This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File:                     pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier:          uwn2krct3U7JA+Pwsdi6sfIxFuMfefkbwfc4XCMPwtc=
Subject key identifier:   3B:AA:B4:12:7B:F2:4B:E6:1D:0C:07:EC:38:F4:27:A6:6A:85:7F:8E
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       02BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number:          02B9
Signing time:             Sun 25 Jan 2026 00:36:31 +0000
Manifest this update:     Sun 25 Jan 2026 00:36:31 +0000
Manifest next update:     Sun 01 Feb 2026 00:36:31 +0000
Files and hashes:         1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: eudld4EVODrOYEUjvfDRzbRXbOioUO2ksGLnjNiO0rg=)
                          2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Jan 25 00:36:31 2026 GMT
            Not After : Feb  1 00:36:31 2026 GMT
        Subject: CN=6975658f-ecd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:ba:b1:5d:4b:dc:f6:14:e9:c1:e6:c2:f9:
                    1c:6d:f7:a1:55:e1:7e:96:eb:d6:d1:6c:e6:1d:3d:
                    60:44:08:e5:a1:55:6c:bb:0b:20:e3:d6:2a:2c:87:
                    ac:91:4e:39:40:5b:7b:53:71:06:55:6a:76:2b:40:
                    40:fe:e7:e5:79:55:51:23:6d:55:2a:2e:aa:b7:70:
                    34:d0:a8:da:fb:af:41:aa:8d:73:4f:fd:61:25:68:
                    1e:f6:02:72:f4:5b:9e:45:a5:a0:25:2c:43:fb:dc:
                    5d:6f:b0:42:bf:43:f6:d1:1c:48:d7:a0:95:70:2f:
                    a2:e4:37:dd:d2:ab:54:7f:70:ff:60:ba:60:7f:f8:
                    45:80:9a:e3:c9:7d:14:c7:8c:48:6e:a7:ed:d0:31:
                    4e:1c:28:4c:c7:a2:52:dc:82:ad:63:1e:e9:d8:fd:
                    1e:d8:81:0e:4a:66:48:ff:0b:36:95:3d:b5:41:ad:
                    a5:6a:16:f5:8f:7d:a2:b0:c3:81:e9:2d:f7:9b:58:
                    e2:88:fe:33:e4:cb:5c:da:ea:49:b9:0d:d3:cf:12:
                    ab:26:d5:32:d8:ad:99:b5:3d:89:6c:c4:24:7c:8a:
                    34:ed:cd:2c:ba:fa:cc:3e:1b:fd:39:34:5b:5c:24:
                    40:42:8a:e2:a1:d2:6b:34:ca:1e:26:c3:df:54:e6:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AA:B4:12:7B:F2:4B:E6:1D:0C:07:EC:38:F4:27:A6:6A:85:7F:8E
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:c3:4b:31:df:72:b6:36:b4:91:61:11:78:d9:eb:e0:fe:
         55:fd:e8:2d:a1:fd:0d:08:7f:92:f9:26:31:56:bf:b3:a4:8e:
         e4:13:e0:25:a6:6e:83:ce:91:c3:19:14:9b:84:06:d9:54:18:
         0c:20:06:c1:44:08:d7:20:ce:61:63:ff:04:81:7f:0a:69:f8:
         72:5a:7d:a1:84:7d:6a:a4:df:12:11:ef:c4:c0:b5:e4:e3:68:
         76:95:a8:e6:c4:3f:0f:00:e2:65:e4:2e:06:f1:70:07:6c:86:
         c2:ea:e8:6c:24:f2:32:5d:25:5b:2a:f0:37:f3:87:c8:5d:e3:
         79:64:66:c4:47:df:29:82:e3:be:71:f3:c4:ef:7d:54:fe:8e:
         01:72:5e:e9:0b:aa:ae:6c:50:15:2c:5f:6b:c5:8f:4a:35:06:
         9f:27:c1:6a:4f:9c:79:62:9a:88:78:61:a8:35:33:bf:78:5f:
         a9:3c:7c:0e:c5:1b:d7:96:84:43:9e:0d:fb:cb:fb:87:24:31:
         5c:9b:92:70:42:65:30:d6:c9:a5:57:b3:8c:32:7d:5b:75:19:
         31:0a:00:19:4b:2b:05:70:22:a1:51:85:00:6d:b1:f1:67:61:
         78:30:1e:a5:f2:aa:a5:98:9d:f5:e3:4f:7b:0b:32:ac:d1:40:
         14:51:76:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:32 2026 by rpki-client