This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
File:                     z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json)
Hash identifier:          Zqy9gHnzVI2JSacqp7R3/zbUlHb7i9yB0aalK0mBzhU=
Subject key identifier:   0F:CD:D3:BA:56:7A:F5:9B:85:DD:2C:83:45:DD:2B:B5:D6:4F:91:BE
Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6
Certificate issuer:       /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
Certificate serial:       E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
Manifest number:          E2
Signing time:             Sun 25 Jan 2026 04:44:25 +0000
Manifest this update:     Sun 25 Jan 2026 04:44:24 +0000
Manifest next update:     Sun 01 Feb 2026 04:44:24 +0000
Files and hashes:         1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: imel6y6FITjdxVJLJgTU9GHybzB+HxQDnXW1Vi3BRE4=)
                          2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: c/aPIx7sIlMm9hEs7EP/H/t3hc0Qsr+nc2nekVdkKmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6
        Validity
            Not Before: Jan 25 04:44:24 2026 GMT
            Not After : Feb  1 04:44:24 2026 GMT
        Subject: CN=69759fa8-2e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:63:97:19:87:3a:ab:3a:50:9d:86:78:10:
                    31:4a:cf:f8:99:ae:25:ca:a0:f1:a6:5f:9f:01:bc:
                    e9:51:2c:18:2f:c4:b3:7a:c6:db:59:47:2c:3f:b3:
                    f7:83:84:b9:2d:02:97:35:ec:44:27:bd:a7:3c:8f:
                    d2:fe:e5:3b:ab:02:32:0f:fe:3d:ec:14:a7:2f:c0:
                    ed:e9:44:69:18:d2:19:f1:91:44:a4:27:5e:a0:3e:
                    6e:6c:0c:4a:cb:a1:60:24:a4:28:6a:90:cf:ba:cd:
                    30:e8:fa:e8:ee:f7:ea:7d:e0:d9:80:1d:b6:c1:aa:
                    41:2b:3e:08:3f:74:dc:78:08:4c:9a:44:5b:f5:db:
                    1c:25:fc:0b:3d:87:44:e1:59:0d:84:b5:39:be:55:
                    07:d5:8f:09:4a:68:c2:93:1a:11:28:0d:99:f0:3d:
                    61:f8:16:eb:a8:29:8b:eb:2d:0d:7e:af:da:12:39:
                    04:dc:9c:0b:ec:86:b8:01:b9:a1:9f:84:ad:06:b1:
                    5d:01:b2:ca:d3:7f:f3:91:99:6f:d3:ac:84:e6:d3:
                    0d:2c:7b:0a:61:61:0a:ff:7e:fd:b1:67:ef:20:c7:
                    1c:0f:7a:16:39:0b:28:ad:52:57:bc:e6:8c:ef:59:
                    38:2d:e9:9b:c0:16:19:04:b9:d7:df:2b:8e:b0:44:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:D3:BA:56:7A:F5:9B:85:DD:2C:83:45:DD:2B:B5:D6:4F:91:BE
            X509v3 Authority Key Identifier:
                keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:64:6c:dc:8c:b5:a3:28:8e:61:75:4c:d4:ab:0d:9f:b6:5a:
         c6:1b:b0:6b:2d:2f:b6:82:06:0a:31:d9:73:4f:41:37:98:7f:
         0c:cb:a5:14:7d:62:ec:df:8b:12:7a:37:cd:f1:a0:a6:4a:65:
         64:94:08:a6:c2:a0:1c:86:f9:bc:b0:34:07:36:cc:3f:c2:bc:
         7a:d3:3f:d0:5b:df:40:80:78:da:5a:9a:ae:d9:21:69:01:cf:
         31:f0:ac:5a:40:d5:09:c9:3a:02:c9:b5:b8:8b:db:be:b7:a0:
         d9:86:50:4f:2c:55:4f:4a:c7:69:fa:8d:75:6f:3c:ac:04:4e:
         2e:29:32:4a:0c:d0:25:a2:c2:a2:2d:02:e9:56:89:46:e1:50:
         be:0e:1c:fb:8b:1a:80:25:7f:dc:ec:b7:18:83:df:a8:a7:ec:
         18:98:59:71:7e:fa:b4:bc:eb:c4:35:43:bd:53:46:d5:fb:ed:
         92:d6:30:d3:8f:5e:74:01:38:21:05:95:7d:c2:7c:fe:b3:65:
         5d:3b:d2:3a:8b:87:17:7c:d7:bb:1b:e0:71:90:16:f4:be:46:
         b5:bb:a7:db:03:88:e2:ec:df:cd:88:cb:6e:4e:76:7d:20:f7:
         a4:6f:5c:00:57:98:c2:5f:62:fe:5b:4b:91:75:ef:f1:c0:e8:
         8e:94:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:25 2026 by rpki-client