This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
File:                     ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json)
Hash identifier:          wbo938CYfevxWcmTL7vAo+xT9Yg56XCelSYNjxFvYow=
Subject key identifier:   E0:9F:10:BA:F4:2F:06:19:44:CA:75:DB:77:3C:A2:13:26:06:CB:43
Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14
Certificate issuer:       /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
Certificate serial:       E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
Manifest number:          E4
Signing time:             Fri 23 Jan 2026 04:37:00 +0000
Manifest this update:     Fri 23 Jan 2026 04:37:00 +0000
Manifest next update:     Fri 30 Jan 2026 04:37:00 +0000
Files and hashes:         1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: O8PIglhsgBP+Ij63QVlpYqVCuu0587czFOSXvRSh7CI=)
                          2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: 0M5YhxGhV5QHRGKOQlvw9XsWvMIjTk3A7Z1MV3xW494=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 04:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814
        Validity
            Not Before: Jan 23 04:37:00 2026 GMT
            Not After : Jan 30 04:37:00 2026 GMT
        Subject: CN=6972faec-147b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:44:57:d2:38:b0:0d:3a:ef:a3:be:3b:21:
                    8e:3e:69:88:51:b0:d7:0d:61:c4:89:f4:ac:08:c7:
                    1a:5a:d6:d6:17:90:1f:62:c5:d1:8a:b2:bd:e6:9c:
                    ec:73:fc:fc:ca:58:d4:42:1e:ee:f7:5d:b9:00:9e:
                    a6:78:3e:e4:64:29:50:e0:41:ae:4e:50:5c:16:da:
                    fa:f9:b0:a3:c1:ba:9f:06:85:b6:6c:cc:4a:5b:77:
                    a1:9f:8d:e9:d3:95:0b:f6:5c:33:72:54:49:55:57:
                    12:e4:88:f2:0c:2e:23:17:ce:16:67:61:9f:05:c2:
                    a8:09:1e:7c:a7:d1:8c:3f:5d:e5:46:9c:6a:0e:16:
                    86:dd:da:6c:df:d1:44:0b:b5:e4:b6:8a:ec:18:ca:
                    f5:ec:ce:8d:60:a8:6f:de:44:7d:e6:a7:13:ff:31:
                    90:eb:d4:78:6e:9c:bf:bd:a9:80:b8:18:5e:1c:98:
                    c6:32:89:2c:1d:54:12:12:b2:de:ce:e0:91:a5:fc:
                    9b:0f:21:fe:61:a7:09:ca:7e:c4:6b:fc:a5:8e:59:
                    4a:b7:7f:0d:cb:ec:7c:30:62:10:b1:03:89:4e:a6:
                    d5:7e:d8:80:4d:ae:07:60:72:20:94:35:88:83:a6:
                    f7:08:4c:f4:09:da:52:e6:62:d4:f8:37:85:c6:9a:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:10:BA:F4:2F:06:19:44:CA:75:DB:77:3C:A2:13:26:06:CB:43
            X509v3 Authority Key Identifier:
                keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0c:46:86:15:3b:43:6e:ba:1a:72:26:04:38:f7:32:76:bd:
         96:f2:04:c2:23:b3:4f:9e:b0:4b:0d:84:18:34:9c:aa:1f:41:
         f3:48:35:35:5b:90:7a:19:73:ad:c7:f7:2a:63:49:5e:c0:37:
         19:32:ee:f5:58:8d:a7:d2:2c:46:ac:72:b5:60:b7:04:40:77:
         d6:ce:7a:45:13:3d:25:f7:ab:2b:fc:d4:b2:a6:2c:4f:de:c4:
         2c:27:96:b0:8d:09:ae:72:a2:e4:6e:d3:5a:63:0d:49:94:b7:
         0d:f5:32:1f:af:58:57:0f:df:c1:bf:d5:15:8f:0f:dc:a8:af:
         0b:2d:46:47:f8:50:ca:49:48:1d:32:32:8e:40:88:1f:94:44:
         3b:c8:e7:ef:d7:9d:67:fb:f3:45:cc:ff:f5:ef:32:fb:de:d7:
         f3:22:81:0d:6a:a5:69:04:0e:32:73:c7:fc:7a:3f:1b:c4:f6:
         19:b0:12:35:b6:d8:91:f1:47:d0:19:04:d0:e9:78:ac:ed:dd:
         7a:ea:7c:9f:ff:9e:33:08:ea:60:f3:57:1f:0e:78:88:bd:e3:
         6c:89:8d:9e:0a:b3:6b:cd:0e:2b:2d:82:3f:40:6b:f4:b3:1c:
         40:d4:9e:f5:93:13:66:5a:6c:10:fe:bb:27:95:5e:f3:b5:15:
         5c:bf:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:01 2026 by rpki-client