This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File:                     Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier:          dznmAzZW1cL3eQjvPXy/ExbvJLAkCSYiDVWshqGhkdA=
Subject key identifier:   CC:7D:34:93:7E:0A:B1:CE:92:21:A3:76:A2:D3:CB:2D:4E:15:FA:75
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer:       /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial:       07FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number:          07F0
Signing time:             Sat 24 Jan 2026 20:32:34 +0000
Manifest this update:     Sat 24 Jan 2026 20:32:33 +0000
Manifest next update:     Sat 31 Jan 2026 20:32:33 +0000
Files and hashes:         1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: tmHkrfvm8TkEeIOPYr9TFxP+z+X4gL2RYX+Z4nZFyyM=)
                          2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: EkYpQdNZWCIX2JfAIndqxsEp1szJAw+vQsJTZ2qL1gE=)
                          3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: wFGCcQD71t0xbsG6j/RT9j5S1Xu9ekdDINtwsZ1h1tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
                          rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
        Validity
            Not Before: Jan 24 20:32:33 2026 GMT
            Not After : Jan 31 20:32:33 2026 GMT
        Subject: CN=69752c62-1ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:a9:d5:89:aa:b5:6a:98:39:02:b8:ae:98:
                    b1:33:0a:80:1f:39:73:15:c3:c3:d8:62:58:5f:75:
                    cf:7e:74:1a:9b:cd:b8:77:17:79:76:b5:bc:03:22:
                    5a:8a:c0:ec:5d:78:66:71:ae:4d:0b:38:78:e1:95:
                    c0:f0:d0:b8:43:45:9a:9b:e9:33:23:1a:de:d3:c6:
                    0e:1e:69:4a:db:ce:35:a2:6e:02:eb:ca:35:b1:4f:
                    1e:16:92:f4:c8:7f:4f:87:84:5e:bb:68:63:f8:1a:
                    63:fd:47:21:fb:48:bf:8c:3d:db:4f:5c:65:18:15:
                    42:a1:84:db:10:c7:ab:a0:7d:6c:ee:1b:73:12:82:
                    3f:92:4c:5e:d1:98:8b:0f:50:93:57:01:22:e5:38:
                    78:dd:87:d6:28:46:1e:a5:4b:a7:8e:3d:6e:ab:05:
                    bb:a6:1f:57:9a:16:56:44:2c:e7:11:db:f2:b3:e1:
                    10:d6:f9:d3:93:b2:52:02:54:03:1f:b3:22:29:d3:
                    4f:22:2d:e7:65:3d:17:1f:bc:f4:dd:1f:65:f5:f5:
                    e4:d6:60:f9:64:d9:1e:fa:40:03:e0:0c:08:a8:8c:
                    d4:26:ba:38:99:65:ad:73:b9:00:77:e6:29:d7:f5:
                    6d:e1:66:02:04:7b:47:9a:7e:37:cf:8f:46:1d:eb:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:34:93:7E:0A:B1:CE:92:21:A3:76:A2:D3:CB:2D:4E:15:FA:75
            X509v3 Authority Key Identifier:
                keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:85:c8:00:02:89:59:ea:ae:77:6d:c5:a8:ac:3f:0f:18:73:
         73:7a:1c:3b:d3:3b:e6:af:25:77:b5:b4:f0:39:9f:81:19:5f:
         be:63:2e:18:b4:b7:a3:e2:1e:68:0b:df:99:c9:0e:cc:bc:96:
         bd:64:57:b7:c5:af:21:93:c7:79:7b:52:54:e9:bb:dd:93:d5:
         35:b9:b8:56:a6:04:4b:72:09:5c:41:ad:4c:01:c4:20:e9:4e:
         b4:82:f1:b7:e2:b2:7a:b1:9f:79:69:ee:82:34:ee:ca:73:71:
         30:46:12:f4:ba:ed:e2:cd:97:1c:30:68:0c:b0:51:de:3f:5e:
         f3:6f:7f:3c:29:47:77:03:75:66:b4:55:de:06:88:71:b4:ea:
         ed:f3:9c:80:6d:42:77:70:90:cc:d3:db:b6:33:c4:aa:63:24:
         09:8d:42:09:ab:2d:50:be:cd:db:83:a0:97:2a:30:4f:16:59:
         3c:f6:6c:5c:07:09:93:ee:ec:93:68:ff:1e:8a:3b:f2:ee:bc:
         c8:a4:bd:83:88:d5:c3:fd:c7:d1:3a:66:1e:b0:e7:96:8f:9d:
         cf:32:5d:ee:88:75:f6:3c:e7:c7:3f:aa:10:e7:1e:27:36:9c:
         4b:3a:8c:38:bc:95:bf:8d:ad:c9:6f:75:27:61:e4:37:53:bc:
         8a:3f:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:52 2026 by rpki-client