This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File:                     zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier:          1w3AJSG6JgQY4y4HRrApZp6xlYavZtg7782v/XWcLnY=
Subject key identifier:   44:83:3C:2D:CE:4E:4D:D2:13:82:02:57:40:15:25:F2:3E:0C:25:52
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer:       /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number:          06C8
Signing time:             Sat 24 Jan 2026 14:37:29 +0000
Manifest this update:     Sat 24 Jan 2026 14:37:28 +0000
Manifest next update:     Sat 31 Jan 2026 14:37:28 +0000
Files and hashes:         1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: FJ3rkouinziwwwj92c0NgMUEqNZaoNRWqFxEXJnd2Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
        Validity
            Not Before: Jan 24 14:37:28 2026 GMT
            Not After : Jan 31 14:37:28 2026 GMT
        Subject: CN=6974d929-8a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:5d:13:12:25:5a:c7:ba:5d:b0:fa:bb:53:
                    6d:82:81:b9:41:ba:bd:19:32:8d:8d:18:00:c8:7e:
                    88:2e:42:70:6c:5b:0c:92:52:38:1a:43:b9:51:0e:
                    cc:06:d1:b0:d8:95:fe:86:db:66:3c:c4:e1:f0:fc:
                    9c:eb:26:be:54:38:47:23:b8:2e:98:39:48:5b:48:
                    ac:93:4d:a3:cd:c1:fa:91:47:f3:99:a7:1c:a1:af:
                    4a:81:65:f1:0f:fc:48:03:d2:cd:62:0d:bd:df:ff:
                    d1:60:3e:e4:87:f3:42:e3:9d:66:dd:f7:6a:f6:12:
                    b3:73:58:9d:08:ff:46:2b:b7:f9:5a:ac:74:a9:24:
                    61:76:d4:a4:29:e5:82:5b:20:d3:94:4b:15:6f:23:
                    00:3a:df:ba:e5:7a:b1:e2:77:bf:21:11:0c:4b:81:
                    a1:f3:1f:21:3d:de:1d:50:0e:43:b3:51:d6:03:d7:
                    db:0c:5c:bc:fe:bd:4d:31:62:8d:b0:3a:94:44:6f:
                    e3:10:a9:c6:71:53:f2:98:d5:7b:5d:78:6d:67:51:
                    4c:e7:62:5a:47:f3:17:1c:4e:cd:93:97:2b:de:f1:
                    84:cd:ec:31:1d:92:3d:c6:51:76:07:0c:8c:21:2a:
                    52:f7:2c:b7:d2:00:f6:91:c8:b4:39:14:0e:1b:39:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:83:3C:2D:CE:4E:4D:D2:13:82:02:57:40:15:25:F2:3E:0C:25:52
            X509v3 Authority Key Identifier:
                keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:65:5a:c5:40:8f:81:14:72:98:74:e3:f5:dd:b3:b9:0e:36:
         74:63:1f:07:70:84:49:ea:f0:64:fb:bc:65:b5:cf:eb:c5:32:
         19:e8:a2:4e:e6:67:d9:ee:7e:c6:95:1f:29:4e:46:e4:95:9a:
         24:e4:36:c0:af:c3:dd:36:7b:c3:9d:c9:ac:02:db:e2:7a:f7:
         03:44:18:75:b0:41:1b:c8:1a:01:04:3a:a2:b1:15:e1:ea:21:
         98:32:19:bd:d4:a8:06:a8:80:f7:5c:34:00:95:1b:7d:99:7d:
         f8:16:df:1f:16:e6:d9:75:d8:68:78:88:20:81:fc:4c:27:32:
         24:38:82:7d:eb:92:29:f1:f1:df:a5:cb:a1:ff:f4:6e:3b:be:
         1d:5d:39:aa:99:20:a6:b3:ac:fc:12:87:f8:73:f8:55:1d:a1:
         42:f1:b7:23:8b:be:4a:5a:1c:ed:4f:7a:c8:25:2e:65:dd:14:
         fb:42:2d:d0:bb:b7:2f:28:7d:a7:95:d7:97:fc:31:95:06:fa:
         19:8d:ff:53:fb:95:91:6d:50:69:2f:ba:d4:15:83:a9:c0:f0:
         d1:e1:bc:5f:0c:f0:7c:1a:3c:3c:8d:af:15:5f:66:90:0e:c7:
         52:63:07:ed:6a:96:33:7d:0e:02:27:04:02:4b:b7:1c:a2:0d:
         b8:df:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:59 2026 by rpki-client