This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
File:                     ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json)
Hash identifier:          5W/DmQu5MlOqpvDdK7QiGPMSh7wB+vqXePzOONRavoc=
Subject key identifier:   77:37:E3:D7:C8:E4:35:12:8A:82:17:6A:71:73:5E:37:15:AE:FC:68
Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3
Certificate issuer:       /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
Certificate serial:       1200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
Manifest number:          11F7
Signing time:             Sat 24 Jan 2026 16:53:05 +0000
Manifest this update:     Sat 24 Jan 2026 16:53:05 +0000
Manifest next update:     Sat 31 Jan 2026 16:53:05 +0000
Files and hashes:         1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: +0WJCmwyz9INa01C7lAJ1smmYXmaraFVFy8M+bGz6J8=)
                          2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4608 (0x1200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3
        Validity
            Not Before: Jan 24 16:53:05 2026 GMT
            Not After : Jan 31 16:53:05 2026 GMT
        Subject: CN=6974f8f1-c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c5:92:e8:01:68:78:65:4c:ac:28:92:25:d5:
                    d1:6f:90:a8:2e:2c:ed:fc:17:10:d0:90:ee:45:5c:
                    68:d7:f3:37:3b:52:fd:8a:f6:51:85:23:53:84:e2:
                    3d:3c:0f:09:1e:57:62:89:83:7c:26:13:2e:cb:84:
                    65:b3:77:f9:67:dd:3e:79:9a:fd:9b:1d:cd:14:67:
                    bd:48:21:a1:48:ab:e7:43:35:15:19:08:5e:dc:fe:
                    e9:f8:f0:51:b6:47:64:dc:07:92:2f:52:fa:7d:ee:
                    db:d7:1d:21:9d:0a:73:7d:2e:a8:5d:c2:99:e1:31:
                    ac:44:ff:00:29:df:3f:a0:cc:75:6d:59:ae:42:aa:
                    95:75:80:54:b2:cb:87:03:e3:be:bb:44:84:36:5e:
                    1c:68:63:6d:bc:d1:da:66:4c:45:ef:f2:06:9c:2c:
                    f9:a0:c3:e3:b8:27:37:4b:45:8d:dd:47:07:ee:96:
                    12:7a:cb:f3:9f:4e:0c:68:26:5f:14:13:de:f3:83:
                    b0:70:87:a3:36:8c:85:a2:ce:bb:52:da:24:59:97:
                    56:64:f6:cb:5f:54:e3:b4:63:91:ab:42:59:dc:f5:
                    ac:8b:bd:29:b2:4c:6f:8c:6e:eb:1b:c2:1e:72:f3:
                    d7:17:92:af:fe:01:04:05:63:d9:c2:64:ae:ee:be:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:E3:D7:C8:E4:35:12:8A:82:17:6A:71:73:5E:37:15:AE:FC:68
            X509v3 Authority Key Identifier:
                keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:f4:d8:56:69:73:99:f7:bb:d1:66:fc:3c:3e:d4:ae:c6:
         e8:df:a5:83:59:e4:a0:07:66:74:1e:e7:75:ec:ab:42:35:da:
         05:61:79:b6:93:d9:1a:8d:d9:2d:b6:59:6f:5f:65:7b:3f:9c:
         a8:47:59:0f:25:ea:46:f6:78:fb:49:f0:01:85:9e:de:f8:e6:
         2b:73:de:d8:47:f4:17:67:61:77:ca:ba:38:03:06:ba:71:8f:
         1d:8b:f4:b7:5c:17:72:39:6b:d0:9c:9c:51:be:d4:21:18:f1:
         59:5f:cf:8e:ca:eb:fe:10:7c:4c:bf:87:cb:ec:e2:84:bd:5d:
         35:05:72:f2:60:eb:43:29:d9:99:6b:56:3f:ea:60:e5:97:44:
         60:b1:25:e1:98:b8:ee:04:31:86:0e:d1:22:79:9b:95:ad:42:
         41:00:38:b4:4d:8f:1b:24:c7:a6:01:87:49:10:d4:76:e3:3b:
         d2:92:b3:ce:e1:65:53:f7:61:f8:f5:50:18:a9:d7:1b:2c:4c:
         ad:5a:be:ab:db:06:e6:54:6a:7d:8b:e9:71:14:42:50:f0:e1:
         e3:12:10:4b:c9:76:6a:9d:97:34:ac:05:8a:ed:99:a4:b0:bd:
         a2:9c:72:37:27:3a:c1:44:99:fe:08:d0:d6:9d:62:ef:7f:94:
         9f:fa:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:17 2026 by rpki-client