This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File:                     zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier:          wq15CT7wWVbs4Uyls0PwsyS+RhE2CttqKjy2tlpPZ0Q=
Subject key identifier:   73:21:54:93:7F:17:A7:CD:F8:FB:2E:2F:5A:50:0C:A2:F7:02:83:A7
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer:       /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number:          015F
Signing time:             Sat 17 Jan 2026 03:14:05 +0000
Manifest this update:     Sat 17 Jan 2026 03:14:05 +0000
Manifest next update:     Sat 24 Jan 2026 03:14:05 +0000
Files and hashes:         1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: hvROwXw/jw0xVknTrXKtEG+4SVafpFN+o5QeuWqgius=)
                          2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
                          rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 03:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
        Validity
            Not Before: Jan 17 03:14:05 2026 GMT
            Not After : Jan 24 03:14:05 2026 GMT
        Subject: CN=696afe7d-0db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:da:a2:2b:1d:75:af:c0:34:f8:21:90:89:
                    e4:3e:6a:4f:a8:d6:bb:cd:2b:73:71:3c:77:8a:26:
                    97:43:1a:4d:ef:36:d3:69:a5:46:81:f9:df:d7:31:
                    33:a8:d7:04:65:6c:eb:38:7d:38:72:82:df:3a:6a:
                    4b:d1:a5:84:7a:7b:81:5b:02:b9:21:66:53:3b:07:
                    e5:3e:ab:cf:3e:53:a4:25:bd:e3:cb:c2:b0:1a:92:
                    73:36:74:f5:91:7b:48:63:38:14:f2:68:71:b5:ff:
                    67:a1:92:ed:9a:13:28:60:67:f4:88:c4:4c:0c:11:
                    49:06:a3:d1:68:30:a8:97:8f:97:3e:67:27:dd:23:
                    70:0e:3c:f6:3f:d2:9a:7a:c4:3a:f0:09:39:8e:af:
                    1d:f8:64:c6:07:11:11:57:fb:3b:a7:70:07:96:ed:
                    5d:97:29:3a:72:8b:63:e9:ce:83:61:fe:37:e7:29:
                    9b:5b:e2:11:fc:8c:08:f5:f0:dc:ce:d4:d6:db:68:
                    db:2c:7c:a7:5a:ba:ea:62:86:26:5c:9b:ea:4e:81:
                    28:df:ed:0a:42:45:03:58:1e:76:e3:21:87:1a:09:
                    d2:71:d0:6e:f4:53:2e:5c:de:f9:ce:c8:38:41:08:
                    6d:11:a4:19:0c:68:f6:80:51:51:ef:98:28:07:f9:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:21:54:93:7F:17:A7:CD:F8:FB:2E:2F:5A:50:0C:A2:F7:02:83:A7
            X509v3 Authority Key Identifier:
                keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ce:92:1f:2b:1b:d7:4f:39:27:30:cd:7d:08:29:38:21:3b:
         e6:80:4c:e7:0e:41:54:e6:4f:1f:44:d7:78:48:ee:36:16:5f:
         61:8e:ac:51:f3:3d:53:c1:3f:8e:79:e1:b9:94:ec:f3:47:94:
         fe:3f:aa:22:8d:ba:46:bd:bd:95:50:fa:32:eb:80:28:9d:56:
         19:4f:1c:67:62:9c:70:5f:bd:a9:c1:7b:82:40:73:0d:c2:e5:
         7b:45:49:07:d4:79:60:f0:28:3a:34:23:f9:a2:a7:73:3f:ba:
         b8:fa:39:94:f3:fd:36:50:8c:60:49:6d:22:8b:15:50:43:ac:
         49:fd:e9:a5:ed:6c:69:70:0c:ab:50:e6:70:ad:42:08:58:6a:
         b9:17:92:8f:a7:bc:8e:1e:61:37:33:c4:3e:f7:fb:1b:38:60:
         06:73:f6:e2:bf:27:c2:90:63:ce:c9:b7:77:c3:05:4a:3d:f1:
         d5:46:bf:58:82:6d:60:a2:08:aa:23:a2:13:ad:86:c8:3b:8c:
         6a:13:b5:9b:0e:aa:13:b0:5d:e2:3f:7c:7f:db:0c:30:c2:9d:
         53:fc:ea:c3:84:b6:cd:58:fb:56:33:12:62:b6:01:c7:7a:42:
         d8:a3:12:6d:06:94:c6:6d:e2:6d:30:a7:cf:8b:c3:e1:de:e9:
         2c:a1:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:16:38 2026 by rpki-client