This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
File:                     Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json)
Hash identifier:          V4XeT2VRzooUUEsBX7jV3LqkVTcNOpA0fpnWEAULpug=
Subject key identifier:   44:7D:52:B4:99:15:93:30:DB:A7:8B:8E:73:8C:FB:45:D3:A1:31:89
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Certificate issuer:       /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
Manifest number:          06
Signing time:             Fri 09 Jan 2026 07:20:33 +0000
Manifest this update:     Fri 09 Jan 2026 07:20:32 +0000
Manifest next update:     Fri 16 Jan 2026 07:20:32 +0000
Files and hashes:         1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: uCpIrCHd+6kzWPtF3o9DHWrLWa2MpPObY9SXTPjGC8s=)
                          2: 04A3F314E94211F095EE60383C6F56BC.roa (hash: xCA7+qfMPr+CL4lBVmaOYtFfKa1iKLabqRXEEm624Qo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
                          rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Jan 2026 07:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
        Validity
            Not Before: Jan  9 07:20:32 2026 GMT
            Not After : Jan 16 07:20:32 2026 GMT
        Subject: CN=6960ac41-e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:eb:2c:2a:2b:a8:00:a9:13:46:5b:69:65:
                    1d:56:46:2c:12:31:4d:c9:b0:fa:1d:69:21:50:0a:
                    5f:66:1d:01:35:4e:97:74:3a:e6:2a:9d:7d:4b:ec:
                    05:db:c7:2d:4f:81:c4:be:48:e9:9c:67:74:f0:bb:
                    b4:b5:49:a3:db:b5:5c:a5:f0:39:f1:0a:31:35:57:
                    cf:63:20:6e:44:ce:4f:0d:05:e2:ae:51:64:6c:60:
                    72:35:1e:17:7f:90:18:a1:a2:6a:ca:37:cb:be:6c:
                    fd:f8:8a:e9:34:ea:79:05:78:24:72:e6:a0:28:36:
                    fc:6b:95:25:0c:02:65:2a:6e:61:2e:6e:22:a2:1c:
                    2e:19:26:b8:b0:97:32:62:48:92:dc:ab:a7:d1:b9:
                    99:ad:02:cc:41:77:e9:ee:73:f4:1f:0b:af:d7:ad:
                    fe:82:8a:48:83:76:0a:b4:71:55:f7:fa:ec:e9:36:
                    df:9f:71:f2:a7:6f:99:3c:ea:b8:16:14:69:ba:f4:
                    6c:a6:63:bf:75:a9:56:b3:0a:d2:9b:e3:af:aa:7a:
                    55:96:68:46:63:d0:a1:99:90:26:f8:e9:44:9e:e0:
                    7a:81:6b:79:55:e8:f4:4e:e2:60:17:58:89:91:41:
                    91:51:5d:86:e3:db:55:d0:90:38:c8:ee:0f:23:84:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:52:B4:99:15:93:30:DB:A7:8B:8E:73:8C:FB:45:D3:A1:31:89
            X509v3 Authority Key Identifier:
                keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5e:a5:21:65:33:33:44:53:53:96:93:42:d8:bf:73:93:fd:
         75:86:31:b5:20:2c:39:97:9f:44:0e:ef:c3:a2:06:06:e1:29:
         d6:cd:9b:2c:23:a9:1a:3a:d6:6c:07:c8:7d:bb:da:47:64:f3:
         b3:07:be:c5:42:6e:a0:ae:5f:d3:22:07:35:4c:cc:31:a7:6f:
         45:a1:5b:f3:71:5c:6b:a4:ff:18:3e:41:ea:b3:b3:31:c5:e2:
         7e:93:54:ba:99:c1:33:d9:cc:e9:78:c0:af:8b:02:8a:38:3a:
         29:7b:48:c2:d9:e6:a9:a0:72:70:86:42:61:33:ec:4b:ad:37:
         1d:73:b1:6d:be:4e:e4:cb:3c:3a:d5:b3:91:4a:87:c2:7b:c6:
         1f:46:5a:90:c6:20:39:4f:27:05:4d:12:b7:24:63:94:30:60:
         6b:be:a3:4c:2d:4f:ea:b1:aa:4d:65:50:be:71:f3:cc:f4:e5:
         fb:28:6f:8d:14:06:0b:51:c0:ed:8a:27:94:71:83:0a:96:ca:
         5e:62:10:00:62:50:ce:6f:a0:f8:07:86:7b:29:46:f4:9b:eb:
         5d:13:fd:63:ed:c6:c8:66:22:9a:4b:8c:49:54:97:fb:d4:e3:
         81:fb:49:b2:1b:70:8d:86:30:03:67:c6:4f:7a:2d:78:f0:fc:
         61:84:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 09:06:06 2026 by rpki-client