This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
File:                     ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json)
Hash identifier:          X26wHULD3VuQ4Cl/DjVeH2vn+TaOp5h3WUCi7bZGEQE=
Subject key identifier:   DD:10:C8:44:3C:7A:78:90:82:5F:80:0B:94:FC:6F:E0:77:F2:9C:46
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Certificate issuer:       /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
Manifest number:          1D
Signing time:             Sat 17 Jan 2026 06:50:45 +0000
Manifest this update:     Sat 17 Jan 2026 06:50:45 +0000
Manifest next update:     Sat 24 Jan 2026 06:50:45 +0000
Files and hashes:         1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: ilgRv3w7UXl3Gzzi5fy/e3LKt2lm2VksgoyQl9qQZPg=)
                          2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: DrxUkGgbXC+hFErU1Q5gF25VKeHWYD3GDyiKccqOvbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
        Validity
            Not Before: Jan 17 06:50:45 2026 GMT
            Not After : Jan 24 06:50:45 2026 GMT
        Subject: CN=696b3145-3fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:76:95:d5:4e:73:c9:b3:86:f0:de:27:57:
                    40:70:93:ba:4d:19:5c:b4:91:56:72:8f:b3:d1:23:
                    21:b4:95:a7:2b:58:4d:82:9f:03:c3:4c:76:9c:66:
                    ac:ee:66:c0:a6:9e:45:d0:b1:77:b3:5e:bd:d3:1e:
                    f7:93:83:50:93:32:d0:b1:60:4c:cf:92:f3:df:54:
                    bc:ba:5a:70:df:10:59:10:23:a3:6a:3b:b7:08:03:
                    42:4f:1a:cf:75:5a:2f:ca:1e:c6:cc:28:2e:b9:3a:
                    17:eb:67:ad:17:4e:94:c5:ba:93:fa:5a:75:19:77:
                    a5:6a:0b:53:51:87:6d:7d:41:24:6b:59:8d:53:4f:
                    0e:63:f0:b9:83:75:fd:37:77:1a:e7:dc:8f:60:fe:
                    40:05:35:04:ce:51:e7:db:6d:61:9c:6f:22:27:cc:
                    59:b9:31:bf:6d:ce:3b:dd:a6:9c:67:b2:41:83:a9:
                    d4:76:a0:fa:2c:73:a0:54:27:b2:83:9a:e8:36:ca:
                    03:b8:7e:7c:a0:3f:30:5a:5c:38:4b:9d:bf:8d:f3:
                    80:3c:61:84:dc:81:ac:78:2a:fd:cd:6a:5d:3f:d1:
                    70:c0:3d:af:8c:88:a7:5f:d0:a6:af:46:e2:f0:0d:
                    d6:ff:d5:19:7f:78:e1:9a:ee:44:87:7a:17:dd:36:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:10:C8:44:3C:7A:78:90:82:5F:80:0B:94:FC:6F:E0:77:F2:9C:46
            X509v3 Authority Key Identifier:
                keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d7:c2:ad:7f:7b:c6:f8:12:31:6d:51:d5:9c:e5:61:a3:dd:
         33:98:c9:cd:7f:9b:eb:30:a4:ca:f8:44:84:37:b8:8c:34:e7:
         7c:e0:4d:f0:85:ae:7b:f6:e6:b7:44:91:00:44:7d:0b:b4:d5:
         03:ad:b9:1f:e6:7a:33:49:b8:a0:19:47:ab:7b:1c:26:f3:72:
         c2:04:bd:f8:ee:0c:c9:c6:af:95:80:b5:c6:f6:e3:1e:c6:a9:
         b6:b6:3d:b5:ab:4e:f8:8b:ff:38:e4:ff:b3:70:c0:8a:5c:91:
         0e:3d:1a:cd:fb:31:62:a0:a0:42:ab:0d:36:23:55:35:a2:17:
         d9:0e:3d:c6:8b:bd:44:7c:8e:0f:d9:51:ba:4c:db:8f:b8:7e:
         2c:f7:b2:68:4b:15:09:30:ab:1a:b1:63:2b:27:92:0f:ad:b8:
         cf:0c:00:e7:a5:f4:0e:93:03:ad:f5:3f:80:2e:68:73:bb:c8:
         f5:7f:07:ac:1b:bf:0e:fd:6e:af:3c:3e:80:de:51:d3:b3:40:
         7d:5f:93:b2:8b:64:4c:dd:a7:72:8b:37:1a:7e:f2:d8:5c:ec:
         29:32:8d:93:cb:05:1e:54:54:43:d2:00:41:fc:1d:83:ea:bb:
         34:60:e2:03:1c:a1:81:5c:4f:55:3e:ea:cc:21:b1:e6:03:27:
         7b:5b:70:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:18:30 2026 by rpki-client