This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          UeDNwmCc/jOytbEEislPXZw+87UohzVKIAesA1bwbw4=
Subject key identifier:   F6:A8:1C:13:35:A5:71:17:2B:04:19:32:B5:43:DD:55:51:6B:12:A2
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          0808
Signing time:             Sat 24 Jan 2026 20:26:05 +0000
Manifest this update:     Sat 24 Jan 2026 20:26:04 +0000
Manifest next update:     Sat 31 Jan 2026 20:26:04 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: kPYcMXF01L46579vw9oPDPe4nsykuWkP4Jd5ZpqZbu4=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: eWRDLsuHoJc/nz9fA7Tw+nXYU13UB2p69Sw5UsXcXsQ=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: qfHny3neEqciJUugDLFWYSVPfWoplVFPNaZG5R/1xwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Jan 24 20:26:04 2026 GMT
            Not After : Jan 31 20:26:04 2026 GMT
        Subject: CN=69752add-2f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:f8:e8:7f:10:2f:c7:eb:bb:25:8d:19:3b:
                    c8:1c:51:d6:2d:01:a0:2e:89:37:c3:43:d5:41:42:
                    7e:9d:ee:ab:13:ed:db:1c:c3:c5:72:43:64:85:c7:
                    ff:d8:d6:be:28:fb:d3:ed:79:e9:a6:53:65:27:61:
                    d4:4c:2a:05:16:3a:09:af:01:f4:1c:27:da:a9:ed:
                    5e:44:32:7d:19:18:11:99:f2:7c:96:e5:d7:8f:8f:
                    09:fe:de:c7:51:fc:b8:cf:90:66:ef:0a:5d:e3:e7:
                    43:c0:19:ba:d1:98:69:34:65:a5:37:1d:d1:b5:60:
                    34:ce:a4:21:83:e9:9f:1b:63:56:72:a5:98:f6:eb:
                    2d:c6:1b:44:d9:b9:62:c9:f8:46:39:e3:b8:f4:eb:
                    58:70:8e:6d:17:3a:27:ce:f3:34:d1:0d:10:0e:14:
                    de:f5:ca:fe:aa:22:80:e8:84:cf:af:23:6d:2e:d7:
                    e6:c9:df:4a:fb:7d:c5:e5:da:62:28:93:16:ec:9b:
                    a9:39:a5:68:3d:4e:6a:a9:2b:d3:11:fa:3d:6d:ee:
                    3b:dc:40:4e:2e:a4:7c:37:81:51:ba:de:c9:e2:fa:
                    a5:33:26:d7:f9:87:fd:57:09:f9:b4:70:ec:1d:c1:
                    37:1d:bd:28:19:b9:c1:36:04:91:95:06:a8:62:61:
                    34:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:1C:13:35:A5:71:17:2B:04:19:32:B5:43:DD:55:51:6B:12:A2
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:bb:87:03:d4:43:27:7a:03:e0:94:4c:55:c4:96:1c:78:
         b1:61:83:00:4d:d8:75:7e:3a:dd:11:6e:9f:6d:33:c7:a6:ec:
         ec:d0:a7:0e:9e:ab:dd:26:da:51:d4:9a:30:c0:52:69:fa:be:
         18:1b:0e:6f:65:d3:15:7e:47:02:76:bc:a8:d1:13:38:01:da:
         0b:98:6a:65:9b:fd:59:62:57:8d:a5:fe:11:c9:43:a3:9c:2a:
         9e:fc:f5:37:18:8f:63:03:55:7b:80:30:dd:b3:5b:57:1b:11:
         d7:46:c2:4c:35:b3:96:42:e6:c9:3a:09:dc:f0:24:24:8d:9b:
         36:c8:d2:46:8f:18:c0:f2:d0:29:46:2d:26:c9:0e:28:77:e6:
         44:e2:55:ff:f5:83:5e:a7:0e:54:2c:b5:13:9d:9d:0f:80:6e:
         1b:c8:ce:c0:a1:65:14:ab:e3:ea:2d:34:5d:ca:d1:d4:8c:66:
         f6:32:3f:a5:69:08:06:f7:90:2c:04:d5:50:d6:32:d4:76:90:
         09:1f:19:7f:bc:56:de:d5:76:f5:b6:a0:ee:05:df:d1:1a:2a:
         55:46:46:60:ae:02:54:6d:5c:49:41:8b:56:64:8e:2f:c2:8f:
         ab:0f:9a:72:55:d1:ad:cd:7b:da:cf:a2:34:d5:a4:07:f2:6e:
         d8:1b:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:27 2026 by rpki-client