This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
File:                     rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json)
Hash identifier:          KDfC93PGK/kWqB+uH+SW9aZQENO7Sbtc7qcEHmLpHXM=
Subject key identifier:   4B:F3:2B:8B:9D:22:0F:1E:A9:19:F1:E7:09:22:C5:E2:1E:E5:7D:7D
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Certificate issuer:       /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
Manifest number:          0218
Signing time:             Sun 11 Jan 2026 01:29:16 +0000
Manifest this update:     Sun 11 Jan 2026 01:29:15 +0000
Manifest next update:     Sun 18 Jan 2026 01:29:15 +0000
Files and hashes:         1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: PzW7f7NKr/HIItOnl8zP4jiTZYnK245cKPrWE/BhChw=)
                          2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: vSHKTbzD9NgaWK1i6zEOW6JvGbxTv8WMHXlFOUXaG78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 01:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
        Validity
            Not Before: Jan 11 01:29:15 2026 GMT
            Not After : Jan 18 01:29:15 2026 GMT
        Subject: CN=6962fcec-77ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:16:58:b5:f5:4e:82:7d:2e:c2:6e:bc:6d:
                    82:28:9d:de:3d:69:68:65:01:99:ef:6f:67:23:d3:
                    4f:47:fa:84:e1:16:31:a7:dc:08:6b:71:93:a0:3a:
                    ca:1b:24:27:27:23:25:e5:21:d3:72:64:08:75:55:
                    a9:07:04:b8:b8:4e:ac:12:3d:56:33:96:26:58:27:
                    58:ae:00:0a:4e:18:3c:9d:bf:8f:1c:7c:5e:fc:df:
                    8e:c6:73:e4:5e:c5:d8:2d:2c:00:61:e2:eb:dc:d7:
                    2d:be:72:ba:89:32:e5:8e:20:83:92:4a:b5:c5:3d:
                    55:29:53:f7:1c:81:5d:ec:b2:ab:db:8c:d6:e3:6d:
                    02:82:1a:38:dc:10:e1:ad:11:0d:7e:1b:6d:82:33:
                    9b:c2:7c:77:75:e8:2e:bb:03:a2:5a:1c:a8:21:2e:
                    0b:b6:06:15:f3:6f:f5:fe:80:3f:4e:a2:41:81:6d:
                    60:c8:9e:6a:3a:5c:97:db:6e:f8:72:15:0a:52:f9:
                    be:69:2f:cc:15:d3:6f:e5:57:fe:76:79:da:0f:26:
                    81:84:7b:e6:3b:c3:89:44:aa:fb:4f:f3:ba:50:3f:
                    cf:7d:61:96:d5:d2:f9:e7:47:00:09:99:24:bd:c0:
                    b0:8d:51:07:85:21:dc:b4:31:2a:74:6b:d5:52:45:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:2B:8B:9D:22:0F:1E:A9:19:F1:E7:09:22:C5:E2:1E:E5:7D:7D
            X509v3 Authority Key Identifier:
                keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:55:b2:f6:7d:89:59:66:d3:91:b0:be:4a:e0:3b:14:a5:
         69:56:3d:e7:3a:58:d9:3b:2b:dd:31:31:0c:6c:fa:6b:cb:90:
         f6:02:10:92:36:89:32:ea:fa:ce:f9:bc:f5:d9:ca:94:c5:79:
         91:cf:fa:e8:20:76:6a:a8:85:a4:89:f5:ef:ee:13:bc:78:f2:
         4b:d7:63:ab:bb:75:9c:fe:c6:65:83:65:f0:c1:b7:55:90:81:
         bb:59:80:0f:a3:68:a3:84:37:05:60:3c:39:a0:32:03:46:08:
         fa:56:47:b5:1e:e1:74:19:35:81:3c:04:98:2a:2b:7f:62:c5:
         e4:c3:64:63:4a:7e:63:af:18:65:4a:ff:43:6c:04:c1:33:ce:
         25:90:88:c9:c8:cb:5f:aa:ef:b0:1b:1b:24:16:a7:df:bd:1e:
         c2:1f:a0:03:fe:e4:13:3d:d1:6a:3a:c2:01:ac:b7:9f:63:2f:
         0a:59:3b:e5:30:4a:d6:f3:49:c5:7f:95:42:14:d7:8b:e0:f4:
         fa:1a:6b:41:09:2f:9d:dc:15:d4:f0:59:2d:45:d6:c2:d2:b2:
         22:84:bb:ec:d5:a7:ab:9a:6c:c2:fb:ed:be:60:9e:15:60:e6:
         b7:7a:4a:6a:33:25:e4:18:81:61:c8:57:07:71:3d:84:7e:a8:
         e8:a5:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:51:06 2026 by rpki-client