This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
File:                     ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json)
Hash identifier:          Fw434b+8PUOW7HLCGUwg0PgMxrABxpAGY/TGq8bBrFs=
Subject key identifier:   15:16:17:A2:9B:25:23:A4:C8:7E:05:56:14:3A:43:43:90:D7:7D:21
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Certificate issuer:       /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
Manifest number:          FF
Signing time:             Sun 25 Jan 2026 04:38:38 +0000
Manifest this update:     Sun 25 Jan 2026 04:38:38 +0000
Manifest next update:     Sun 01 Feb 2026 04:38:38 +0000
Files and hashes:         1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 2wna7N+jR8JVKvgpEwwL6J+bmU30WR/MCYUMQa7T5r0=)
                          2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: n+54z7fslNXJ7in5uQGFK69nm0/AotBzwzG1jXO7P88=)
                          3: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: 004AtrOuTefMPuXTTWiollgx+cVpx+/Sf/ZzYxXYME8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
        Validity
            Not Before: Jan 25 04:38:38 2026 GMT
            Not After : Feb  1 04:38:38 2026 GMT
        Subject: CN=69759e4e-1c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:61:0d:39:56:5f:4b:3d:fd:1f:9d:fd:d9:
                    df:2c:be:98:36:a5:31:84:e5:36:c7:46:3a:c9:75:
                    10:61:7b:37:97:1a:d3:26:64:5b:9a:c4:21:db:ee:
                    e9:0f:5c:22:cd:78:b9:12:4c:63:9b:6b:42:a4:2a:
                    5e:ce:bd:d0:6b:03:dc:aa:ef:d4:b4:b9:2b:af:3b:
                    36:de:5f:a8:75:75:30:f9:1a:a9:48:84:8c:89:6c:
                    d1:30:dd:e2:85:af:06:d6:da:ce:13:11:25:22:b3:
                    76:86:ca:5a:64:97:4b:16:ed:79:16:db:48:b2:97:
                    3d:92:ef:6e:64:55:ad:6e:33:90:19:2b:7b:fe:c5:
                    4d:f5:b8:06:ca:e1:b2:4a:1e:06:d4:39:38:49:4a:
                    81:aa:ce:4a:df:ee:ca:27:83:bc:40:f3:89:b5:9e:
                    f6:21:99:89:2d:0c:83:be:c9:e7:b4:71:76:06:75:
                    ce:9a:ba:6d:69:3b:16:9b:de:ea:51:c7:08:29:81:
                    5b:6a:7c:fb:b1:6c:5e:8e:14:e8:a9:85:e7:b7:e1:
                    e2:a9:cf:3a:c2:fb:5e:a0:c7:4a:d2:84:b1:9f:f4:
                    3e:78:b4:b5:e5:a7:22:9b:68:35:45:dd:16:7d:c2:
                    b7:48:17:8f:3a:3a:77:b3:fe:43:72:93:4c:16:f0:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:16:17:A2:9B:25:23:A4:C8:7E:05:56:14:3A:43:43:90:D7:7D:21
            X509v3 Authority Key Identifier:
                keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:01:c3:b1:0c:a2:68:1a:79:8a:8b:ce:c9:dc:d0:e3:be:
         73:e3:57:30:c2:6c:e7:6f:b1:7c:83:74:20:b5:89:e1:69:a6:
         22:8d:48:36:2f:fe:e3:c0:26:5c:20:f0:13:a6:57:e9:54:d0:
         c1:bd:32:31:6a:8f:80:39:4e:c9:3b:89:69:00:6a:d5:30:55:
         c3:4c:3c:d5:6c:05:f9:26:d8:d5:4e:e0:3b:29:0b:0e:22:03:
         ed:35:31:62:02:3f:c3:bf:6e:fa:cf:19:b0:97:a9:10:67:b8:
         87:34:fd:1a:55:51:ed:39:94:3e:73:4a:02:c4:64:ba:9c:65:
         ca:d0:73:71:28:10:0b:9d:4e:ba:a6:aa:fc:f7:d7:ff:1b:73:
         15:ea:3f:00:f2:79:f1:aa:c9:0c:96:2c:16:56:3a:82:46:ab:
         f5:b7:af:0f:64:e8:38:4a:a1:f5:ba:9e:9a:2d:9a:22:50:0f:
         65:63:b6:9d:65:5e:ce:2e:2f:51:12:f9:fb:f6:3a:b5:76:da:
         d4:89:7d:13:60:69:2e:40:76:79:9b:a8:7d:3a:8a:76:99:e8:
         72:e0:4a:df:53:63:3a:8a:82:b4:9d:78:91:d7:c3:80:3c:4a:
         ad:19:46:b0:85:3f:b5:26:16:3c:66:ee:d7:07:0a:39:a0:54:
         1f:89:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:37 2026 by rpki-client