This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
File:                     zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json)
Hash identifier:          xRadm0pfPXksHgUJCyLlYZhwEkL5i57Y2AY9uYxpIy8=
Subject key identifier:   FF:86:85:C4:21:53:0D:2C:72:5C:0B:05:DB:3E:16:59:96:B6:4E:0A
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Certificate issuer:       /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
Manifest number:          013D
Signing time:             Sun 25 Jan 2026 03:38:50 +0000
Manifest this update:     Sun 25 Jan 2026 03:38:49 +0000
Manifest next update:     Sun 01 Feb 2026 03:38:49 +0000
Files and hashes:         1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: ZmwGbupKHAzCQ4Mu1Fyw/xI1lHuzM6RbfLPVG4kXhlc=)
                          2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
                          rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
        Validity
            Not Before: Jan 25 03:38:49 2026 GMT
            Not After : Feb  1 03:38:49 2026 GMT
        Subject: CN=6975904a-8d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:c2:03:8d:9a:1c:8f:b7:0a:1c:cb:73:8c:
                    72:b4:0e:66:59:0d:db:df:f1:b9:67:2e:75:a0:3c:
                    14:b3:45:3c:ab:34:29:07:e3:88:e5:a4:b3:29:b5:
                    15:96:48:69:bd:6f:9d:dd:4a:80:db:82:a0:55:6c:
                    f4:15:83:23:2b:70:0c:ea:2e:bb:c2:00:2d:84:5a:
                    f1:8a:50:52:ba:1b:4c:fe:85:29:f9:e7:23:48:f2:
                    57:c9:fb:dc:ec:e0:66:a1:97:d3:e2:01:0e:44:86:
                    39:5f:88:9e:a6:42:c5:60:8c:8d:54:47:b6:4c:6f:
                    25:3d:07:46:b5:ea:4c:11:9d:bc:e1:4f:5c:0b:d8:
                    db:f6:50:2d:5a:91:07:b3:20:03:26:42:be:74:39:
                    2e:66:67:4c:67:70:4e:d4:9b:88:c0:5d:e0:44:7a:
                    bd:97:bc:17:4e:57:2d:8e:ee:03:cb:6b:96:f5:d5:
                    05:0b:e3:39:ed:24:ac:ef:c0:64:fc:ed:cf:2f:84:
                    b0:e9:73:01:d1:f2:94:f1:0e:f3:ab:1c:21:27:13:
                    9d:b7:c2:0a:1e:5c:3e:8e:5f:a2:93:df:08:16:43:
                    d2:96:d3:53:2a:b7:85:b4:bc:79:b7:e5:46:6c:b3:
                    6f:4f:9e:5c:cb:3b:19:bd:77:ab:23:2b:16:f6:52:
                    26:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:86:85:C4:21:53:0D:2C:72:5C:0B:05:DB:3E:16:59:96:B6:4E:0A
            X509v3 Authority Key Identifier:
                keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:21:dd:d5:73:64:0f:62:ef:01:c2:d4:4a:92:19:6b:94:69:
         c3:7b:d2:60:0f:52:b6:13:3c:dc:51:1f:bd:56:4b:e4:b4:91:
         53:0a:6a:da:85:f1:94:46:80:24:0d:e7:b0:5f:bd:31:58:17:
         a4:cf:b4:8a:d3:57:67:04:d8:6e:53:53:dd:f4:ea:81:8c:2f:
         3b:46:d3:3f:46:49:2e:88:9f:7a:b4:f6:25:ee:be:e5:ed:72:
         12:b9:36:4c:ef:97:77:7c:22:f8:08:2b:57:7d:f9:4c:26:55:
         2c:51:4b:f2:ff:30:39:be:db:a9:a8:ce:f7:65:84:b0:cb:21:
         9b:2a:da:1b:f9:27:8f:a1:ba:98:8f:86:02:b1:69:1e:d9:ce:
         50:c0:c7:56:fc:15:40:d1:cd:4b:c6:47:5c:94:c7:47:17:e0:
         e7:57:b6:33:1e:0a:3b:0d:75:06:36:dc:0a:89:a7:d6:8b:bb:
         c5:ed:32:be:3f:03:be:a3:d3:fb:4e:76:d8:b6:2b:b5:19:f5:
         67:22:2a:4f:7f:c8:d6:b4:d3:54:d9:9f:8e:d0:37:ed:ac:42:
         08:af:3c:cc:ba:c5:e9:c4:bf:4c:33:2d:80:9b:ba:e9:f0:5c:
         e5:4a:3f:4f:02:1f:58:0b:e5:11:c6:c0:9e:ec:fe:f9:cc:4d:
         06:25:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:15 2026 by rpki-client