This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File:                     ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier:          4048JOdIv7MVlAW1zXyGgDpKznE72dhno6yTzBwFWW0=
Subject key identifier:   25:21:BD:F8:09:A7:9F:F2:87:5D:79:89:35:0D:CF:A7:1F:C8:BB:A9
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer:       /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial:       04A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number:          0492
Signing time:             Sat 10 Jan 2026 23:16:56 +0000
Manifest this update:     Sat 10 Jan 2026 23:16:56 +0000
Manifest next update:     Sat 17 Jan 2026 23:16:56 +0000
Files and hashes:         1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: vCmOL74ujRaKsSIPk+KK0cEXbNx2X0RxbZ82XoDyq7U=)
                          2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
                          rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 23:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
        Validity
            Not Before: Jan 10 23:16:56 2026 GMT
            Not After : Jan 17 23:16:56 2026 GMT
        Subject: CN=6962dde8-9439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:78:6e:01:4c:f6:32:9b:04:82:ad:83:f9:
                    3f:86:75:fb:27:2a:cd:e5:ff:dd:5a:2c:57:5c:7f:
                    88:ea:d9:a4:7e:e0:4d:15:3a:90:b3:dd:b5:81:9a:
                    3c:c3:7e:d3:eb:62:85:fa:d9:ea:ae:41:ba:fa:1b:
                    b0:67:05:5f:8e:37:92:cc:64:aa:21:eb:a9:23:2f:
                    66:a2:51:1b:54:f1:3a:0e:23:03:36:8e:df:58:a1:
                    65:8c:cc:f4:ac:06:7a:d3:98:4b:90:4c:72:0c:8d:
                    f1:c1:f8:3f:c9:52:04:ab:d7:8f:27:fa:80:56:9c:
                    f2:d0:0f:66:91:dc:34:59:1c:9d:28:58:2a:1c:71:
                    07:af:c8:ea:ff:12:c0:44:4d:94:9c:39:83:8d:2b:
                    b9:89:a5:b1:8b:68:1b:59:62:d2:46:ab:4b:08:dc:
                    7f:6e:c0:0c:59:e8:ac:34:09:92:31:0e:cd:41:8b:
                    92:63:9e:2a:b6:82:13:0b:a8:d0:89:0d:26:fa:75:
                    8c:b4:16:da:ef:a0:79:e7:0b:52:42:61:e6:55:68:
                    51:ea:bc:62:4f:e5:b6:0c:6e:3d:0c:3c:40:81:7b:
                    1b:9d:25:b1:02:3d:14:b2:e1:5f:bf:c2:fe:50:c1:
                    8d:e8:32:0c:8c:2c:79:a8:da:3b:4a:f4:e5:19:d7:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:21:BD:F8:09:A7:9F:F2:87:5D:79:89:35:0D:CF:A7:1F:C8:BB:A9
            X509v3 Authority Key Identifier:
                keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:55:64:63:fc:36:ba:96:54:1a:50:77:21:97:92:9d:2a:
         8f:74:cb:ac:0b:a9:03:f4:56:44:41:df:7e:a8:3a:98:d0:2a:
         79:b8:23:2a:ad:95:b4:9c:e1:3e:51:dc:ac:b9:fb:5b:97:d8:
         0a:d4:60:7a:76:e7:37:f5:1e:c0:12:1c:9f:23:b5:b0:bd:2d:
         41:79:54:84:85:67:4f:23:1b:9f:f2:84:f3:bd:c1:ff:9b:a4:
         af:ff:db:fe:60:ed:25:9e:a4:f1:92:f7:55:0b:43:f3:1e:c3:
         00:14:3b:03:6f:f0:bf:df:3d:e8:87:52:e1:95:cd:8b:95:0c:
         ba:b6:b1:32:45:78:ef:7e:1c:46:fc:8a:73:f0:86:90:b1:bf:
         46:e0:48:7f:84:e7:a4:7e:67:c0:57:d3:46:9d:1c:18:77:15:
         32:22:6f:a1:cc:4d:83:07:9e:3e:cc:0b:0c:ac:fa:b4:ea:2e:
         e3:11:d7:9e:a5:d5:73:b9:5b:a9:fc:86:e0:7b:26:f6:b5:c1:
         28:be:fe:03:ed:29:58:60:b4:e3:5b:5d:aa:8b:c2:41:6e:62:
         5d:07:56:dc:b4:74:83:96:b2:f1:06:c5:21:76:a1:52:04:3b:
         77:3f:7d:39:7e:81:1a:3e:03:b7:67:80:a1:15:94:64:4f:39:
         9a:67:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 12:31:01 2026 by rpki-client