This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
File:                     ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json)
Hash identifier:          nEiWpthpzm8wbJ9pEKEPW0gVhqi3BLN+QAQgDQGJKTQ=
Subject key identifier:   88:4F:53:95:A7:2A:07:E2:DD:23:37:51:12:73:92:FF:53:24:AE:93
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Certificate issuer:       /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
Manifest number:          05CE
Signing time:             Sat 24 Jan 2026 22:16:29 +0000
Manifest this update:     Sat 24 Jan 2026 22:16:28 +0000
Manifest next update:     Sat 31 Jan 2026 22:16:28 +0000
Files and hashes:         1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: 4TqBFW8KlG7byzKH1sd+f1VaDdiDotWb2icC6Yqb+5s=)
                          2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: /7H6pgF1GK4zfWE9tl/VxE0gsVHBKJxkQ410/jO8vFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
                          rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
        Validity
            Not Before: Jan 24 22:16:28 2026 GMT
            Not After : Jan 31 22:16:28 2026 GMT
        Subject: CN=697544bd-11a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:07:f8:f5:28:39:9e:70:9e:28:a7:22:3b:e0:
                    bc:d9:7a:8e:5a:d8:dd:d2:34:88:66:ab:bd:d1:52:
                    94:94:a5:6b:11:1e:e2:b8:01:a1:f0:7d:55:d0:96:
                    42:fd:3e:8e:5c:12:43:a1:bb:38:88:ea:62:b2:e9:
                    11:b3:92:7b:91:22:9e:85:bb:6c:ba:b5:c6:9d:26:
                    3d:da:de:dc:21:75:a7:87:af:ae:f3:59:f9:af:30:
                    7e:3e:c2:a2:ba:fd:d9:d5:b9:64:5a:62:bf:f5:8c:
                    d9:1a:7f:ec:ee:c9:9b:42:03:5e:89:8f:e0:be:90:
                    39:c8:62:5d:81:4b:c3:e6:fb:9c:95:92:e8:cd:b7:
                    fa:a3:cf:47:0b:2f:28:77:47:31:49:89:c5:6c:dd:
                    ff:aa:43:06:d6:fa:27:03:fa:86:79:26:0c:34:af:
                    3c:62:d4:0a:59:24:35:d3:97:47:0e:f7:84:ea:df:
                    4d:57:14:aa:88:9a:d0:1b:67:b8:1c:35:8a:9a:05:
                    fa:b7:08:07:dd:c6:c4:b5:ad:2d:c1:eb:ff:8b:8f:
                    a4:50:8f:13:92:b5:71:f7:b6:e6:f7:8c:4b:47:40:
                    0c:bb:29:45:e9:ac:b6:15:47:25:3b:47:06:9c:a8:
                    75:f3:dc:0f:05:7d:98:ca:b0:cd:ff:04:3f:e7:84:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:53:95:A7:2A:07:E2:DD:23:37:51:12:73:92:FF:53:24:AE:93
            X509v3 Authority Key Identifier:
                keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:82:65:cf:03:84:15:63:d3:0c:82:a9:38:14:76:70:44:7e:
         d8:fc:ce:20:9c:20:c5:99:73:c8:28:bf:1a:1c:0a:0f:fc:ee:
         7c:e2:40:f4:09:5f:8c:b8:97:b5:21:a3:82:00:b2:f4:d9:d4:
         86:93:da:37:c4:37:43:58:c2:2a:55:e7:96:d2:49:a5:0b:93:
         79:94:1b:8e:ed:c3:1a:e8:03:1a:05:59:58:42:d3:ba:7f:5e:
         9d:b7:8e:1a:a0:61:9f:53:af:7e:e0:9a:a3:ff:b5:ed:6c:77:
         28:79:b6:30:af:ee:60:b2:5e:5d:1f:72:e8:c2:d6:ba:5b:65:
         17:69:50:e3:f9:dc:25:02:f8:49:e2:cc:6e:ca:69:b9:9e:84:
         d1:e9:28:8e:df:32:1c:fc:49:77:15:d9:14:39:b6:68:12:67:
         88:be:7a:f6:94:52:f9:9c:e6:49:89:a6:79:bb:71:fc:fe:25:
         8d:c7:53:8f:88:c4:15:f3:b3:92:76:b3:23:44:34:17:5e:5a:
         d7:a1:83:e9:cf:10:5c:6f:ed:53:0a:ac:73:dc:cb:bc:fe:6d:
         18:bf:d6:74:ef:aa:28:7d:5a:b1:b7:db:71:ff:b9:93:5d:fc:
         ec:bd:88:f3:0e:1f:53:4b:a0:3a:40:b6:d3:da:dd:14:4f:27:
         e5:92:72:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy
RjE5NDUzMEEwHhcNMjYwMTI0MjIxNjI4WhcNMjYwMTMxMjIxNjI4WjAYMRYwFAYD
VQQDDA02OTc1NDRiZC0xMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Qf49Sg5nnCeKKciO+C82XqOWtjd0jSIZqu90VKUlKVrER7iuAGh8H1V0JZC
/T6OXBJDobs4iOpisukRs5J7kSKehbtsurXGnSY92t7cIXWnh6+u81n5rzB+PsKi
uv3Z1blkWmK/9YzZGn/s7smbQgNeiY/gvpA5yGJdgUvD5vuclZLozbf6o89HCy8o
d0cxSYnFbN3/qkMG1vonA/qGeSYMNK88YtQKWSQ105dHDveE6t9NVxSqiJrQG2e4
HDWKmgX6twgH3cbEta0twev/i4+kUI8TkrVx97bm94xLR0AMuylF6ay2FUclO0cG
nKh189wPBX2YyrDN/wQ/54T1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhPU5Wn
Kgfi3SM3URJzkv9TJK6TMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB
ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2
RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLgmXPA4QVY9MMgqk4FHZwRH7Y/M4gnCDFmXPIKL8aHAoP/O584kD0
CV+MuJe1IaOCALL02dSGk9o3xDdDWMIqVeeW0kmlC5N5lBuO7cMa6AMaBVlYQtO6
f16dt44aoGGfU69+4Jqj/7XtbHcoebYwr+5gsl5dH3Lowta6W2UXaVDj+dwlAvhJ
4sxuymm5noTR6SiO3zIc/El3FdkUObZoEmeIvnr2lFL5nOZJiaZ5u3H8/iWNx1OP
iMQV87OSdrMjRDQXXlrXoYPpzxBcb+1TCqxz3Mu8/m0Yv9Z076oofVqxt9tx/7mT
XfzsvYjzDh9TS6A6QLbT2t0UTyflknIt
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:12:49 2026 by rpki-client