This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
File:                     ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json)
Hash identifier:          TZH9O0J6An+kAL9bWqXIW8qVFrUfvMHOj1iAmVERV6c=
Subject key identifier:   24:C8:C7:08:A9:1D:31:1C:DF:1A:C2:C6:4D:BD:90:89:FE:7A:60:2F
Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA
Certificate issuer:       /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
Manifest number:          FD
Signing time:             Sun 25 Jan 2026 04:23:45 +0000
Manifest this update:     Sun 25 Jan 2026 04:23:44 +0000
Manifest next update:     Sun 01 Feb 2026 04:23:44 +0000
Files and hashes:         1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: SnNGItAkQYLRRvWnkEsa0Q6LhAGRlVqt/ZfJYQrJFl4=)
                          2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: WB7ggddHEomyZcx3S7RLh6MvEgEJdGUHo6oxjSeOfsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl
                          rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA
        Validity
            Not Before: Jan 25 04:23:44 2026 GMT
            Not After : Feb  1 04:23:44 2026 GMT
        Subject: CN=69759ad1-d24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:50:9a:5b:54:af:cd:b5:23:73:4b:1d:e4:
                    df:90:b4:63:9d:1e:fd:18:1b:f4:6c:f6:8b:c7:93:
                    f2:80:bb:9d:df:06:31:4f:24:ed:ff:b0:9f:1a:55:
                    c9:f3:a1:68:e0:38:ad:8a:f4:4f:0c:29:06:f2:93:
                    f2:4c:cc:ce:1d:8f:04:ec:d8:fc:61:6a:e2:c5:2b:
                    6b:89:b6:a5:09:f2:8d:19:14:49:c6:26:3d:02:e1:
                    b7:52:01:a5:36:2a:54:22:e6:82:51:51:40:29:e1:
                    95:ac:a4:a5:e3:f0:44:76:db:6e:81:1c:20:d9:97:
                    dc:ba:d8:56:3e:72:45:11:a1:3e:47:d3:5f:ce:b3:
                    3f:0d:7b:56:c9:57:bd:ac:4c:00:36:a7:c4:ef:06:
                    ea:f8:28:1a:5f:82:d8:6e:3e:d6:21:53:08:3b:73:
                    80:2e:7d:4f:ef:6f:76:71:ca:ab:dc:9d:64:8d:d8:
                    52:7b:07:7c:3f:f1:f9:78:1c:df:89:1f:60:80:6d:
                    47:6c:2f:80:42:9c:22:2a:74:f7:ec:72:bf:16:44:
                    32:09:8b:45:43:da:f3:58:52:82:ab:00:5c:5a:33:
                    62:f0:a2:23:cf:58:9f:22:91:1f:de:fa:f3:83:47:
                    bf:a3:bf:5f:0f:0f:81:39:f2:53:e3:b0:0a:96:ac:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:C7:08:A9:1D:31:1C:DF:1A:C2:C6:4D:BD:90:89:FE:7A:60:2F
            X509v3 Authority Key Identifier:
                keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:cc:45:46:16:a7:94:58:b3:02:42:7b:aa:15:45:26:1c:
         ac:fd:e2:a2:4d:60:2d:1b:71:f7:0b:1a:2a:a5:9e:1f:59:56:
         52:10:e0:00:fe:6f:79:b3:ec:99:2e:b0:10:bc:69:ae:4e:92:
         e6:24:62:b7:6f:c6:4c:61:e2:e0:17:a5:ce:d6:c0:9b:f9:37:
         3d:c1:48:7d:13:85:52:b2:d9:d5:e5:60:3d:1c:ea:ef:5b:57:
         09:51:42:93:c4:1b:97:7b:e2:13:a9:fc:d9:72:49:9c:1a:34:
         92:4d:09:c8:7b:6a:e9:76:6c:34:a6:02:60:f1:b8:b0:af:ce:
         7a:a5:fd:47:a6:4d:54:2c:8e:03:f0:00:b6:85:3b:d7:9c:c9:
         83:b5:f8:e6:af:b7:3c:34:de:df:b2:ca:a5:93:1b:27:4b:73:
         0f:45:ae:72:e4:61:af:eb:f5:1c:69:85:9c:d4:54:25:1e:ee:
         88:76:fc:8d:27:ea:1a:93:e3:46:df:f9:90:a7:92:7d:59:b9:
         e6:cd:b6:a7:e5:3f:40:2b:87:2f:ea:56:b4:6b:29:e5:26:23:
         f9:bb:fc:b5:24:84:f1:bb:a0:04:f2:f2:d3:ba:ba:f0:da:e6:
         33:fc:cc:a2:ff:2e:72:df:bd:32:3b:d7:94:5e:9e:32:58:97:
         ea:fd:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:38 2026 by rpki-client