This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File:                     zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier:          yzrldCY2/qptx+ZGWiGiSJRYRxhMk8DUruCL6GnxM0w=
Subject key identifier:   EB:97:D5:54:84:35:94:25:93:F8:0C:E8:F4:22:A3:E7:50:8A:F5:86
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number:          0108
Signing time:             Sun 25 Jan 2026 04:17:58 +0000
Manifest this update:     Sun 25 Jan 2026 04:17:58 +0000
Manifest next update:     Sun 01 Feb 2026 04:17:58 +0000
Files and hashes:         1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: LqbKkFgseljiueoReeR8oeZhZYz5ebNXRImkGJiTS9I=)
                          2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=)
                          3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Jan 25 04:17:58 2026 GMT
            Not After : Feb  1 04:17:58 2026 GMT
        Subject: CN=69759976-b23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:6e:37:af:74:e9:73:4c:7a:23:8d:84:11:
                    96:83:05:2d:20:e4:cc:23:06:69:ec:98:de:a6:f9:
                    f1:bb:40:1b:9c:c3:51:26:7f:de:bc:40:e5:63:92:
                    94:4b:3b:78:de:9f:df:d9:ea:41:ae:de:aa:ab:ad:
                    a0:77:36:f0:ec:b2:93:40:46:c8:a3:d6:ad:4a:dc:
                    a7:72:ac:37:ab:b1:88:55:34:b9:33:33:7d:75:0f:
                    02:17:b3:e0:d5:03:48:eb:67:c3:76:a4:34:6e:bf:
                    12:43:04:9b:4d:30:4c:e9:44:95:02:88:c2:1f:22:
                    92:6d:0f:23:d1:cd:aa:5f:1e:36:4a:1b:5f:95:1a:
                    ab:69:e2:10:f8:d9:84:9f:e1:e3:8c:ba:d3:ee:55:
                    fd:84:41:7f:1c:75:18:f6:ca:22:96:6b:35:2a:04:
                    1a:e7:98:04:20:bf:89:88:15:2b:08:3b:d7:a5:50:
                    a5:f0:01:44:85:e4:3d:93:8f:11:d2:21:1e:68:41:
                    52:77:1c:83:7f:e3:dc:78:c2:25:c8:dd:2e:78:ba:
                    38:fb:3f:ae:17:fb:86:ad:e1:e2:34:b9:ac:1f:d5:
                    4f:ff:7e:be:fb:53:fc:a9:c1:d2:a7:ed:c5:33:51:
                    0d:fa:e4:7d:1b:ef:96:f3:61:a3:69:41:68:b6:37:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:97:D5:54:84:35:94:25:93:F8:0C:E8:F4:22:A3:E7:50:8A:F5:86
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:cc:4d:85:75:ab:e2:11:3a:78:b3:63:5c:ff:8e:cc:f6:
         6e:65:3f:7e:e7:73:30:ee:07:e0:6b:7d:13:a2:c9:a1:2d:62:
         72:79:26:df:7d:92:00:6a:18:08:61:ad:be:f4:ab:fd:dd:95:
         33:9b:eb:87:df:48:9e:8f:36:d9:ae:b4:db:3b:ee:b1:d1:5f:
         78:21:87:4f:61:c6:fd:20:8b:21:2d:50:91:97:e8:bc:c4:9a:
         5b:6c:df:ff:5f:fa:ee:73:9c:66:fb:85:83:ec:ce:53:bb:6a:
         01:d2:b3:05:7b:7b:50:38:73:1e:26:aa:fc:3d:62:65:eb:13:
         6b:78:15:c8:fd:84:e7:01:5c:0b:21:7a:24:c6:03:a4:77:2c:
         4b:83:e0:44:d8:b9:32:d8:76:9f:ba:2a:b9:e4:88:0b:ba:48:
         fe:f6:8d:0b:42:2f:61:fb:ec:bd:dc:2e:12:0e:77:ab:37:61:
         ac:99:10:ab:16:04:64:2c:bc:da:28:81:7a:82:b1:4a:24:24:
         26:46:11:ef:24:87:74:d9:5c:58:71:5c:99:fb:1b:e9:4a:22:
         f2:37:64:c4:ed:a5:98:e5:4e:bb:3a:64:f4:cd:b4:f3:55:32:
         c5:e5:2e:dc:7a:ff:ca:8c:eb:24:a8:a4:1a:23:69:5b:7e:c9:
         e5:5a:2e:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5
NzRFMUNFRDYwHhcNMjYwMTI1MDQxNzU4WhcNMjYwMjAxMDQxNzU4WjAYMRYwFAYD
VQQDDA02OTc1OTk3Ni1iMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQ9uN6906XNMeiONhBGWgwUtIOTMIwZp7Jjepvnxu0AbnMNRJn/evEDlY5KU
Szt43p/f2epBrt6qq62gdzbw7LKTQEbIo9atStyncqw3q7GIVTS5MzN9dQ8CF7Pg
1QNI62fDdqQ0br8SQwSbTTBM6USVAojCHyKSbQ8j0c2qXx42ShtflRqraeIQ+NmE
n+HjjLrT7lX9hEF/HHUY9soilms1KgQa55gEIL+JiBUrCDvXpVCl8AFEheQ9k48R
0iEeaEFSdxyDf+PceMIlyN0ueLo4+z+uF/uGreHiNLmsH9VP/36++1P8qcHSp+3F
M1EN+uR9G++W82GjaUFotjcLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuX1VSE
NZQlk/gM6PQio+dQivWGMB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5
RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2
ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3h8xNhXWr4hE6eLNjXP+OzPZuZT9+53Mw7gfga30TosmhLWJyeSbf
fZIAahgIYa2+9Kv93ZUzm+uH30iejzbZrrTbO+6x0V94IYdPYcb9IIshLVCRl+i8
xJpbbN//X/ruc5xm+4WD7M5Tu2oB0rMFe3tQOHMeJqr8PWJl6xNreBXI/YTnAVwL
IXokxgOkdyxLg+BE2Lky2Hafuiq55IgLukj+9o0LQi9h++y93C4SDnerN2GsmRCr
FgRkLLzaKIF6grFKJCQmRhHvJId02VxYcVyZ+xvpSiLyN2TE7aWY5U67OmT0zbTz
VTLF5S7cev/KjOskqKQaI2lbfsnlWi5V
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:20 2026 by rpki-client