This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
File:                     Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft (raw, json)
Hash identifier:          WP0rQQEJMfSbeTn8dS3q2ViYSkQB15FzhpVcij5R/sM=
Subject key identifier:   75:C0:A7:D7:39:50:90:00:87:82:A9:EB:09:16:BB:95:60:79:C0:71
Authority key identifier: 67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0
Certificate issuer:       /CN=A91DA13E/serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
Certificate serial:       0827
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
Manifest number:          081E
Signing time:             Sat 24 Jan 2026 20:20:58 +0000
Manifest this update:     Sat 24 Jan 2026 20:20:58 +0000
Manifest next update:     Sat 31 Jan 2026 20:20:58 +0000
Files and hashes:         1: Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl (hash: kyQpLBr6bggX7aaE4ufhjQyc+fkoqmkid5yTdDNDOUA=)
                          2: 28D471BA06B611EBBBFD6B2CC4F9AE02.roa (hash: qTxqjLafp1eHZVEFc07aPaguHdK/MmmTaVfaOIj+sXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl
                          rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087 (0x827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA13E, serialNumber=67F3B9FAAA10D20CB017F07FCC9A154D88B663A0
        Validity
            Not Before: Jan 24 20:20:58 2026 GMT
            Not After : Jan 31 20:20:58 2026 GMT
        Subject: CN=697529aa-adb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:8d:23:a1:f9:74:31:04:cb:f8:75:87:4a:
                    77:16:34:9e:87:0b:0d:6c:2a:6d:df:26:57:d4:69:
                    72:26:05:b2:e1:45:da:0e:e5:2f:69:4a:5c:b5:b9:
                    b7:02:69:43:f6:0d:27:b0:65:ea:7f:31:d9:32:e6:
                    b6:42:1c:8b:16:8f:0e:ad:4d:bb:30:c8:46:7a:b4:
                    ef:03:fb:43:2b:be:26:66:7e:bf:35:f4:ff:26:68:
                    07:73:f5:4d:ee:73:46:7e:d6:ee:06:3d:6d:ed:b3:
                    a9:62:ca:3c:2f:52:c1:71:16:75:de:43:42:a3:1d:
                    30:d7:eb:5e:97:1c:35:70:26:17:f5:03:d0:b1:f8:
                    54:e3:2d:6d:f9:c9:63:fc:d6:d1:86:7d:19:16:21:
                    2f:e4:98:10:7d:4b:3a:2f:d8:35:fe:07:af:8c:24:
                    b7:6e:48:3a:9c:1c:84:4a:2e:a1:94:29:00:cd:22:
                    2e:e7:a7:fe:b9:e9:3a:f0:98:31:14:6e:01:09:3a:
                    f0:08:0e:5f:d3:e4:90:9d:9f:64:b1:e4:58:51:24:
                    98:c4:b1:61:f4:1b:72:23:d1:ba:8a:36:97:5a:89:
                    78:4d:a2:5c:8a:30:c1:e1:f7:22:cd:45:51:0b:64:
                    39:d1:15:f2:0b:cf:3a:6f:d1:1d:7d:55:74:28:a1:
                    23:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:A7:D7:39:50:90:00:87:82:A9:EB:09:16:BB:95:60:79:C0:71
            X509v3 Authority Key Identifier:
                keyid:67:F3:B9:FA:AA:10:D2:0C:B0:17:F0:7F:CC:9A:15:4D:88:B6:63:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/4E8531CA06B511EB9372D32BC4F9AE02/Z_O5-qoQ0gywF_B_zJoVTYi2Y6A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:30:24:fb:bc:08:88:51:ea:f8:26:0a:71:ef:b9:0d:2c:
         4b:22:f5:56:65:19:7b:6c:47:8e:5d:4e:a1:8c:6a:3e:7d:ed:
         12:f8:66:ff:f6:f7:b8:87:1d:3a:72:ad:76:f2:98:2e:2f:4d:
         0f:c6:d3:14:67:c6:20:a8:b3:c4:a0:53:bb:ce:fe:cd:c0:a6:
         6c:48:c4:61:2a:40:1a:dd:14:20:78:fc:b7:14:fa:e2:2d:74:
         e5:62:94:7e:55:bc:5d:68:63:1a:a5:db:84:60:95:17:5e:a2:
         24:e8:85:bf:b8:ae:5e:54:8e:3e:a6:fd:99:29:67:46:bc:66:
         4f:1f:5f:a2:90:fd:c0:62:09:d4:d8:c7:49:96:52:d8:5b:31:
         4a:36:15:15:9b:1a:54:22:ad:01:ca:ad:5f:fa:eb:0e:0b:74:
         1a:b1:8f:57:98:24:52:5b:23:99:4f:89:e4:42:04:72:7e:e1:
         8c:ed:4a:36:3c:bc:6a:6a:fb:ed:57:c7:93:78:26:0c:fe:d7:
         7b:d1:c1:70:2e:45:d7:8d:99:93:63:d7:f1:22:a2:49:bd:20:
         89:a9:a4:ad:33:37:3e:14:92:eb:b6:01:6b:7f:69:fd:ca:76:
         90:ad:49:5a:81:ef:11:a0:e9:83:17:21:12:f0:17:d7:9a:10:
         18:82:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:39:42 2026 by rpki-client