This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
File:                     99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json)
Hash identifier:          +5DZDolAKxXgXntkOqde6mkLMH9SMor6Xj2j7LUgyoE=
Subject key identifier:   C9:F2:40:04:2D:DF:F3:E9:BC:8E:A8:18:35:E7:2C:89:A5:5D:23:8F
Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1
Certificate issuer:       /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
Manifest number:          01AC
Signing time:             Sun 25 Jan 2026 02:40:17 +0000
Manifest this update:     Sun 25 Jan 2026 02:40:17 +0000
Manifest next update:     Sun 01 Feb 2026 02:40:17 +0000
Files and hashes:         1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: ZWX2Ex8gdb3/fQcQBikHORF2OWXJ2AEZ6ZZQ7Yy2qQY=)
                          2: 5CA47C5EBBDA11F0A19C5D40C4F9AE02.roa (hash: 2+lZP0chEkTaKev1bv6H78aR2Yp5agmlSBeIgdQ6OWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl
                          rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1
        Validity
            Not Before: Jan 25 02:40:17 2026 GMT
            Not After : Feb  1 02:40:17 2026 GMT
        Subject: CN=69758291-3b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:83:51:53:d8:38:07:3f:cb:5e:f5:b7:79:
                    3d:e1:12:1c:78:56:0f:b3:81:52:03:59:15:3c:fb:
                    dd:e8:c6:e1:57:e3:43:d4:d5:ac:05:1b:7a:cd:e1:
                    b1:8c:94:5a:b5:6b:e1:94:74:f6:a5:63:c4:aa:33:
                    1e:05:18:57:a1:c6:07:4d:11:56:9e:b1:a8:5d:0d:
                    63:1b:7e:22:99:7f:55:18:83:8d:e8:6e:99:45:48:
                    1c:d8:d1:93:56:a0:39:a7:d3:97:4e:e0:59:6f:09:
                    e0:91:f1:61:6b:b6:23:2a:36:98:e2:c9:cd:d9:af:
                    d5:e6:80:e8:88:e6:64:06:d9:41:86:93:13:46:b5:
                    19:91:ed:6c:0a:06:ef:98:69:d1:5e:22:20:bc:d3:
                    05:9f:be:15:8e:b7:b0:46:45:8f:3f:69:39:e7:2f:
                    8e:20:80:e3:d7:78:4d:dd:af:82:57:71:da:63:40:
                    2a:24:f6:bf:48:1b:b7:e5:dd:75:fc:53:94:ea:cb:
                    77:8c:04:0c:41:e2:d5:b9:1d:f1:ef:b3:e4:3c:93:
                    a7:3c:34:05:46:5f:52:5a:4b:ec:9f:48:aa:29:7a:
                    80:0e:e5:17:51:78:23:a5:64:18:00:cb:8c:4a:30:
                    8e:75:f4:67:4a:8f:fd:1c:ff:38:19:fe:6e:88:99:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F2:40:04:2D:DF:F3:E9:BC:8E:A8:18:35:E7:2C:89:A5:5D:23:8F
            X509v3 Authority Key Identifier:
                keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:08:c7:49:01:a6:9e:00:f3:b7:79:29:d9:06:be:c7:15:
         0c:24:9c:5f:12:cc:57:90:0b:aa:29:53:94:f6:ed:64:9b:3c:
         26:81:2d:0c:01:00:e6:f9:b4:17:ac:bc:85:8f:b5:3a:c7:cf:
         a7:76:95:11:58:4d:61:30:e4:dd:64:d6:e3:e4:8b:69:de:63:
         f8:a6:1b:96:e3:24:f6:e3:c9:c2:ae:58:73:73:0f:e9:c3:a0:
         b4:b1:13:f3:83:8d:46:ac:df:d1:f6:42:39:28:61:16:5c:2d:
         ae:84:ae:99:a9:99:b1:c6:68:e7:a8:64:6c:d2:dc:a2:5c:4d:
         4c:e7:b5:19:18:2c:cb:87:8e:1f:2d:7a:a7:b8:8b:1c:54:4f:
         53:94:d0:ee:5f:f2:7e:e8:e0:ef:57:78:2d:2f:21:b1:d0:7b:
         83:c2:56:b7:60:61:44:f4:3c:35:e4:a9:ee:98:63:cb:ed:fd:
         a1:ba:2e:e5:2a:87:9b:1f:7c:44:84:2a:5b:69:d6:60:5b:99:
         c0:03:33:0a:c0:f4:ba:f9:54:73:bf:9b:47:af:6f:2d:88:44:
         82:1c:ba:1e:28:16:40:a9:ee:d1:70:e7:8d:60:54:06:4d:f2:
         53:66:95:1a:6c:43:51:69:7a:f6:b2:1f:19:a5:64:8e:61:9c:
         ec:2e:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:04 2026 by rpki-client