:
                    bf:62:73:19:c4:b4:1f:c0:1b:cc:1e:96:98:6f:28:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:44:03:3F:A6:06:C9:E4:1C:39:C7:29:3F:E8:AC:FB:7F:0B:D2:18
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:54:81:e5:53:67:b5:42:09:14:25:db:dd:be:c8:e2:69:13:
         06:f8:85:e1:99:38:c4:6f:34:1c:d4:b6:fe:d5:12:92:07:c8:
         c2:59:9f:a8:0d:99:27:bb:dc:a9:4d:d0:90:03:8c:ab:4a:ea:
         0c:7c:ec:9c:8e:e9:a4:71:51:98:87:ce:ad:41:be:19:3d:f1:
         b7:44:97:42:aa:b6:31:68:d5:b2:8e:54:6d:96:75:f1:35:4f:
         54:f0:28:de:63:c2:a8:6a:1e:68:55:a6:76:81:7b:f8:67:73:
         11:81:51:0f:c2:10:04:13:49:4c:5a:f1:0e:17:c5:a0:14:54:
         98:e0:0f:f0:3c:26:39:22:ac:58:24:52:6c:5e:81:f3:86:55:
         3d:69:01:87:f5:de:21:cd:90:5c:a2:35:fc:fb:39:94:e1:4d:
         23:f2:03:7f:ad:73:5e:84:ff:e1:a4:39:7c:c9:12:d1:df:99:
         e1:65:34:9e:5f:c3:a5:c3:cf:7d:74:e2:c9:7f:d8:22:8a:26:
         c6:fd:20:45:90:a3:01:75:dd:1f:a9:43:b9:e7:57:0b:99:4c:
         04:6a:32:81:ef:b0:e6:52:d3:f6:8f:58:ae:b7:10:9a:dd:8c:
         d6:b4:45:6a:68:c0:40:9e:f5:19:50:80:d3:42:ed:16:ab:e6:
         c4:84:36:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:40:16 2026 by rpki-client