This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
File:                     ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json)
Hash identifier:          ephlWPIqELUyIiwPQYASVc1lnOH+BLeL+WXjIPqFaoE=
Subject key identifier:   D5:A8:87:22:26:21:EB:1B:15:C6:CA:EC:4B:8C:ED:D0:66:CF:E4:CA
Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB
Certificate issuer:       /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
Certificate serial:       089B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
Manifest number:          0881
Signing time:             Sat 24 Jan 2026 20:03:23 +0000
Manifest this update:     Sat 24 Jan 2026 20:03:22 +0000
Manifest next update:     Sat 31 Jan 2026 20:03:22 +0000
Files and hashes:         1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: RWgZ3Vk5D76bZ0XLtCyYt0oUqu16Vp+N0eLeuxL7S8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB
        Validity
            Not Before: Jan 24 20:03:22 2026 GMT
            Not After : Jan 31 20:03:22 2026 GMT
        Subject: CN=6975258b-3007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:43:7f:9a:5b:79:e3:25:52:0d:d9:01:81:
                    2e:7d:91:0c:18:94:ad:6c:6b:db:7d:25:58:ca:7b:
                    6f:4e:b6:24:58:71:cb:ab:a7:1f:e5:e9:a9:e4:ac:
                    09:60:9c:32:0f:d9:f1:f3:cd:ac:43:3c:c4:5a:77:
                    aa:08:99:e6:e8:ed:12:86:60:1f:1b:ac:f7:50:c9:
                    ae:96:4c:07:89:69:44:2d:20:da:2f:d6:e3:95:7b:
                    7b:d9:4c:c0:a6:57:13:34:b1:2d:c0:c6:87:73:20:
                    09:13:44:ad:6a:43:37:8a:cb:a4:98:38:a1:e2:f6:
                    f7:6a:88:b3:4b:1f:30:92:be:33:c1:0d:65:40:8a:
                    67:7c:2a:19:ef:8e:91:83:33:0e:9f:96:86:ee:8b:
                    61:6f:43:fc:4d:46:66:d2:2b:91:34:65:d5:ac:03:
                    06:37:53:ad:5a:4a:0e:b9:98:c8:40:7d:ce:04:ad:
                    a9:a3:65:3f:8d:99:be:2e:cf:60:c9:2c:3b:7a:a0:
                    93:bc:79:7d:c3:e0:94:ac:a1:3a:76:4b:99:eb:d4:
                    39:d5:ac:c0:02:62:68:44:7b:28:30:fb:9e:23:95:
                    9a:82:65:b9:e8:0e:f9:31:71:a3:61:5e:db:af:e8:
                    3e:42:7d:31:20:3e:42:c0:bb:fb:f8:35:db:70:ec:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A8:87:22:26:21:EB:1B:15:C6:CA:EC:4B:8C:ED:D0:66:CF:E4:CA
            X509v3 Authority Key Identifier:
                keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:a9:1b:b4:f3:b7:ee:e8:4c:2e:1b:69:49:a1:49:48:da:
         c5:b1:22:4a:29:98:da:6a:60:f3:96:be:18:67:ed:85:60:01:
         94:d1:f3:50:50:dc:13:d4:7d:2f:af:77:64:6a:9a:40:b1:56:
         ee:fd:18:a9:68:3a:a7:33:a1:92:08:7c:41:42:90:7e:a1:f3:
         23:ad:26:39:38:7a:a9:d7:c1:96:b2:a2:d6:2f:b5:4f:95:0a:
         7d:9e:eb:84:9a:27:34:e4:96:7c:35:7f:53:79:10:11:9f:1d:
         bc:a4:92:3f:5f:ba:dd:28:43:5a:38:e3:67:35:f7:ab:b4:4b:
         bb:50:ac:3a:b9:40:c2:09:c8:f8:d1:4b:cd:f5:63:1f:c1:78:
         0a:73:eb:b8:4f:36:7d:50:42:00:0d:2c:4d:d4:60:87:bb:ca:
         f0:b5:c6:3b:4c:74:39:a3:fb:38:83:0e:3d:36:89:23:14:c1:
         0b:a5:50:af:2e:74:30:02:0c:51:ad:6a:d7:61:32:d2:93:d2:
         ee:fa:9c:d4:ec:f8:21:4e:ee:6f:70:32:ed:a7:c8:8c:26:76:
         4b:e7:fa:a9:49:98:87:ab:27:a8:7b:cc:2a:65:e9:56:37:6e:
         12:97:b1:7c:f5:be:59:dc:45:7f:32:c3:11:57:2c:90:83:18:
         4d:c1:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:32 2026 by rpki-client