This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
File:                     zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json)
Hash identifier:          +p+PSAq298PPZr2RNXLtlPYZ8pJkhQB9zlLwdcDniis=
Subject key identifier:   40:B5:8A:88:1A:DA:C5:6B:82:D9:9A:12:F3:06:99:0D:DC:51:ED:4E
Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34
Certificate issuer:       /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
Certificate serial:       2848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
Manifest number:          283A
Signing time:             Sat 24 Jan 2026 15:28:17 +0000
Manifest this update:     Sat 24 Jan 2026 15:28:17 +0000
Manifest next update:     Sat 31 Jan 2026 15:28:17 +0000
Files and hashes:         1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: Bw85j9gHxAtTM3dAyfCk/qGp7nj2gJf3J+SjdEP0ePI=)
                          2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10312 (0x2848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534
        Validity
            Not Before: Jan 24 15:28:17 2026 GMT
            Not After : Jan 31 15:28:17 2026 GMT
        Subject: CN=6974e511-768e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:e1:d2:b0:8e:e5:ac:94:71:e5:79:b1:de:
                    db:ed:60:c9:a1:f6:16:ae:7f:c2:45:ba:bb:9f:5b:
                    6c:8a:1e:a7:9d:06:1d:11:d2:47:a6:b4:f4:fd:35:
                    fd:f9:92:44:28:71:ce:86:65:46:bb:12:c0:82:7e:
                    c9:34:98:4e:3f:28:9c:e1:c4:ff:07:c2:7e:86:54:
                    56:72:b4:f2:dd:92:ed:12:e0:ba:c7:f2:b5:6f:29:
                    4c:fc:a1:b5:cb:b8:99:23:49:42:a2:c6:6f:d9:04:
                    a4:38:d7:fa:bf:32:65:19:49:0c:58:c6:8c:b8:48:
                    d1:36:48:e1:53:43:6a:0b:d8:b2:82:91:d2:55:14:
                    42:b0:0e:8e:8b:58:26:21:16:7f:61:eb:d4:4d:74:
                    49:42:5b:dc:45:49:91:1d:ae:a9:28:5d:38:d9:40:
                    0a:01:85:5a:0b:2f:3b:e6:ca:9e:00:6d:88:8e:c7:
                    16:4f:65:3d:24:32:e5:8f:34:0d:dc:85:40:9a:cb:
                    10:3a:91:32:89:d9:52:d2:72:8b:4a:07:4c:f0:fc:
                    cb:72:dc:85:c1:f1:3a:2f:6d:c1:94:a5:d8:c7:be:
                    d6:6b:f5:cf:6d:82:4c:57:f6:61:45:c0:44:74:b1:
                    e1:63:ef:94:58:3b:5e:75:dd:82:64:d8:14:fc:92:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:8A:88:1A:DA:C5:6B:82:D9:9A:12:F3:06:99:0D:DC:51:ED:4E
            X509v3 Authority Key Identifier:
                keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:91:55:3e:09:f0:fc:e4:5e:57:1b:4f:0c:cb:40:00:2d:
         b8:27:9b:1c:06:5e:47:bb:ff:18:f0:04:3b:bb:9e:c6:1d:d1:
         86:33:97:e6:8c:d4:8a:c7:51:ee:07:4a:d8:cf:e9:52:8f:0a:
         70:c5:5a:a7:cb:02:39:ed:1d:bc:58:82:cf:8c:e5:99:c4:50:
         1f:f4:3e:1c:cb:f2:54:72:3b:a8:4b:e6:06:f1:d7:09:e7:2f:
         52:5c:61:03:63:d1:4e:b4:3d:33:bb:5d:c1:16:26:da:3e:36:
         6f:25:bf:e4:a6:9b:1d:9c:f3:83:44:fe:5b:51:76:f2:3c:89:
         cc:37:60:dd:a0:eb:36:c6:cf:a7:1a:21:c9:c5:e1:ca:d4:f1:
         e4:c6:65:96:0f:2a:09:f9:6c:f2:dc:33:88:8f:ad:52:e3:1d:
         c7:b8:66:cf:cf:39:1c:3c:0d:06:d3:bb:f8:0e:6b:9c:b0:0c:
         90:03:fe:ea:c7:d8:6e:75:e0:42:e2:fd:54:b7:af:67:32:9a:
         a9:4e:5f:fe:69:83:a8:5e:2a:f2:b5:1a:7a:ed:59:98:bb:ce:
         ea:a6:5d:bd:28:37:5b:1a:a4:5e:b4:17:5f:f3:b5:91:29:01:
         da:39:bd:34:86:dd:38:17:2b:fa:25:90:fd:4d:6e:8d:f4:f0:
         73:b6:1a:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz
QTRENjM1MzQwHhcNMjYwMTI0MTUyODE3WhcNMjYwMTMxMTUyODE3WjAYMRYwFAYD
VQQDDA02OTc0ZTUxMS03NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJrh0rCO5ayUceV5sd7b7WDJofYWrn/CRbq7n1tsih6nnQYdEdJHprT0/TX9
+ZJEKHHOhmVGuxLAgn7JNJhOPyic4cT/B8J+hlRWcrTy3ZLtEuC6x/K1bylM/KG1
y7iZI0lCosZv2QSkONf6vzJlGUkMWMaMuEjRNkjhU0NqC9iygpHSVRRCsA6Oi1gm
IRZ/YevUTXRJQlvcRUmRHa6pKF042UAKAYVaCy875sqeAG2IjscWT2U9JDLljzQN
3IVAmssQOpEyidlS0nKLSgdM8PzLctyFwfE6L23BlKXYx77Wa/XPbYJMV/ZhRcBE
dLHhY++UWDtedd2CZNgU/JJybQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEC1ioga
2sVrgtmaEvMGmQ3cUe1OMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy
MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO
WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAifpFVPgnw/OReVxtPDMtAAC24J5scBl5Hu/8Y8AQ7u57GHdGGM5fm
jNSKx1HuB0rYz+lSjwpwxVqnywI57R28WILPjOWZxFAf9D4cy/JUcjuoS+YG8dcJ
5y9SXGEDY9FOtD0zu13BFibaPjZvJb/kppsdnPODRP5bUXbyPInMN2DdoOs2xs+n
GiHJxeHK1PHkxmWWDyoJ+Wzy3DOIj61S4x3HuGbPzzkcPA0G07v4DmucsAyQA/7q
x9hudeBC4v1Ut69nMpqpTl/+aYOoXirytRp67VmYu87qpl29KDdbGqRetBdf87WR
KQHaOb00ht04Fyv6JZD9TW6N9PBzthri
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:58 2026 by rpki-client