This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
File:                     ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json)
Hash identifier:          hxb4qlgX2FxWyP8jrHrWomQZBkbeWIYNG1AH5aiQbYI=
Subject key identifier:   AF:31:85:FE:F5:4F:89:48:66:EB:91:12:E5:E3:1E:14:5B:02:3D:0E
Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81
Certificate issuer:       /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
Certificate serial:       1B5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
Manifest number:          A12A
Signing time:             Sat 24 Jan 2026 14:28:56 +0000
Manifest this update:     Sat 24 Jan 2026 14:28:56 +0000
Manifest next update:     Sat 31 Jan 2026 14:28:56 +0000
Files and hashes:         1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: +MubioB4uMm0SumcxtiSr0b1pELHVHUzLtnm+nzUfLY=)
                          2: 191363A69DD911EC99D91668C4F9AE02.roa (hash: oqniAucPfqcKV0mTFTmt9sxkwi/yyX2GOXb0nYNRsyI=)
                          3: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: SpN5g9M2rsSW+Cra37fKcK/lk5XqYbPAMh8S4vUS9qk=)
                          4: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: +Q2D0d9yEIcvHWqL458RmFQjgHnoWa/Nyf3wOjdRqJY=)
                          5: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: Y+xehgtewaeOdOL6PowHHRPVgAd4mQJAADuq74in7FA=)
                          6: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: Y+JgutBZqKB0sr/67XUkEfaEMyqBwPZIYt+9Yv44r5c=)
                          7: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: Dnw6VZCydK3JoKDSOzotlEvfgmRpxLVN7ezEA2ZyyGo=)
                          8: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: U9RF+JaWcsKZTr1DEGw1Y5hTdB+oWxy9sRXTz5ZgIuo=)
                          9: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: oMF/P2hGXRHcLkAXgbmeUw5lcthqUMWdcFQRgDGmw2Q=)
                          10: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: RYynr8uizf4mxXQD/bYs58a0i9OmwI4vdpj7nHmjiJU=)
                          11: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc=)
                          12: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 14:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7003 (0x1b5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81
        Validity
            Not Before: Jan 24 14:28:56 2026 GMT
            Not After : Jan 31 14:28:56 2026 GMT
        Subject: CN=6974d728-6acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:ee:b4:5f:53:6d:a2:94:ed:4b:02:cf:82:
                    07:db:20:64:86:a0:a9:59:32:2c:a1:c2:8e:9e:8b:
                    ca:9e:31:35:7b:b7:a0:50:1c:7b:cd:9b:5c:21:6b:
                    1d:ca:03:62:bf:d4:87:6b:c5:ac:8a:6a:b7:27:dd:
                    bd:a7:de:05:d4:64:b7:a3:42:02:11:87:08:18:85:
                    30:10:fb:9f:5b:2a:76:79:4b:d7:0f:0f:ea:9f:02:
                    17:24:cd:c7:11:c1:21:67:3d:83:82:ba:16:82:04:
                    5d:51:dd:a8:9e:e5:81:29:24:c4:92:2b:a3:95:21:
                    a1:76:ce:f5:e5:96:9e:6d:ac:cf:d4:0e:26:04:1d:
                    42:5e:27:77:64:6b:31:99:d1:6a:df:46:50:d2:5f:
                    a9:e2:4f:2d:62:cd:b2:9c:06:d7:41:67:be:69:9e:
                    a6:6c:e0:78:19:92:30:f1:c6:74:54:b1:f0:d9:a8:
                    76:5d:1e:1f:d4:c9:25:ce:ae:1a:a3:0a:84:68:9c:
                    2e:41:d5:6c:6c:a2:4b:1a:e8:c5:6b:93:d0:50:1c:
                    18:e5:d5:73:8a:85:07:12:a6:a2:41:81:81:2f:f3:
                    c9:f7:f0:7b:02:d6:6d:6a:a9:24:9c:59:0c:b3:7d:
                    66:52:20:e1:65:08:df:ff:0b:93:4f:09:41:b8:53:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:31:85:FE:F5:4F:89:48:66:EB:91:12:E5:E3:1E:14:5B:02:3D:0E
            X509v3 Authority Key Identifier:
                keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:4d:ac:54:01:de:dd:a6:7e:59:dc:1b:60:93:49:a2:94:
         d8:98:97:a7:ad:73:b0:ac:25:69:39:b9:60:99:3e:db:4a:ac:
         d9:60:0a:f4:8e:0d:2a:f1:fe:68:01:5b:8f:8f:96:ad:50:58:
         04:57:66:c8:40:5e:c6:8f:33:e3:8a:c6:58:62:8a:6a:59:b6:
         6d:5f:74:00:7f:84:2e:9e:95:6e:12:ad:23:75:34:d0:94:8f:
         e7:18:85:67:d6:cb:7a:ab:3c:8e:b7:9d:5f:f2:62:29:f2:d5:
         bb:f7:3a:39:1f:46:06:d8:5d:aa:9d:e7:69:e0:38:67:a9:d0:
         02:7b:ec:82:0b:5a:0c:8e:c5:1b:d3:a6:43:27:be:1f:b7:16:
         8e:7e:e9:ad:42:90:8d:31:a0:5c:4c:49:38:d7:38:17:f0:1b:
         7b:70:4a:dd:e4:99:be:50:6c:83:04:08:c2:b8:4e:5e:db:14:
         f3:b3:f8:68:4f:e6:7c:cf:dc:93:ab:67:4f:c2:a9:7f:67:2f:
         ef:9b:23:9a:f1:48:12:bd:d8:3d:7a:0e:e5:21:ab:6b:d2:80:
         21:d3:27:22:a3:88:cb:cb:8f:47:61:61:36:ee:80:18:28:aa:
         ff:b4:bb:e6:b5:b9:ad:06:ea:df:b7:fa:97:eb:77:ad:2c:3f:
         60:75:de:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD
N0RFQzRCODEwHhcNMjYwMTI0MTQyODU2WhcNMjYwMTMxMTQyODU2WjAYMRYwFAYD
VQQDDA02OTc0ZDcyOC02YWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqrutF9TbaKU7UsCz4IH2yBkhqCpWTIsocKOnovKnjE1e7egUBx7zZtcIWsd
ygNiv9SHa8Wsimq3J929p94F1GS3o0ICEYcIGIUwEPufWyp2eUvXDw/qnwIXJM3H
EcEhZz2DgroWggRdUd2onuWBKSTEkiujlSGhds715ZaebazP1A4mBB1CXid3ZGsx
mdFq30ZQ0l+p4k8tYs2ynAbXQWe+aZ6mbOB4GZIw8cZ0VLHw2ah2XR4f1Mklzq4a
owqEaJwuQdVsbKJLGujFa5PQUBwY5dVzioUHEqaiQYGBL/PJ9/B7AtZtaqkknFkM
s31mUiDhZQjf/wuTTwlBuFOjwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8xhf71
T4lIZuuREuXjHhRbAj0OMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE
ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY
T3pCMUFIMmxNM3JIM3NTNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPMU2sVAHe3aZ+WdwbYJNJopTYmJenrXOwrCVpOblgmT7bSqzZYAr0
jg0q8f5oAVuPj5atUFgEV2bIQF7GjzPjisZYYopqWbZtX3QAf4QunpVuEq0jdTTQ
lI/nGIVn1st6qzyOt51f8mIp8tW79zo5H0YG2F2qnedp4DhnqdACe+yCC1oMjsUb
06ZDJ74ftxaOfumtQpCNMaBcTEk41zgX8Bt7cErd5Jm+UGyDBAjCuE5e2xTzs/ho
T+Z8z9yTq2dPwql/Zy/vmyOa8UgSvdg9eg7lIatr0oAh0ycio4jLy49HYWE27oAY
KKr/tLvmtbmtBurft/qX63etLD9gdd7u
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:53 2026 by rpki-client