This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
File:                     zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json)
Hash identifier:          5Ul50VZYbbZYczLiMZ/9M0nI1BdrAUR9KtAaLLAXnGI=
Subject key identifier:   31:87:85:9C:37:39:57:DD:F9:B5:E1:BE:41:03:D5:3B:C6:29:17:AF
Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5
Certificate issuer:       /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
Certificate serial:       04B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
Manifest number:          04A9
Signing time:             Sat 24 Jan 2026 23:12:35 +0000
Manifest this update:     Sat 24 Jan 2026 23:12:35 +0000
Manifest next update:     Sat 31 Jan 2026 23:12:35 +0000
Files and hashes:         1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: KGyCKHbpvzgJQbI5AKlSTomYBCPrGKU0Xhau000vx1U=)
                          2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl
                          rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1201 (0x4b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5
        Validity
            Not Before: Jan 24 23:12:35 2026 GMT
            Not After : Jan 31 23:12:35 2026 GMT
        Subject: CN=697551e3-4b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:23:0f:97:ef:b5:28:3e:f1:dd:cd:48:32:
                    40:88:42:98:87:72:e4:43:ba:bd:fe:a6:45:7a:1e:
                    10:34:09:4e:d3:b7:5e:b3:3f:b9:71:51:73:bf:e0:
                    ed:79:42:8e:d8:e9:40:46:56:0c:2d:9d:38:30:8c:
                    d9:0f:a8:20:89:22:ee:ab:54:a6:ab:c2:f6:fc:f8:
                    75:44:84:50:16:59:04:ae:ae:21:37:c5:1e:e0:d7:
                    6d:c6:44:ac:01:34:4d:19:c9:3b:82:0d:c5:da:1a:
                    81:7e:ca:92:90:1c:97:bf:c5:ff:d7:dc:e3:4e:01:
                    c6:b1:c8:35:6e:46:6f:df:f7:7d:4e:70:c1:fe:6d:
                    da:fa:98:66:70:f5:55:40:75:da:3a:83:d4:1a:c3:
                    b8:fb:2a:81:3b:6a:8b:24:d4:a7:06:d2:e4:10:1d:
                    06:04:16:b4:03:8f:2d:78:68:71:e6:1e:25:d4:60:
                    27:c8:76:5f:15:d3:9f:9a:70:a5:f0:3f:ff:3d:bb:
                    e5:31:32:b7:00:09:25:e9:1c:ef:e1:bd:24:2b:a0:
                    42:08:fa:f6:55:0d:d6:7d:08:30:46:29:83:5f:60:
                    8c:bf:3f:69:bd:7c:eb:3c:28:f4:21:8f:45:4e:6d:
                    1b:f1:ab:e9:9f:75:a5:dd:65:2f:b2:ae:31:3b:63:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:87:85:9C:37:39:57:DD:F9:B5:E1:BE:41:03:D5:3B:C6:29:17:AF
            X509v3 Authority Key Identifier:
                keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:79:88:f3:16:8b:52:8d:26:52:36:0b:4d:a9:6e:02:08:76:
         95:57:e9:c0:80:1f:f5:d7:dc:a8:30:d0:8a:14:b0:a2:10:5e:
         14:bd:fc:1d:08:6f:4e:1a:7b:43:53:1d:db:be:69:b6:19:37:
         3f:45:3c:37:8d:05:97:9e:6b:9c:fd:fc:3b:49:ab:fe:73:96:
         b9:ab:34:b3:ba:4f:47:6b:6a:b1:b4:7b:93:94:dc:f1:64:c3:
         b8:c4:bd:51:e8:f3:3a:ab:e8:1a:f2:40:e2:4d:a3:fb:b0:68:
         25:00:27:40:74:e5:c4:fa:49:af:3f:79:eb:dc:71:39:fa:37:
         c2:a2:d4:ac:f9:13:b8:c0:25:dd:41:9c:62:95:15:d2:78:5b:
         ca:a2:e2:dd:ac:3f:15:5c:76:ae:44:c3:16:3b:70:fc:d0:c1:
         4a:85:42:54:eb:49:a2:be:38:2b:8c:14:40:c5:84:24:af:90:
         f5:a9:50:31:33:b5:e3:cd:1c:50:89:95:40:c0:22:5b:f0:1f:
         50:b4:65:ee:79:7b:cb:ea:2a:0b:e9:74:33:ce:2e:91:5a:dd:
         7b:74:4c:a4:b5:d8:11:f7:41:d3:bd:65:83:64:3c:c4:85:81:
         2b:ba:bd:88:6c:6a:90:da:a2:80:1f:a4:8d:ab:09:71:ac:97:
         d0:b9:79:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:46 2026 by rpki-client