This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
File:                     aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json)
Hash identifier:          EhWuwrhepg++Bo+rmLIkUFIYlMOMNmwEMLT99QqvsxI=
Subject key identifier:   91:D9:17:27:33:A8:B1:A9:9B:1D:54:31:38:1C:38:C7:75:82:8F:33
Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B
Certificate issuer:       /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
Certificate serial:       070D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
Manifest number:          0708
Signing time:             Sat 24 Jan 2026 21:12:54 +0000
Manifest this update:     Sat 24 Jan 2026 21:12:54 +0000
Manifest next update:     Sat 31 Jan 2026 21:12:54 +0000
Files and hashes:         1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: xxhMamHdcW+nmTYHvAGRNYDGhaF/7N+FOdAb/ccs0CU=)
                          2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: qir+UT8zyDGjYz1YRKkq2v/pYcPeSxEZXiWVhwGwNRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl
                          rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B
        Validity
            Not Before: Jan 24 21:12:54 2026 GMT
            Not After : Jan 31 21:12:54 2026 GMT
        Subject: CN=697535d6-134c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:fe:ca:b7:82:40:b1:27:8b:e3:18:4d:d6:
                    ab:07:2d:26:a1:e0:53:d7:1f:d8:2c:3f:04:f3:0c:
                    55:8d:ba:f0:a2:ac:38:40:e9:18:df:78:a0:3c:f2:
                    89:e8:7d:b0:a2:14:47:d7:70:85:ba:30:c8:96:87:
                    59:7b:94:f2:97:2c:4a:2b:76:fe:4b:88:2f:cc:78:
                    5c:f1:00:50:50:e3:96:ca:a4:be:40:e5:35:53:33:
                    45:1d:d1:db:a5:55:2b:5e:60:99:6a:e9:de:8b:a5:
                    16:da:43:81:33:d6:1f:55:0c:a8:52:9a:19:81:b9:
                    5b:99:41:84:b8:df:96:1b:c6:ec:bb:29:ce:08:87:
                    a9:56:32:17:70:5d:02:40:c7:a1:31:b2:65:1d:d5:
                    c1:07:7c:c0:3e:5f:12:1a:fd:80:74:f5:ac:c5:d8:
                    e5:af:60:ae:e1:97:35:41:13:0b:c5:26:c5:9e:9c:
                    13:f8:20:2a:43:64:ef:d8:ff:e8:ca:0e:a2:a0:6f:
                    82:60:3d:ba:9b:62:47:6b:85:4a:0c:0a:7c:9d:19:
                    1f:01:52:af:fc:b9:7b:ef:da:be:77:4d:b5:e4:1f:
                    23:d1:4d:7e:8a:b7:49:bc:66:4a:64:31:92:7c:84:
                    7c:bc:59:85:8b:6b:d3:49:da:b1:ad:23:61:71:8c:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D9:17:27:33:A8:B1:A9:9B:1D:54:31:38:1C:38:C7:75:82:8F:33
            X509v3 Authority Key Identifier:
                keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:05:17:14:05:f9:df:df:45:82:a1:d2:ef:37:06:02:20:
         e7:34:2b:9f:37:7f:cc:f8:9e:40:5c:f7:d0:ea:d8:e8:ab:d0:
         45:53:20:87:ac:74:f1:77:e9:0d:f8:57:4d:68:66:52:45:92:
         3c:fd:1d:14:5e:f0:f5:b8:8c:61:7a:62:d6:e8:b7:eb:21:a2:
         1f:53:aa:8b:c0:da:68:ac:c6:b9:18:1f:88:95:90:54:79:de:
         75:62:ce:a0:76:d3:a4:1b:84:38:c7:7a:74:d9:d6:8d:a7:5f:
         a2:2e:b3:ea:fe:85:fc:dd:a5:90:7f:cd:39:3f:d5:15:27:16:
         27:66:88:30:a6:55:f8:19:97:01:26:c6:d1:59:c6:da:0d:7a:
         4b:48:e6:f2:28:9d:32:58:a5:57:49:ee:44:e6:cf:fc:56:16:
         60:7a:d2:32:fd:c3:4c:56:4c:2d:6c:c0:30:21:a2:59:c2:8b:
         77:b9:2c:f9:79:ef:8f:a4:97:d9:ac:1f:b1:d8:af:52:bf:07:
         a1:1f:7b:b0:50:2f:5a:08:00:47:e8:d7:d4:86:c9:8a:4d:28:
         a3:6d:ce:49:45:b1:01:e4:36:23:f7:c5:11:ac:74:8f:f7:91:
         d3:70:fd:2b:2b:d0:a9:74:19:be:8c:bb:72:56:4a:06:fd:d1:
         40:a1:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:08 2026 by rpki-client