This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
File:                     Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json)
Hash identifier:          7pWIStbVxC+gSH6mE5UnZC+NGXrujd+WwRYKJdhkIds=
Subject key identifier:   54:40:4A:B9:64:64:1B:35:C0:FE:79:05:FE:08:C7:C5:B4:34:D0:89
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Certificate issuer:       /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial:       05E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
Manifest number:          05D4
Signing time:             Sat 24 Jan 2026 22:18:08 +0000
Manifest this update:     Sat 24 Jan 2026 22:18:08 +0000
Manifest next update:     Sat 31 Jan 2026 22:18:08 +0000
Files and hashes:         1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: VgB1oP26Ep4V5WW9vOkfK5TURYMjnQ8O9h5j4VxUvvQ=)
                          2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: NdGdprVspyCu7ooBV/jtWTcZH1ps5ycDugcPtORVorA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
        Validity
            Not Before: Jan 24 22:18:08 2026 GMT
            Not After : Jan 31 22:18:08 2026 GMT
        Subject: CN=69754520-8d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:99:98:c9:f9:c7:05:7e:a6:67:2d:a5:f2:
                    f9:a7:1e:1d:f5:51:c7:5e:a5:e7:2c:90:a2:14:2a:
                    ab:95:35:4e:48:14:f3:eb:a1:db:d4:05:4a:4f:9e:
                    18:32:42:85:90:a9:7a:0f:e1:9b:0b:31:de:9d:6a:
                    be:d3:4b:a3:29:3d:b8:e1:bc:6c:ee:e6:83:aa:53:
                    2c:56:d2:d9:66:83:fd:48:65:c0:00:ad:3f:51:f5:
                    6f:d7:1a:43:1f:c9:df:07:7a:32:26:88:30:ad:5a:
                    d5:9b:e0:9d:b9:fd:55:16:43:ba:7d:eb:35:07:89:
                    06:af:07:40:54:d7:21:5f:4e:ae:0d:11:59:64:78:
                    a3:c9:00:8f:b1:8f:f4:90:ef:71:d8:43:61:41:c0:
                    11:bd:4a:32:b6:2c:24:27:3a:f8:86:af:85:be:31:
                    55:3c:c3:b7:ff:3a:57:0b:6c:fb:94:f6:66:10:49:
                    f9:02:3c:57:fd:4a:28:c0:14:12:1c:c9:55:9a:5a:
                    00:e2:84:1c:99:c7:92:ba:bf:0c:63:bf:16:cc:4c:
                    0a:c0:4d:67:ec:08:12:46:1f:16:77:21:f4:08:89:
                    1f:dc:06:62:fd:d3:6a:d8:a2:55:c1:a2:71:56:d2:
                    25:df:66:f4:5e:4b:45:a2:77:7e:d1:3c:34:0f:a7:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:4A:B9:64:64:1B:35:C0:FE:79:05:FE:08:C7:C5:B4:34:D0:89
            X509v3 Authority Key Identifier:
                keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7e:1c:a2:d7:c8:ab:c2:2c:96:bd:f6:b8:c8:b0:f5:78:00:
         73:e2:bc:38:92:be:bb:d0:44:83:a0:f2:0b:b8:3f:cb:08:30:
         0b:74:1c:0f:2a:60:65:6c:f9:35:40:da:e3:99:01:55:69:d7:
         a4:ca:5e:c9:c1:d6:11:71:86:1d:1b:4e:84:bc:09:b7:73:b2:
         6f:21:5e:82:c3:92:30:70:71:34:a4:c0:39:39:ef:03:4b:2d:
         ab:70:1e:fb:7c:b8:69:b6:df:6f:d4:45:60:46:0b:c7:c8:be:
         f5:a4:66:bc:47:90:95:e4:2d:23:b2:99:e8:7e:a3:7e:45:96:
         72:86:61:b5:83:d8:1c:ed:68:95:a8:76:31:f4:e6:b8:54:7e:
         8f:0a:41:0e:76:c6:50:20:75:dd:c1:16:f4:05:83:1c:a1:a3:
         ea:fd:2c:f2:83:ed:dd:02:44:89:92:f3:70:6c:b9:f6:c2:01:
         ce:70:0d:7d:0d:ae:76:29:33:fc:f7:c5:04:6a:1b:23:d5:fa:
         7b:98:66:04:b6:d2:bf:4f:14:32:96:67:47:57:3c:ab:32:36:
         a9:62:f9:95:bc:d0:d1:6d:bd:b2:ff:72:c5:59:33:b2:e3:e9:
         7e:44:b6:1c:f5:f3:8b:d7:35:f9:2e:d8:80:f3:8f:a3:46:13:
         7d:53:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:11 2026 by rpki-client