This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
File:                     ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json)
Hash identifier:          4DBojm5LYL46tNmPqjQG4Ndj2rWUzJqqZZ8rRCm5o9U=
Subject key identifier:   22:94:BB:AA:6E:25:B5:52:DD:82:8B:74:FA:37:4F:13:36:1C:46:F0
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0CD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
Manifest number:          0CB5
Signing time:             Sat 24 Jan 2026 18:02:40 +0000
Manifest this update:     Sat 24 Jan 2026 18:02:39 +0000
Manifest next update:     Sat 31 Jan 2026 18:02:39 +0000
Files and hashes:         1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: AcTzearuEDCcsIxpRxINtVCuA4sRR7BQ8Ha8XMqk4CA=)
                          2: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: D8Rskcy+MlcZVWynnet9FUcktOO82nExRIwJwtWFbsg=)
                          3: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: GsJaSUcatISwdkkhFSUQBWiCBZOPMZtERdw74sbshGA=)
                          4: 3EED102CC53011F0ADCB012EC4F9AE02.roa (hash: 6fE56WTUrkGoowNCAPAXKB4etjMvEgjd/DPqKL4LTvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3284 (0xcd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Jan 24 18:02:39 2026 GMT
            Not After : Jan 31 18:02:39 2026 GMT
        Subject: CN=6975093f-0fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:81:74:6b:9f:21:1f:a3:f4:08:95:c2:d1:
                    4f:fb:3c:d9:5d:ad:fd:68:75:e2:ca:e3:11:d8:5c:
                    79:4f:9d:d3:d7:0c:70:13:04:9c:07:ff:77:c4:44:
                    aa:03:87:ab:86:db:e2:70:d7:ed:3d:c9:7d:76:e6:
                    f6:73:a8:62:61:9f:00:5e:23:45:d1:dd:0a:a3:fc:
                    ff:c1:d3:59:40:7d:59:ed:59:81:df:3a:ab:f9:9a:
                    9a:0d:28:95:fb:ce:35:1f:be:ef:57:10:9b:f7:1e:
                    7e:0d:a3:a4:78:a5:ab:1b:0d:14:93:b6:52:c3:b6:
                    b5:a7:aa:97:8d:0f:56:67:6c:35:e0:dd:ca:87:b8:
                    b1:d3:21:f7:b7:1a:1e:79:7d:c1:55:b7:02:b2:40:
                    59:ef:d5:7c:f7:92:a5:7b:3b:94:47:88:41:22:07:
                    09:63:a3:6a:77:1a:64:cf:2a:b0:6c:fd:6b:fb:1a:
                    b9:c7:01:19:28:93:89:67:53:a9:89:01:6c:8d:ce:
                    14:d5:a8:de:f6:7d:24:07:ed:44:e5:eb:dc:c8:b0:
                    87:02:fd:4d:8b:5d:3c:ac:aa:d6:f1:dc:8b:7c:eb:
                    8d:f2:43:12:fe:05:98:da:1c:08:2f:57:59:de:88:
                    00:78:1e:a2:b3:91:19:0b:5a:10:3c:b1:0f:bd:9f:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:94:BB:AA:6E:25:B5:52:DD:82:8B:74:FA:37:4F:13:36:1C:46:F0
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a8:de:18:64:01:35:60:f4:f1:ed:cc:c1:17:e2:52:4b:4c:
         35:b8:16:fd:c5:f4:8e:65:de:8f:3e:0e:81:62:a8:c8:0b:b9:
         d2:a1:69:b1:ac:7d:4d:d8:c9:2c:e4:d1:41:24:e1:96:b5:a9:
         51:19:ae:0b:9c:20:5d:4f:aa:c3:d6:be:e4:ba:48:f7:f2:08:
         93:ae:2f:33:0d:21:bf:27:ef:32:77:b4:b2:8b:d2:36:68:c1:
         c4:5a:8a:b6:5d:13:1e:d3:cc:5c:6f:2e:9e:b0:b9:53:41:f5:
         d7:cf:4d:ad:99:3f:e9:36:e7:b3:25:74:d7:ed:a1:d1:76:46:
         35:42:63:60:62:24:67:68:f6:de:88:d5:12:62:83:54:8d:c5:
         a9:8c:05:5c:a1:07:42:cd:b9:12:05:08:76:f0:b4:e2:d7:b5:
         3c:4c:e7:70:6b:5f:62:9f:33:5d:45:25:93:f2:1a:c7:9b:d2:
         ce:07:51:0e:99:9b:ed:f8:55:97:f4:d3:33:d9:d2:b2:8c:e9:
         3f:e4:6f:f9:11:b0:36:be:d7:5a:54:7d:7f:9b:4f:b5:0b:78:
         3d:51:2e:03:06:08:73:8b:8b:a4:45:7c:68:b3:e5:1b:55:75:
         be:30:c9:c3:59:b3:f3:4b:5c:f4:ff:e6:e5:85:7e:20:65:e9:
         c1:cf:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:00:45 2026 by rpki-client