This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File:                     z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier:          FgEgzpd27i9imBn/MsWp0vbVdzuy4ZhJn6Nv19suIPQ=
Subject key identifier:   FB:6E:C9:03:9D:7B:1F:76:A1:10:40:CD:97:D6:2B:23:FF:76:DD:14
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer:       /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number:          6C
Signing time:             Fri 23 Jan 2026 05:59:19 +0000
Manifest this update:     Fri 23 Jan 2026 05:59:18 +0000
Manifest next update:     Fri 30 Jan 2026 05:59:18 +0000
Files and hashes:         1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: 9ASL6UMAnYK36YJ1tv+dgPLXYGVjWW1b3+n+j0K5dAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
                          rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
        Validity
            Not Before: Jan 23 05:59:18 2026 GMT
            Not After : Jan 30 05:59:18 2026 GMT
        Subject: CN=69730e37-6b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:c2:3b:f1:61:c8:0e:93:0b:7c:5a:24:9e:
                    49:17:b9:50:bf:9b:24:b0:0b:ef:e2:29:59:62:cd:
                    65:21:56:cb:70:fb:f3:1e:f6:38:ab:40:af:70:34:
                    00:5a:de:73:17:70:82:2f:bf:0c:f1:a3:67:f0:64:
                    d9:54:e5:af:ac:e5:fb:47:18:c3:39:25:9e:07:53:
                    12:04:5b:3f:22:c0:aa:51:4d:d9:f6:d4:24:6c:3b:
                    8b:ac:23:de:1d:b9:3c:e3:16:17:94:ff:df:7c:7c:
                    53:31:d1:36:2d:4d:cd:b3:6d:79:b7:25:4b:f6:63:
                    3a:bd:78:42:60:58:a5:30:86:a1:03:4e:e2:8a:60:
                    58:2b:20:83:d0:e6:65:83:5d:20:b6:63:8f:d9:ae:
                    98:9d:06:f8:03:85:ac:c7:ee:b0:d9:59:6e:cc:37:
                    d0:ba:66:96:66:3d:51:25:26:a7:f0:81:0a:9e:61:
                    be:95:e4:51:5f:c0:3e:5c:b8:43:65:54:91:9d:77:
                    35:4e:67:19:48:5a:a4:6c:7f:67:b5:7e:a2:7e:9b:
                    b7:cc:3c:af:24:49:c7:59:22:96:0f:af:5e:4a:d4:
                    a8:3a:b8:14:2e:32:dd:4d:23:d1:86:0c:28:b5:fa:
                    7e:6e:f3:91:f1:fe:ee:57:5c:d5:c7:54:ea:e3:d2:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:C9:03:9D:7B:1F:76:A1:10:40:CD:97:D6:2B:23:FF:76:DD:14
            X509v3 Authority Key Identifier:
                keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:5e:29:7d:c9:ae:3d:0f:97:a7:65:5b:24:fe:4a:e9:a5:
         b5:b1:ac:c1:bc:3d:ee:8c:ae:cc:1d:43:96:23:25:e4:58:12:
         ec:68:c9:63:05:43:88:77:68:d2:16:c5:dc:7f:b8:ad:1f:15:
         6c:40:98:82:ef:c5:65:5f:4d:40:f6:e5:c2:11:9e:eb:a6:51:
         5e:e8:36:d0:c8:57:c3:54:ec:36:e1:36:e0:1c:cc:fe:8c:44:
         ee:fe:68:fa:51:e1:57:14:a1:c8:f9:b9:1c:7b:20:f8:0c:b4:
         d9:82:f1:6d:04:4f:70:b4:37:fa:2d:67:1f:a0:0e:22:a9:64:
         af:24:61:38:e2:24:b8:2d:0a:f4:b2:ed:c7:82:3c:ee:bc:2e:
         9b:b6:6d:2f:a1:14:cd:46:50:33:6f:25:81:2f:fc:57:fd:e1:
         49:97:0d:98:95:34:f8:0e:05:c0:7e:a4:c6:ce:13:bd:1c:15:
         5c:80:ac:87:5c:c4:f0:28:a7:35:81:1d:54:a5:aa:a1:fe:b7:
         88:0b:cb:6a:da:79:83:96:20:c0:53:da:0a:ba:3b:1a:1d:14:
         70:a5:a3:64:77:e3:4e:df:41:4c:9c:ea:c3:d4:dc:6a:16:08:
         e6:1c:ec:d2:8d:83:4f:e3:e3:13:4c:12:a9:82:6d:6e:07:ed:
         f0:b0:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:56 2026 by rpki-client