This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File:                     ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier:          zGJOHllr+yJEylQtu4YDgPXO6/XIIMM+aozkJlZD+q0=
Subject key identifier:   62:15:F1:5D:27:C0:07:7B:8F:BE:C6:47:10:04:4A:1A:47:AE:53:82
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer:       /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number:          C7
Signing time:             Fri 23 Jan 2026 05:09:09 +0000
Manifest this update:     Fri 23 Jan 2026 05:09:08 +0000
Manifest next update:     Fri 30 Jan 2026 05:09:08 +0000
Files and hashes:         1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: C1KIfzEPNZqBGTX18j+Eoody6eLh6kx+RKQwNf0Mehw=)
                          2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=)
                          3: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=)
                          4: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: qELOCsisC5h80weRL5N25yw+GcjDtQKTB0QyBuh6P1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
                          rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
        Validity
            Not Before: Jan 23 05:09:08 2026 GMT
            Not After : Jan 30 05:09:08 2026 GMT
        Subject: CN=69730275-5743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:80:6b:a6:91:8d:a7:9e:4c:96:2f:9f:37:73:
                    19:47:7d:b1:4b:2a:bf:52:27:b0:25:38:82:51:27:
                    49:b5:ab:a7:9c:33:f4:bf:0f:6e:84:e9:57:88:95:
                    ef:e0:e5:22:f7:9a:49:e0:70:b9:0d:3a:2e:df:13:
                    93:45:d1:1b:3a:e9:67:27:2f:d6:6c:3f:6e:4f:f1:
                    35:25:e3:07:b8:96:5a:73:51:19:02:1e:22:2d:5b:
                    9d:e9:a5:ea:7f:6f:1a:1d:71:64:ee:f4:94:14:93:
                    ff:a9:a9:5d:1a:53:2b:5a:af:ee:6d:da:4f:56:79:
                    8c:bb:1f:2e:7a:95:d9:fe:af:bc:a8:87:41:94:83:
                    80:d6:59:f5:6c:77:cc:8a:67:95:88:c8:97:eb:1d:
                    d8:86:f5:25:7c:60:9c:f7:47:03:ce:f2:57:dd:f3:
                    bd:f4:70:71:54:1f:0b:44:48:f7:13:a8:f6:02:01:
                    31:da:b5:44:01:35:ff:6b:cd:4d:b5:d6:db:53:a4:
                    8c:6e:e5:06:3c:19:79:b0:a8:a3:a1:4e:7b:ec:b5:
                    d9:9f:0a:16:0e:b1:1e:5f:9d:84:85:ef:28:13:db:
                    07:a1:64:c0:94:e0:9c:e8:24:c7:51:93:87:69:32:
                    ff:ca:07:c3:b7:3e:3c:17:e3:64:de:f9:d1:3f:97:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:15:F1:5D:27:C0:07:7B:8F:BE:C6:47:10:04:4A:1A:47:AE:53:82
            X509v3 Authority Key Identifier:
                keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:9b:56:8a:ee:1e:9c:8b:14:4e:37:32:6d:db:8e:8e:76:
         b9:c0:f9:77:e9:e5:2b:99:13:31:3a:1f:75:46:ea:fb:a5:91:
         6c:78:9c:71:8c:0e:29:61:d0:8b:20:6b:e4:6b:09:7c:ed:35:
         5b:16:65:3c:c9:83:f7:f4:94:11:5e:bb:b5:fc:c9:c7:b6:fd:
         29:b5:0f:c8:38:63:77:e1:26:21:1e:39:0d:41:08:c6:25:46:
         14:c0:00:61:bb:c2:22:b8:8f:b6:03:f0:31:5b:7d:2c:31:05:
         c9:da:8d:65:5a:47:a6:df:0e:40:29:3b:e9:60:50:69:94:90:
         4c:fe:c5:bc:b8:3e:83:4e:50:b2:ac:05:3b:b8:c4:41:54:d1:
         54:3e:2e:fa:3e:52:51:30:bf:b8:90:43:09:20:09:ee:cd:66:
         58:a9:75:e7:89:e0:00:e7:66:6c:2a:19:59:6d:43:09:71:b4:
         4a:f4:72:9b:d3:5d:06:41:f7:1a:69:aa:dc:aa:76:5a:19:38:
         63:93:8a:e0:8c:41:f8:09:a5:3a:ea:aa:84:ec:60:f4:d1:b9:
         ee:cb:10:e1:3a:61:66:dc:f2:ba:be:8c:e0:b8:79:80:c3:c4:
         91:03:5a:bf:21:da:19:9f:48:f1:5b:b4:47:86:39:d6:8a:48:
         9b:01:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:43 2026 by rpki-client