This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
File:                     zES2e9GPRfbhN63kcxM1pVGmYSc.mft (raw, json)
Hash identifier:          cpV0J6p3VoSnHhS0YkGNB2IluZEt6BPjFU09WofrvY0=
Subject key identifier:   E4:46:A8:1B:7A:90:B5:C5:BE:35:8A:F5:39:84:2F:AF:40:0C:71:45
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Certificate issuer:       /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
Manifest number:          70
Signing time:             Fri 23 Jan 2026 05:56:55 +0000
Manifest this update:     Fri 23 Jan 2026 05:56:55 +0000
Manifest next update:     Fri 30 Jan 2026 05:56:55 +0000
Files and hashes:         1: zES2e9GPRfbhN63kcxM1pVGmYSc.crl (hash: ugQzG9yUHfrlqiDJykX51BiSaUqu9w3BaaEZJzyaZA4=)
                          2: 469F3FE44CDF11F08D2EFF16C4F9AE02.roa (hash: V/fASBu8lY37YHb4lDAmyOYyJCBMY5CbifIBgISs7Nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
        Validity
            Not Before: Jan 23 05:56:55 2026 GMT
            Not After : Jan 30 05:56:55 2026 GMT
        Subject: CN=69730da7-2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:bb:af:e3:3e:fd:b1:5d:bd:64:72:88:41:
                    06:04:48:de:b4:37:7d:7f:8e:1c:49:fc:06:f6:3c:
                    de:ad:e3:cf:d6:18:24:a7:20:c3:62:a3:3b:2b:fe:
                    46:20:42:83:44:63:72:e2:08:03:cb:ca:9e:ea:ff:
                    27:cd:9c:16:77:6f:4d:52:12:4f:26:1b:4d:81:f5:
                    26:aa:aa:0e:13:43:27:5b:5f:22:a8:0d:fd:6c:26:
                    ff:e2:ae:87:64:26:b0:27:2b:52:7e:a6:4a:18:75:
                    ba:5b:5a:e6:03:a8:c0:46:43:59:6e:5b:55:74:1e:
                    91:b8:3c:be:5e:44:1c:91:a2:96:c8:58:aa:7d:ae:
                    e6:46:df:44:6c:3b:03:d4:63:86:77:ac:6b:74:8c:
                    11:9a:f2:a7:2b:31:e8:fd:d6:0a:1a:9d:fe:45:e3:
                    86:b4:b4:3d:7b:22:74:76:34:df:93:2c:6d:26:1c:
                    af:56:b7:cf:c9:d2:11:2b:84:21:cb:bc:e6:49:82:
                    a6:2f:2a:2b:23:ae:4b:cb:d1:b8:fb:90:23:48:cf:
                    3b:91:36:6e:aa:9c:66:4a:4c:08:89:1c:a2:e8:e5:
                    79:ed:cd:9f:29:78:b0:7e:dc:6f:2e:16:fb:70:16:
                    e5:83:2f:9c:4a:2b:58:43:2d:53:98:6c:43:c2:e8:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:A8:1B:7A:90:B5:C5:BE:35:8A:F5:39:84:2F:AF:40:0C:71:45
            X509v3 Authority Key Identifier:
                keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:0f:b6:f5:ae:67:a7:9e:51:20:a5:3d:ff:df:ee:ed:0c:
         32:5e:bc:31:ce:d8:51:eb:44:e0:79:06:a0:b5:10:38:2a:68:
         2b:87:3e:ee:bb:2f:9b:ba:35:fa:77:b6:4c:4d:2a:de:d9:a4:
         2a:9a:56:ac:49:fa:d5:89:a1:d7:f8:66:f3:91:9f:60:6b:8d:
         81:d7:fd:d3:6e:db:37:e5:a1:21:86:7e:40:c5:8e:af:ad:41:
         c2:d7:05:a1:26:0d:be:85:96:13:d7:58:45:f4:aa:2b:3e:70:
         19:b8:6a:c8:39:ef:5e:9d:7a:a7:ce:fc:0f:c8:ee:6a:88:31:
         2b:b6:6d:0a:31:1d:7b:e6:03:b3:89:06:43:5b:16:74:b7:20:
         fa:fb:c5:46:79:d3:bc:4b:32:29:8e:fc:c3:c0:9c:69:86:6e:
         8e:67:b3:86:0a:45:33:e9:8c:54:b4:64:b8:50:2b:56:91:34:
         af:cc:9c:bf:ed:bc:ea:f7:c0:bd:a6:68:24:f7:0d:29:c3:04:
         b8:78:76:b0:cd:91:e6:8d:d3:3f:4f:46:20:d1:ef:5b:ec:01:
         54:33:f1:21:e5:08:c2:33:3e:99:7a:85:e9:e3:7c:10:ef:e6:
         a5:36:23:c2:c9:6b:35:09:ee:32:11:1e:ca:22:c8:64:ce:7d:
         95:88:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:05:26 2026 by rpki-client