This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
File:                     ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json)
Hash identifier:          gIRCUxqxlzJylRPpfhA+YOH724e8M+yNN3h8OBM9eK8=
Subject key identifier:   CB:EB:E4:CF:89:9D:08:2D:D8:0C:FB:28:33:1B:F1:F9:E7:1F:73:41
Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD
Certificate issuer:       /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
Manifest number:          0118
Signing time:             Tue 03 Feb 2026 04:37:15 +0000
Manifest this update:     Tue 03 Feb 2026 04:37:15 +0000
Manifest next update:     Tue 10 Feb 2026 04:37:15 +0000
Files and hashes:         1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: S7IjdnN36o1wAs9ayXqM//9gkAcQTdjZnKaebye0gYA=)
                          2: 92EBC90CABD111F0B4462F16C4F9AE02.roa (hash: eW6ikUtAWPXZGXXB1sXYlMazcfUSFOplUYoxN0Nvfx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl
                          rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 04:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD
        Validity
            Not Before: Feb  3 04:37:15 2026 GMT
            Not After : Feb 10 04:37:15 2026 GMT
        Subject: CN=69817b7b-2819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:92:01:17:06:29:f6:ed:d6:cd:c2:bf:01:
                    fb:9e:bb:c8:9f:f5:69:f5:b9:26:6e:ed:3b:4f:4c:
                    46:4b:ca:8d:37:b1:77:08:e9:41:a4:ad:1e:58:58:
                    81:b3:a7:74:79:89:d0:a5:10:32:a4:a5:73:d7:c9:
                    13:b3:56:9e:fb:e5:be:4a:7d:d4:ce:b3:71:26:0f:
                    17:40:71:49:5a:ba:34:63:18:61:03:2d:db:fa:c0:
                    16:2d:ca:b9:25:70:6b:27:25:05:0c:87:b9:39:b5:
                    91:80:7e:b4:73:3b:5e:14:50:9d:66:bf:69:71:a9:
                    f0:b7:6f:65:88:b2:39:22:56:b1:1f:45:a4:ae:55:
                    79:3c:a2:31:42:44:d9:e8:33:44:69:55:97:00:76:
                    40:f9:fe:17:04:60:6b:fc:f1:ff:4f:07:b4:de:17:
                    4e:85:4a:75:e7:6a:66:6d:08:8a:d7:15:74:f8:a2:
                    1a:99:c2:d4:47:02:52:6a:cd:29:ed:2d:36:e8:f9:
                    a5:9a:4e:19:11:84:12:1b:aa:15:10:36:fd:de:f2:
                    a7:3d:f3:a4:a4:75:26:c1:26:2a:d9:00:90:9b:eb:
                    d3:a0:06:8b:cb:aa:23:63:25:a2:99:c0:6c:fd:f8:
                    84:65:f8:f2:84:9b:50:fd:cf:1c:61:a1:0e:51:df:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EB:E4:CF:89:9D:08:2D:D8:0C:FB:28:33:1B:F1:F9:E7:1F:73:41
            X509v3 Authority Key Identifier:
                keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:2d:c9:a2:17:2e:fb:cb:db:0b:b0:8c:b8:c1:f9:6c:ba:33:
         41:3d:94:7f:23:e4:00:98:f5:91:22:a6:7d:85:34:6f:21:d4:
         f9:34:df:cc:6e:ae:73:dc:5d:19:4c:03:57:e6:1b:99:19:60:
         57:8a:70:7b:87:91:b5:f7:56:bb:26:48:fe:29:78:31:e0:b4:
         6c:7f:95:ea:06:e3:40:92:ed:e7:cb:5e:de:f4:e9:37:2f:78:
         a8:98:41:68:02:0f:fa:bf:b6:ef:12:53:7a:32:78:19:12:95:
         ed:3d:cc:50:38:be:53:d3:dd:27:a0:d0:32:66:96:12:4c:e5:
         e7:fe:0b:47:2b:b1:55:c6:df:ee:25:61:c7:a4:b7:01:04:2a:
         01:fd:37:18:61:74:4d:2e:53:3f:46:ea:c3:41:ef:fc:6b:04:
         fc:24:e0:fe:69:a0:17:d8:91:80:26:c2:53:4a:77:b8:8c:2b:
         6e:f4:22:79:d9:07:df:3b:b3:07:97:2f:89:d3:a6:76:f6:72:
         3a:27:e3:9f:20:50:3b:9b:d9:87:2e:77:f9:45:d5:bb:63:14:
         b9:4a:58:89:02:5e:e6:d0:f8:50:6d:fe:09:a5:c4:41:66:c9:
         75:c0:84:d0:16:e5:41:64:0b:29:52:35:95:bd:06:8c:49:bc:
         24:c5:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:20 2026 by rpki-client