This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
File:                     Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json)
Hash identifier:          GTcXW/P20k4TAXe61xsB7MEBcof2KhSW1ADMzdNXdlE=
Subject key identifier:   A4:35:3A:6B:FA:FC:64:C4:33:8E:DD:C2:73:83:41:35:4B:06:A2:F0
Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D
Certificate issuer:       /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
Manifest number:          0232
Signing time:             Sun 25 Jan 2026 01:20:16 +0000
Manifest this update:     Sun 25 Jan 2026 01:20:16 +0000
Manifest next update:     Sun 01 Feb 2026 01:20:16 +0000
Files and hashes:         1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: ljp2r6LVquO0S91IfkTyPe7q+gVD9dYM7Lyoz8mA/oI=)
                          2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 5MB2PDcakDg/26VL0TUZlY6MMrD+mZ34XPyyIZou81c=)
                          3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: VApl5gOnxtdCywBPMR0dXxKkqk3t+bnPo30E9g9b6bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D
        Validity
            Not Before: Jan 25 01:20:16 2026 GMT
            Not After : Feb  1 01:20:16 2026 GMT
        Subject: CN=69756fd0-7bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:4b:b7:b3:c5:43:88:67:94:56:3a:d3:a4:
                    16:5e:e1:97:27:9b:22:f1:28:29:d4:19:02:19:6e:
                    7c:f6:cc:53:0a:b3:be:00:cd:3c:4d:83:30:3a:a9:
                    4a:43:7b:9c:ae:3d:73:95:36:1c:4e:4b:aa:76:67:
                    c1:9c:29:50:c4:4d:f5:05:89:b5:ab:d5:ba:4a:cb:
                    2d:9b:ee:0e:89:d1:bc:24:be:3f:f1:48:ac:b2:c3:
                    38:5e:f6:94:58:96:fa:22:b5:34:a7:1e:76:bd:79:
                    1f:19:72:01:cf:ec:80:f4:77:b6:e1:e9:b5:2a:0a:
                    bc:13:fc:1b:e9:4c:e0:03:c5:f5:15:1b:0d:1e:a5:
                    a1:42:5f:3e:a1:93:f9:25:38:5d:4d:95:7a:54:19:
                    18:0e:a0:cb:db:c4:1a:bf:d4:11:a0:9a:7f:82:cb:
                    99:3f:ff:fc:01:07:5d:2b:40:a1:49:ab:f6:79:9c:
                    0e:f1:6b:74:b3:21:89:7d:42:8d:73:eb:9b:e3:f4:
                    3e:c9:a0:55:97:4f:da:82:cc:38:e0:4c:e4:e9:b4:
                    73:f0:fd:c7:7f:bc:f5:08:93:c0:b7:e3:7f:5d:1c:
                    cb:a6:18:f1:96:6c:df:0e:60:8e:3e:cf:2f:5a:3a:
                    30:63:00:ef:28:79:be:87:16:d6:74:9f:ab:29:1d:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:3A:6B:FA:FC:64:C4:33:8E:DD:C2:73:83:41:35:4B:06:A2:F0
            X509v3 Authority Key Identifier:
                keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:81:ff:ae:ae:14:c7:70:db:ec:07:8f:34:22:63:b6:22:
         0d:bc:9a:d2:d5:6b:d6:ab:f4:51:3f:26:98:cd:e4:9c:22:f2:
         35:d2:35:14:c8:0b:9a:20:78:ca:3a:32:62:41:ec:ac:6d:b1:
         8b:6b:b2:11:43:9e:f1:b5:e5:c4:72:74:45:4b:d8:62:57:5b:
         e2:ef:72:e7:f1:cb:5e:e2:e5:63:92:76:fa:10:6a:49:b1:f6:
         ce:c0:87:3a:a8:60:6b:c9:39:d6:bf:20:b7:65:c6:36:77:60:
         97:58:16:76:30:6d:de:70:ef:4b:ee:92:32:c1:87:e8:c6:3e:
         0b:56:91:95:64:02:bb:a7:76:01:d4:ab:ff:05:5a:89:97:58:
         c7:7b:f4:c6:b5:45:08:dc:a5:ad:f2:8b:16:9e:11:41:95:77:
         f6:c9:8c:ae:67:e3:c5:7c:4b:9c:e3:87:ed:a0:61:66:a1:f3:
         ad:70:3a:36:f1:25:a2:73:b3:85:02:31:3e:2e:6d:11:b9:f1:
         d3:f0:3a:a2:c2:5f:ab:e3:b5:2d:a7:33:76:11:8e:26:7b:b5:
         65:9c:93:e3:2a:0b:37:c8:23:48:58:07:0f:e2:2b:47:26:c3:
         b6:87:ea:2a:e9:44:d8:64:11:d7:60:3a:eb:76:1d:d6:fb:24:
         7e:67:57:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:57:51 2026 by rpki-client