This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File:                     zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier:          kq3YrmvmvErTFfXf8rP7nKxOon+5VUhkYtr4xKsKmxM=
Subject key identifier:   BB:57:EF:DB:3F:DD:D9:5B:39:F6:29:18:F3:60:BF:A0:4F:E7:35:77
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number:          0109
Signing time:             Tue 27 Jan 2026 04:16:10 +0000
Manifest this update:     Tue 27 Jan 2026 04:16:09 +0000
Manifest next update:     Tue 03 Feb 2026 04:16:09 +0000
Files and hashes:         1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: hWPcZgZXj/iqrKsXs61oRSm0qtAc7HnYqx8DWCu6mgg=)
                          2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=)
                          3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 04:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Jan 27 04:16:09 2026 GMT
            Not After : Feb  3 04:16:09 2026 GMT
        Subject: CN=69783c0a-7262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6d:41:48:0a:3e:7a:f4:19:95:cc:5e:60:e4:
                    69:18:56:99:81:56:b6:c5:bf:3e:1f:ff:da:eb:63:
                    e3:40:00:9c:62:3f:0e:2b:e5:ed:d8:fc:1d:21:1c:
                    38:3f:c6:b7:5a:38:e8:98:4a:f0:21:96:d4:b3:cb:
                    b4:f2:d2:49:15:a2:d1:4e:a6:53:bc:01:9c:bf:91:
                    20:67:72:d5:88:ed:47:6a:ee:22:01:c1:f0:e3:75:
                    bb:3d:32:13:82:8f:73:4a:6b:b4:f4:6f:d9:9c:fd:
                    fb:a4:2b:9d:39:04:35:46:eb:57:79:0f:41:66:c6:
                    41:41:84:60:79:d0:fb:95:9e:af:e7:86:af:34:39:
                    bc:14:77:80:b5:9f:9b:4f:0c:ac:9c:98:b4:5f:d8:
                    95:7d:4d:45:34:89:d5:fa:c9:a6:e0:4e:d7:1d:c2:
                    af:8b:c1:3e:84:1b:d5:45:9a:a3:5a:d0:e8:d8:48:
                    28:fb:cc:41:fd:53:f4:5c:88:69:09:a1:0f:4e:fa:
                    e6:ee:93:75:8e:0c:86:c2:5d:da:4f:99:ed:7a:d7:
                    ca:19:b3:8c:9e:0c:f4:5e:b4:43:96:5c:65:95:3e:
                    a2:cc:25:04:88:21:14:fa:6e:b2:d8:30:ee:ef:0b:
                    eb:4f:a3:3f:20:b5:b0:e8:b7:da:f6:5a:bc:54:29:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:EF:DB:3F:DD:D9:5B:39:F6:29:18:F3:60:BF:A0:4F:E7:35:77
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:45:4f:ed:7c:1e:e3:34:37:25:d9:19:3e:47:2a:75:1d:20:
         57:d7:85:73:fb:43:ff:b7:e1:6e:76:1d:59:f5:fb:de:c0:5b:
         e9:0b:4a:03:58:34:da:c2:75:92:41:11:84:46:d5:31:e7:a8:
         2f:c9:e4:67:c3:df:d6:8d:0c:44:33:d6:26:58:fe:46:27:06:
         ec:53:45:70:ec:6c:1a:d8:9d:4d:45:e8:26:0a:0f:28:ea:8e:
         02:21:3e:7d:fc:4e:f9:ed:dc:8e:ab:75:ec:09:5b:82:05:96:
         f3:57:d0:ae:6c:6a:b7:03:87:8e:7a:5c:b4:d3:9d:56:01:81:
         4f:22:93:c2:f2:7b:a9:f1:d5:04:8d:a0:b7:69:fb:5b:09:3f:
         c9:4c:03:f8:d3:0e:e4:ee:f6:76:40:50:30:e9:53:07:68:28:
         8f:2d:7b:8f:0d:fb:b8:95:5b:a4:8a:54:64:51:50:d7:e6:44:
         b8:49:52:87:5f:ce:9f:b3:33:cd:43:2f:19:9f:6c:7a:0a:8c:
         c4:c1:88:c2:6b:5a:65:fe:f1:de:e3:e5:27:f7:c7:48:e9:aa:
         89:c6:3f:b1:21:78:d9:0c:16:73:6c:09:f3:91:00:03:71:79:
         1a:79:bb:2e:b9:40:ed:3b:a0:7a:23:5e:40:e4:b8:ea:7c:94:
         26:74:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:24:30 2026 by rpki-client