This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
File:                     Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json)
Hash identifier:          2NV1y+t/kAQLR6eCSX4rWprSIKr+mz3JGdWXqbf+2gM=
Subject key identifier:   26:FD:42:01:84:1A:90:61:B1:1E:5D:9F:A0:02:5E:7C:46:8E:31:33
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       0993
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
Manifest number:          098C
Signing time:             Sat 24 Jan 2026 19:28:10 +0000
Manifest this update:     Sat 24 Jan 2026 19:28:10 +0000
Manifest next update:     Sat 31 Jan 2026 19:28:10 +0000
Files and hashes:         1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: TpjBrjZj0sBs+1GxxpxITbjy/YpoAjRDOnJatPsU8ng=)
                          2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Jan 24 19:28:10 2026 GMT
            Not After : Jan 31 19:28:10 2026 GMT
        Subject: CN=69751d4a-c93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:ba:ea:f8:27:cc:4e:4d:c0:61:80:9c:27:
                    18:7d:cb:b2:a7:49:c3:ca:63:1a:99:07:21:e2:09:
                    18:8f:50:53:e0:fb:4f:b6:89:54:fd:26:75:ea:82:
                    9f:3a:14:f9:4a:58:9e:0f:98:40:71:ee:c9:ef:27:
                    b0:f0:2c:05:40:70:4c:2a:0c:6b:b5:15:ce:d0:d2:
                    d6:52:46:69:ae:e1:d8:b9:93:03:7b:b7:54:61:b1:
                    89:1b:f4:bd:f3:61:a3:7f:5a:f6:0e:4b:c7:54:23:
                    11:37:27:d6:c0:d8:9a:14:86:d5:cd:49:d9:1f:27:
                    db:b9:f1:b8:2a:60:75:f9:32:5a:16:5d:7f:e0:c4:
                    9e:e2:79:7e:9f:74:87:31:f3:ab:fa:19:82:17:84:
                    c3:75:54:75:ae:3b:3c:67:7e:ac:bc:1e:b1:a6:87:
                    14:68:74:98:a8:b1:86:91:ae:89:33:32:c0:fc:c3:
                    3e:bb:e4:fb:d0:f2:ce:1d:7c:a5:9e:39:68:cb:d9:
                    2f:44:23:bb:d2:5a:0e:22:77:38:14:4e:ae:3b:7a:
                    c3:95:76:ce:80:ee:94:a2:af:80:22:94:3c:a3:43:
                    32:21:1f:a4:43:d0:b1:e8:0c:13:86:62:87:9f:87:
                    9d:f3:28:20:7e:3b:fb:fa:06:8a:d3:7e:3f:1e:d1:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:42:01:84:1A:90:61:B1:1E:5D:9F:A0:02:5E:7C:46:8E:31:33
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:72:be:14:fe:91:9d:6a:61:8b:06:12:0e:81:5b:b5:65:8c:
         9d:e5:e6:0d:6e:4c:b9:bf:84:c2:14:9d:d4:1b:0b:3f:82:17:
         ff:0f:e7:b6:77:8f:20:1e:a7:d0:c7:60:29:fe:c2:25:b9:e3:
         49:06:a3:27:19:2a:6b:b1:c4:9d:cc:a3:5f:c1:8c:11:af:5a:
         82:5b:bd:b5:84:f1:98:a5:57:ac:ca:5a:8d:72:96:54:d9:2c:
         1b:cb:c4:fd:e5:c1:be:86:2f:dc:7d:13:22:ad:e5:e2:2f:8a:
         cc:30:26:c4:d6:9f:4b:f4:8a:d9:3f:19:a8:61:10:34:75:ef:
         92:4f:a0:3f:e9:be:9e:a7:84:17:57:f8:dc:10:35:bc:fa:bf:
         cd:19:93:f1:ed:4a:c5:eb:2d:ab:7c:38:75:83:74:94:7a:a2:
         e5:21:db:5d:5c:de:67:38:bd:0b:03:d5:7a:86:a8:39:c2:2f:
         35:85:55:4e:d0:de:7e:97:43:63:bb:b3:83:3f:5f:8f:94:a4:
         86:c3:dd:ac:d6:f9:f6:a8:f9:74:05:60:ef:1f:5d:9d:10:9f:
         09:92:2c:0e:67:70:25:48:75:32:88:ee:75:57:d1:a2:d7:19:
         a0:44:dc:29:cb:44:7e:c7:24:35:42:5e:ec:cc:ad:c6:56:4e:
         cb:86:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:34:43 2026 by rpki-client