This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          KFm7V6TtM1b63AXyinsfSt4PeltM0B1fkWUJnvrclxE=
Subject key identifier:   4E:45:8B:E1:59:27:B3:E5:92:80:6E:EE:57:3C:63:76:D7:CF:F5:91
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       06F8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          06F1
Signing time:             Sat 24 Jan 2026 15:05:28 +0000
Manifest this update:     Sat 24 Jan 2026 15:05:28 +0000
Manifest next update:     Sat 31 Jan 2026 15:05:28 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: lEQSLEDy0GUHlJz0pmHMwBMy19wy05UEMxckEJw/WlE=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: PGlTDpEV17D+1hrLu4fdfibpz1YbRKMAlzpsoNFgyb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Jan 24 15:05:28 2026 GMT
            Not After : Jan 31 15:05:28 2026 GMT
        Subject: CN=6974dfb8-6b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:80:57:c4:3b:39:ef:ca:06:45:fc:1e:d2:
                    6a:97:aa:64:e7:e0:f4:8d:76:b1:b4:4f:a3:cb:bf:
                    9a:6f:b3:ef:05:04:9a:fb:10:a2:f4:06:49:71:5a:
                    23:41:3f:0e:ee:6f:d9:45:21:6f:d3:79:f4:31:29:
                    e4:3f:b7:28:f2:aa:31:5a:0c:00:df:9b:48:bb:b7:
                    3a:23:0d:31:7d:9e:04:dd:a7:ff:fa:16:f9:6f:50:
                    1c:65:04:59:08:64:ad:40:e8:69:a8:6e:5a:dc:a1:
                    4c:d6:8f:78:36:87:4c:1c:67:e6:8b:36:e7:f5:4a:
                    ba:a3:b7:df:e1:1b:f0:c4:05:73:b3:24:72:a8:c5:
                    d7:4d:65:56:59:d6:a4:75:d8:74:88:bf:f1:56:dc:
                    a1:4e:d0:06:da:32:ba:d2:2e:06:0b:11:bb:b6:98:
                    77:83:12:c3:b2:23:92:72:5b:09:89:89:ca:6b:2b:
                    ae:90:83:a1:27:0e:12:d5:3f:78:16:d4:91:af:7e:
                    31:a0:14:3c:c3:cc:df:68:cf:54:3a:9a:2b:1d:e0:
                    ff:dd:dd:bb:53:9d:f2:45:ab:68:27:50:1d:d1:b6:
                    57:43:29:cc:d2:35:18:9c:07:cd:01:45:14:07:9e:
                    bf:ec:87:93:dd:5c:54:64:3d:f0:c3:d8:59:92:8f:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:45:8B:E1:59:27:B3:E5:92:80:6E:EE:57:3C:63:76:D7:CF:F5:91
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:46:ae:00:48:f8:0c:25:e8:52:37:0c:e4:ac:6a:bd:47:ac:
         7b:ae:87:6e:f5:78:89:d2:26:e3:70:42:d8:8a:11:33:89:b7:
         ce:d1:46:3b:1c:84:60:05:d3:62:77:28:56:3b:38:c3:25:33:
         33:62:00:b5:4c:13:8c:d3:98:39:e7:95:9b:e7:74:98:06:38:
         0a:ad:8f:85:04:08:fc:f1:f5:28:6a:1f:57:fb:dc:43:a0:c3:
         06:d6:37:9a:5e:be:dc:ed:fb:2c:24:b9:ef:71:9a:f1:40:83:
         ea:10:f0:d4:5f:ee:55:2f:55:35:3d:05:34:4e:8b:00:47:ba:
         d8:40:ab:b8:ea:b0:2c:6e:c0:bf:27:fd:2f:be:82:38:8e:8a:
         eb:de:3a:a9:93:8f:2b:8b:f0:09:31:cb:d0:70:ef:d1:53:87:
         99:98:91:f8:d0:94:4b:67:48:89:10:1d:be:86:a2:b3:4d:b5:
         72:1c:14:94:ef:86:90:b6:2a:3d:18:88:af:f5:86:a5:c6:cb:
         50:5b:e0:49:97:b0:25:66:de:ac:69:e0:81:64:c9:94:cf:1c:
         d4:af:3e:62:c1:47:d2:90:f8:dd:c6:a4:8d:3e:0c:e0:87:ed:
         a1:a8:d1:e6:4c:d1:1e:df:28:59:0a:7e:d6:90:a9:14:44:52:
         59:56:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:57 2026 by rpki-client