This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
File:                     zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json)
Hash identifier:          f6Dy261ZMEwmYdSx1XtDxue5kaVsBnhm2guJRAhg7r8=
Subject key identifier:   74:F2:90:27:DA:43:B9:F0:9C:0D:B2:BB:EA:73:15:3B:BF:EF:C4:2C
Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78
Certificate issuer:       /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
Certificate serial:       0941
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
Manifest number:          093A
Signing time:             Sat 24 Jan 2026 19:37:32 +0000
Manifest this update:     Sat 24 Jan 2026 19:37:32 +0000
Manifest next update:     Sat 31 Jan 2026 19:37:32 +0000
Files and hashes:         1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: qwHiQCacRxLjYxeFLB8r+Xb5GyrXpcfSw98PNmbX0Pg=)
                          2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: D7lMNLpl3a55d9FcjuAmjfTmqkh4ktfxiUbFr9P5BYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl
                          rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78
        Validity
            Not Before: Jan 24 19:37:32 2026 GMT
            Not After : Jan 31 19:37:32 2026 GMT
        Subject: CN=69751f7c-d7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:af:c0:bd:bf:78:8f:fc:23:ba:e5:a6:1e:
                    d2:30:f2:48:7f:e9:4d:95:9c:44:3f:65:22:4a:84:
                    9f:09:08:8a:79:f2:fa:82:8d:75:f5:0f:0f:c6:a4:
                    b5:c4:f1:2c:3c:2f:13:6a:a7:05:5f:71:b5:c1:65:
                    55:5c:3e:64:5a:6c:ea:94:95:91:bb:99:a2:5a:37:
                    7a:49:ee:5d:0d:92:2c:db:b1:a8:c2:b5:b3:3a:ba:
                    ad:18:19:a1:62:6c:60:b3:4d:c9:05:1d:7c:9d:0d:
                    6f:82:36:18:2b:66:97:bb:c5:d8:49:12:31:62:f0:
                    f9:62:f0:e9:64:fa:e5:94:16:f7:db:fe:0e:8a:86:
                    bd:b1:81:b7:e0:69:2d:3a:67:62:22:48:3b:2a:43:
                    77:fb:99:12:cd:0a:66:86:02:4e:89:07:01:78:ba:
                    75:21:e6:87:2e:d4:1d:ce:d4:80:fa:1f:a7:0a:71:
                    8a:60:1b:0f:aa:63:c3:c6:6c:47:21:63:7b:4e:12:
                    78:95:86:20:0d:84:57:73:0a:51:af:7c:37:a1:32:
                    a1:fb:e5:e9:4f:62:6c:fb:c9:8b:20:0e:fc:fd:56:
                    50:d0:71:bc:18:d4:54:50:93:b6:cc:83:03:ef:87:
                    95:9e:ed:51:dc:e8:d8:90:a2:c3:20:49:46:d1:84:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:90:27:DA:43:B9:F0:9C:0D:B2:BB:EA:73:15:3B:BF:EF:C4:2C
            X509v3 Authority Key Identifier:
                keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:42:53:dd:8e:44:39:45:59:18:87:e1:54:1d:86:cf:13:1b:
         df:fd:1e:89:3e:91:8b:7c:60:d8:d5:74:1e:c7:82:58:8a:ed:
         d9:34:08:1b:48:9f:d8:9f:37:8b:01:e3:52:e6:59:d0:23:82:
         39:80:6c:d4:10:11:c8:68:e6:ad:d9:44:2a:1a:10:94:72:01:
         7d:a0:47:dc:0f:cd:87:55:07:0f:14:3e:7c:ff:e7:3e:34:31:
         f8:f5:b4:74:fa:e1:8f:28:f5:0b:b9:26:df:fd:64:96:95:29:
         81:d0:fe:00:d3:18:d2:0f:dd:61:86:5e:fe:32:94:4c:d0:8c:
         1a:31:fe:41:16:c0:26:d4:02:ca:cd:b3:36:95:27:91:8e:2f:
         9e:20:97:47:d9:9a:59:77:ca:3a:3c:29:4f:61:7b:da:b2:7b:
         cc:df:09:61:e3:61:0f:ab:c6:03:1c:92:2d:31:27:b2:cd:7a:
         3e:2d:45:e0:83:e7:27:bc:63:19:6b:e9:71:9e:59:97:3c:2d:
         08:ba:41:22:0f:17:91:da:15:93:d8:b1:19:ff:0d:12:53:21:
         16:5c:87:9a:ad:99:2f:55:af:51:91:29:3b:f9:71:21:45:c0:
         14:23:f8:23:98:59:86:1f:70:43:89:0e:6d:c2:3a:53:13:61:
         20:a6:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:24 2026 by rpki-client