This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
File:                     ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft (raw, json)
Hash identifier:          EfU0MeWayPGI9+Qq+jvbG0v0JNYG8CO3m5o1jcA50R8=
Subject key identifier:   42:09:44:20:4C:DC:25:A0:8E:13:6B:7E:B4:D4:FC:67:E3:26:C1:BD
Authority key identifier: 66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74
Certificate issuer:       /CN=A91F1ED5/serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
Manifest number:          60
Signing time:             Fri 23 Jan 2026 06:09:14 +0000
Manifest this update:     Fri 23 Jan 2026 06:09:14 +0000
Manifest next update:     Fri 30 Jan 2026 06:09:14 +0000
Files and hashes:         1: ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl (hash: r/XCdyvaI4gpm8JrFGuwJyLSi4LCoXAn94Q56aGA21M=)
                          2: 39D1200A698311F0B4A7D66DC4F9AE02.roa (hash: 2Z7ZXOjsrVXv6QpvLW3sNTYWE2LGQXJRgdUTVxtlGsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 06:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1ED5, serialNumber=6678179A5DA8E5E91E7D9DDFC9FF5B3543ED4D74
        Validity
            Not Before: Jan 23 06:09:14 2026 GMT
            Not After : Jan 30 06:09:14 2026 GMT
        Subject: CN=6973108a-dd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:34:00:ea:32:ac:a0:4e:06:e9:e8:7a:f5:
                    fb:5c:b9:9b:cd:07:f8:8e:4f:1b:76:b7:73:dd:f3:
                    07:66:c2:74:f0:81:55:cb:fc:0a:b0:c2:77:66:c6:
                    9a:52:be:bb:a9:89:dd:3a:a3:05:da:01:dd:cd:09:
                    f8:d6:ea:9a:e4:6c:1b:1f:b1:de:41:2a:91:ea:a8:
                    a8:e3:08:fd:8f:f3:a8:3d:4a:4c:58:1a:0e:fc:ad:
                    70:b1:7c:b8:05:d5:40:b1:78:f5:d1:08:06:d5:46:
                    d4:2e:4c:5d:2e:93:61:aa:6a:bb:8a:ab:8d:64:26:
                    5d:7c:68:93:58:95:00:eb:cf:88:fa:85:09:a0:51:
                    f4:ab:9f:e2:e1:65:6d:0c:d7:2d:29:64:c7:78:43:
                    ae:74:6b:c7:c1:26:86:45:34:4c:f8:00:d3:13:b2:
                    bb:a3:85:da:b9:04:83:dd:4e:27:07:ad:d6:6c:33:
                    ee:14:c5:77:06:c8:78:7e:96:b3:49:4b:c6:dc:23:
                    39:51:99:f0:46:28:17:57:10:0a:04:6b:69:7f:1b:
                    44:10:fd:26:86:2a:e3:06:63:37:4d:41:42:b6:07:
                    51:4a:4a:21:20:d2:aa:99:80:a5:12:ee:48:cd:32:
                    22:eb:35:e7:8d:79:a4:8e:08:91:f1:75:18:06:28:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:09:44:20:4C:DC:25:A0:8E:13:6B:7E:B4:D4:FC:67:E3:26:C1:BD
            X509v3 Authority Key Identifier:
                keyid:66:78:17:9A:5D:A8:E5:E9:1E:7D:9D:DF:C9:FF:5B:35:43:ED:4D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZngXml2o5ekefZ3fyf9bNUPtTXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1ED5/AFA46464672F11F0B48DB073C4F9AE02/ZngXml2o5ekefZ3fyf9bNUPtTXQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6f:28:8c:4c:ad:41:10:b0:2a:cd:58:70:79:5d:c9:16:c0:
         2e:d3:c5:80:dc:b8:3f:7a:ab:58:af:4e:fb:f5:0f:c4:96:f6:
         fc:2f:41:50:c3:89:39:76:be:51:e1:4d:c6:1c:20:44:f1:d4:
         5d:cb:29:31:bd:b1:3e:0d:2e:9d:32:1f:98:8d:a6:0f:ec:84:
         eb:05:ca:c9:a5:b0:4c:56:68:d8:d7:bb:85:38:b6:51:58:43:
         37:0f:18:88:4e:76:03:73:1f:bc:4c:86:16:9b:67:b0:1c:88:
         d8:59:8c:f8:b8:cf:f8:50:a7:3f:5d:17:88:b4:66:a1:a5:f5:
         98:15:7b:63:ac:f5:c2:ce:91:81:31:a8:1e:75:c2:31:a3:59:
         23:05:cf:5b:94:f7:73:5e:da:19:e4:eb:e3:ee:3e:30:ee:db:
         cc:f6:fd:89:99:87:66:bd:e1:1f:00:45:ba:36:a5:9e:9a:a9:
         d0:38:f3:a3:77:54:09:5f:93:02:f5:01:ec:45:0e:13:22:1b:
         0f:4b:5f:e2:1f:4f:b4:da:d9:d9:5f:34:74:5d:9d:c1:ca:ee:
         b5:3e:9b:ea:59:77:fb:84:6f:9d:8c:4f:fb:e8:d4:96:d3:d1:
         1f:46:c8:dd:ff:fe:97:55:69:00:05:44:d9:d5:ac:48:6b:b4:
         15:f7:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:58:23 2026 by rpki-client