This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          FxjWxaz3M6lYsT8Z2+8eeAx5PUAnCoaWT2sHe5WrU0U=
Subject key identifier:   18:80:89:8B:3B:A0:DF:96:38:94:2D:71:EC:D0:D6:31:4F:69:0A:02
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          0A
Signing time:             Fri 23 Jan 2026 07:05:37 +0000
Manifest this update:     Fri 23 Jan 2026 07:05:36 +0000
Manifest next update:     Fri 30 Jan 2026 07:05:36 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: hrNH1OZ5wqeQS3LIhNvYalXV75XbxkGFVNtb+k7zKUs=)
                          2: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: LLw62Gox1oec8YyHT8F63yZd64/kKLLf6S16uAYsnpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 07:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Jan 23 07:05:36 2026 GMT
            Not After : Jan 30 07:05:36 2026 GMT
        Subject: CN=69731dc1-336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4f:d3:3d:69:bd:47:16:c4:ba:97:ff:42:e5:
                    61:fa:0f:ff:87:fb:43:92:56:e7:ce:52:bd:a9:8b:
                    38:09:a6:de:28:db:78:66:12:2c:34:85:61:8f:ac:
                    0b:5a:e7:84:61:5a:d8:d0:e8:7f:28:5d:aa:69:1c:
                    2a:e9:7b:05:f6:17:63:94:d2:6a:42:f6:dd:63:e3:
                    0e:df:35:dc:7c:49:73:05:39:87:2f:e2:3b:5c:d3:
                    2c:b1:3a:05:47:43:cd:bb:56:8e:06:d7:c9:6e:91:
                    35:04:12:60:3e:1b:52:0f:eb:bb:97:7e:fc:62:f6:
                    50:07:16:d3:69:28:60:da:ee:c5:10:25:ff:c6:5e:
                    59:29:e9:c6:d9:cb:7f:57:49:47:7f:7d:2a:3a:73:
                    34:fa:75:11:82:37:f9:58:70:0a:81:03:49:3f:a3:
                    a5:48:18:0c:db:8a:e5:f7:25:60:8e:3c:3b:a0:37:
                    5e:e6:f3:dd:bc:25:19:62:02:9e:a6:94:d4:f4:ee:
                    7b:a7:71:07:58:e2:9a:18:5d:04:f7:39:8d:21:7f:
                    b0:fb:58:7b:28:b0:b1:20:dd:81:72:15:2c:a9:ed:
                    8f:39:70:53:75:90:7f:f6:0c:d7:f1:81:5e:ec:7e:
                    ec:29:ad:2e:8b:bd:b2:8f:68:97:88:e3:9c:a6:3e:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:89:8B:3B:A0:DF:96:38:94:2D:71:EC:D0:D6:31:4F:69:0A:02
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:15:df:ea:86:cc:9c:ca:2f:f9:8e:a6:2e:50:43:fa:82:a5:
         5e:7d:3b:98:2b:4c:bb:62:e9:61:96:3a:2a:27:19:0f:aa:a9:
         38:aa:5d:9b:cc:7f:39:37:88:cf:e3:37:56:07:14:3b:b4:45:
         c8:63:5e:52:e1:1e:67:0e:57:01:89:2a:11:13:40:de:00:10:
         67:45:e4:e2:24:5c:69:c9:73:88:34:f1:74:f9:97:83:dc:8a:
         6f:d3:e9:dc:83:62:77:82:65:9f:5b:48:da:31:dd:2b:76:fc:
         7c:c1:4e:e6:b4:5e:f8:af:11:77:27:a9:96:97:3b:38:6f:5d:
         79:c4:31:a9:44:ff:70:a4:ad:0c:ee:86:0f:bc:50:e5:72:3f:
         22:62:05:93:04:22:65:e7:35:cb:67:82:7f:60:5a:7d:2d:13:
         b2:d6:5e:89:59:eb:d2:7a:3b:10:c2:a1:a4:81:23:52:a5:aa:
         90:8d:e4:bd:9c:94:16:b3:b5:03:6e:a6:9e:87:e5:3d:36:33:
         0c:4f:13:b1:fa:77:12:59:ea:c7:91:4f:be:28:ef:0c:9f:3f:
         b5:93:05:3c:4f:2d:0d:9d:c2:51:7e:41:9e:66:2d:2d:7b:8a:
         10:53:3e:b1:46:98:71:19:be:e5:b4:19:d8:a8:d9:9e:44:ef:
         c5:fb:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:47 2026 by rpki-client