This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File:                     PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier:          QtjsbL8NtqVEOhvjOa0aDkzkjjiAeceZdMsJvUKoXic=
Subject key identifier:   16:D6:6D:E0:70:C7:FF:EA:60:E9:47:3D:D4:23:13:3B:C2:7B:C6:FB
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer:       /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number:          0111
Signing time:             Thu 01 Jan 2026 04:29:49 +0000
Manifest this update:     Thu 01 Jan 2026 04:29:49 +0000
Manifest next update:     Thu 08 Jan 2026 04:29:49 +0000
Files and hashes:         1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: XkKvb1Ut5t2+jvI91JQk8i+Z+GnV8xCJ/wLqE6ilP70=)
                          2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
                          rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 04:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
        Validity
            Not Before: Jan  1 04:29:49 2026 GMT
            Not After : Jan  8 04:29:49 2026 GMT
        Subject: CN=6955f83d-e5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:10:d5:08:81:27:2d:21:b0:17:d8:a8:70:
                    b7:8d:d1:a8:94:a1:d3:28:73:69:47:26:f8:00:7d:
                    e2:33:94:45:b1:32:7f:9a:25:4f:5e:57:00:1a:b1:
                    dc:3b:92:8d:75:3f:14:43:3e:94:87:9f:9f:74:cd:
                    d8:85:da:b4:a5:41:00:6d:d8:f0:40:02:0a:bf:82:
                    80:e5:37:49:6b:f9:7b:c4:cd:43:d9:f5:4a:7b:72:
                    2b:55:51:a1:25:c3:7e:db:43:1d:07:1d:70:80:6f:
                    aa:d9:52:08:a0:17:5b:26:33:e9:1c:1e:15:9f:4a:
                    14:85:81:b1:dd:96:55:4d:8b:15:a7:ca:b9:cf:2c:
                    c1:fc:ae:93:5a:70:b1:ba:8d:08:94:d6:6b:bd:ed:
                    a6:41:e4:af:79:08:8e:b6:17:8d:23:b1:11:06:f0:
                    ba:16:c4:28:04:30:6d:8a:15:2f:93:12:9b:6e:df:
                    a3:c3:7e:f0:3a:cc:68:1a:da:3e:c6:eb:1b:8a:a9:
                    bb:53:72:86:a5:f4:da:f7:aa:c9:c3:f0:82:85:c9:
                    a9:6c:e9:87:72:ca:4a:7f:2d:8c:fd:5f:13:3d:73:
                    87:2d:f8:4f:9c:0d:a0:25:ed:b5:6a:fa:d9:b5:80:
                    88:16:2d:8e:0d:79:c6:aa:65:42:0b:e3:2c:71:11:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D6:6D:E0:70:C7:FF:EA:60:E9:47:3D:D4:23:13:3B:C2:7B:C6:FB
            X509v3 Authority Key Identifier:
                keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4a:d5:88:f4:ed:6f:49:0a:2a:a1:33:37:77:c9:bb:d4:1d:
         5e:2c:6e:aa:f7:f7:15:8f:cd:6d:d1:58:c3:da:13:53:ec:ca:
         90:49:e3:fc:b3:c4:1a:1b:98:51:9e:59:8a:dd:a6:aa:ed:15:
         10:5b:07:dc:6a:65:a8:20:69:70:8b:d1:e2:74:d2:f1:03:b3:
         d4:18:5b:ca:db:5b:e2:a7:1a:73:e5:50:c9:78:e8:f1:3f:2b:
         b2:2a:1b:05:e5:d5:d4:a5:ff:7f:ab:82:45:34:ca:86:30:6c:
         d2:62:4e:17:da:d8:13:64:1d:c0:95:a1:d4:57:6c:c3:b5:f1:
         b5:65:c7:32:cd:62:1f:df:ea:69:0e:df:49:86:88:74:9a:db:
         5d:98:82:5e:2e:1a:29:34:88:c4:fc:aa:99:7d:cd:2d:37:af:
         bc:7b:f0:25:1d:66:ba:10:a4:af:fe:5d:fb:cf:be:d1:1b:bd:
         04:20:d8:b3:1f:bf:54:06:0f:f2:b0:b6:c7:ca:40:62:52:74:
         f1:a8:32:28:74:d0:a0:3a:51:df:ac:2e:4b:c1:4a:d4:76:27:
         ea:c7:8d:ba:e7:1b:4f:4a:fe:77:2f:11:67:63:eb:ce:42:67:
         ef:d3:6f:d2:9a:63:42:08:60:0a:3a:94:67:a4:ed:f2:c1:d9:
         a7:72:a6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:27:21 2026 by rpki-client