This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
File:                     zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json)
Hash identifier:          kmu8WVHl8/zg3jrrW04zBEjSWGeKTtq83I1lbITXIAM=
Subject key identifier:   D2:76:6D:2B:10:9B:8B:4D:1E:F6:09:EE:05:E0:A2:FC:81:F7:DB:1F
Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5
Certificate issuer:       /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
Manifest number:          05
Signing time:             Sat 17 Jan 2026 07:06:55 +0000
Manifest this update:     Sat 17 Jan 2026 07:06:54 +0000
Manifest next update:     Sat 24 Jan 2026 07:06:54 +0000
Files and hashes:         1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: E/ZwkPMFqKgqgnXvpe3F7DIQOD85m2kK1vu0SyG2YS0=)
                          2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Pvjzh1wB4BpFzjENBVvgVUaERhu/PoJPSA4+GLZsUU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 07:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5
        Validity
            Not Before: Jan 17 07:06:54 2026 GMT
            Not After : Jan 24 07:06:54 2026 GMT
        Subject: CN=696b350e-c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:fc:d3:83:c9:66:90:57:36:d8:d2:ae:7a:
                    d9:32:d0:65:4e:18:d0:6f:d0:73:77:6b:a7:90:49:
                    e7:cb:0c:2b:eb:8b:78:e0:6c:90:d5:a0:8d:06:a6:
                    0d:fc:af:7b:cb:45:cc:00:cd:50:41:60:a0:80:5f:
                    e6:22:f9:8c:89:53:98:06:da:ed:7b:0e:0b:b5:ba:
                    08:db:75:af:87:7c:69:d1:e5:d8:74:13:7b:5b:f9:
                    12:f4:1c:c0:e8:72:2d:5b:bb:2f:73:54:cd:d4:fa:
                    ed:e2:f2:39:08:f3:57:6e:f3:b2:5c:b5:a6:7c:a7:
                    85:77:ea:9a:59:d1:d0:da:66:48:63:66:0d:09:a3:
                    81:bf:78:53:89:a3:ad:94:6d:1b:fd:50:ba:f1:e1:
                    7e:d1:36:6d:3d:7e:e3:7b:b5:0e:92:39:49:af:12:
                    87:4f:8d:05:1d:5f:11:19:2c:8b:95:4c:bb:12:3f:
                    6c:86:86:77:85:ad:c8:7a:b1:66:3d:17:33:13:f9:
                    6d:2f:28:35:c0:aa:9f:10:29:0b:8e:9e:c8:90:fe:
                    eb:1a:bf:6a:bf:3b:24:d0:14:37:bb:80:4e:83:45:
                    2f:62:53:ec:5e:2b:18:ed:b6:a4:38:a7:6b:1c:6f:
                    3e:06:51:f6:e7:4f:dc:89:e4:78:19:c5:20:4c:59:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:6D:2B:10:9B:8B:4D:1E:F6:09:EE:05:E0:A2:FC:81:F7:DB:1F
            X509v3 Authority Key Identifier:
                keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6f:b2:c1:a4:ce:1d:c3:a9:fa:d8:8c:1c:53:19:42:a0:a9:
         a8:bb:03:ad:e1:c6:02:4d:1a:8d:5e:66:de:d0:9b:e1:2f:9f:
         af:0b:e7:bb:89:86:0c:a2:c4:b8:20:e6:c9:6d:7e:c8:bc:88:
         b6:b3:9e:e4:9c:56:95:48:31:c4:3f:a5:e6:0f:b2:37:b8:98:
         72:b2:2d:85:24:f5:71:c5:ea:b2:d6:6b:a9:f3:a9:66:5f:ea:
         85:4d:0a:ef:bf:47:8c:ba:8e:39:65:8d:16:d0:9f:68:99:51:
         bc:1d:cb:49:95:7f:2c:dd:47:00:1f:e2:15:62:7c:ec:bc:2f:
         19:e1:f6:b8:ea:dd:3c:78:5e:7a:34:3c:2b:f8:bb:f0:31:d0:
         f4:5f:90:e5:21:64:66:cf:90:d1:a8:ee:32:e6:63:5a:57:57:
         5d:98:9d:90:d2:4d:52:48:33:64:4c:ba:b4:63:f1:f8:a7:68:
         14:c7:d6:92:7b:78:54:0f:97:04:e8:4a:81:87:81:42:bd:26:
         74:ea:57:01:64:5f:d6:3c:7c:6d:f4:13:ef:a1:06:01:ce:47:
         de:68:19:6f:3b:b4:ff:20:40:f0:f0:49:a0:40:9a:e9:93:e2:
         49:c2:63:f1:62:07:03:cc:5f:00:f2:34:08:6d:f5:89:58:0b:
         c3:f5:b2:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF
OEZGRjExMC8GA1UEBRMoQ0M5RjJGQkJGQUVEQzQ0Qzc2MzJCMThDMkJEM0JDNThF
Q0VEN0JGNTAeFw0yNjAxMTcwNzA2NTRaFw0yNjAxMjQwNzA2NTRaMBgxFjAUBgNV
BAMMDTY5NmIzNTBlLWMxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwZvzTg8lmkFc22NKuetky0GVOGNBv0HN3a6eQSefLDCvri3jgbJDVoI0Gpg38
r3vLRcwAzVBBYKCAX+Yi+YyJU5gG2u17Dgu1ugjbda+HfGnR5dh0E3tb+RL0HMDo
ci1buy9zVM3U+u3i8jkI81du87JctaZ8p4V36ppZ0dDaZkhjZg0Jo4G/eFOJo62U
bRv9ULrx4X7RNm09fuN7tQ6SOUmvEodPjQUdXxEZLIuVTLsSP2yGhneFrch6sWY9
FzMT+W0vKDXAqp8QKQuOnsiQ/usav2q/OyTQFDe7gE6DRS9iU+xeKxjttqQ4p2sc
bz4GUfbnT9yJ5HgZxSBMWSVJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0nZtKxCb
i00e9gnuBeCi/IH32x8wHwYDVR0jBBgwFoAUzJ8vu/rtxEx2MrGMK9O8WOzte/Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzU5MTNFMjYyRUVE
MTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4Mk1yR01LOU84V096dGVf
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveko4dnVfcnR4RXgyTXJHTUs5TzhXT3p0ZV9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4
Mk1yR01LOU84V096dGVfVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAItvssGkzh3DqfrYjBxTGUKgqai7A63hxgJNGo1eZt7Qm+Evn68L57uJ
hgyixLgg5sltfsi8iLaznuScVpVIMcQ/peYPsje4mHKyLYUk9XHF6rLWa6nzqWZf
6oVNCu+/R4y6jjlljRbQn2iZUbwdy0mVfyzdRwAf4hVifOy8Lxnh9rjq3Tx4Xno0
PCv4u/Ax0PRfkOUhZGbPkNGo7jLmY1pXV12YnZDSTVJIM2RMurRj8finaBTH1pJ7
eFQPlwToSoGHgUK9JnTqVwFkX9Y8fG30E++hBgHOR95oGW87tP8gQPDwSaBAmumT
4knCY/FiBwPMXwDyNAht9YlYC8P1skA=
-----END CERTIFICATE-----
Generated at Sun Jan 18 05:36:17 2026 by rpki-client