This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
File:                     mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json)
Hash identifier:          q9rd+q3mfM6XwNCJ4j6GdiCxA0yX+30S/7IJurm72jU=
Subject key identifier:   9C:D5:09:7B:0B:AB:E8:34:5E:2A:26:3A:84:B4:10:1B:19:C9:96:D7
Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4
Certificate issuer:       /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
Manifest number:          078F
Signing time:             Thu 08 Jan 2026 20:57:42 +0000
Manifest this update:     Thu 08 Jan 2026 20:57:42 +0000
Manifest next update:     Thu 15 Jan 2026 20:57:42 +0000
Files and hashes:         1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: eHS5a7fs2Hp8Robn6lON9JwBjWLmmRjEutqu3boxm/Y=)
                          2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: 1eEXn0DpwmRI9MepXpoWA5JUkxSOFR7q8WfqNaNbqB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Jan 2026 20:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4
        Validity
            Not Before: Jan  8 20:57:42 2026 GMT
            Not After : Jan 15 20:57:42 2026 GMT
        Subject: CN=69601a46-944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:19:06:94:c6:08:66:75:f7:df:b7:e3:bf:
                    ac:c7:7d:29:fe:6c:0b:b0:9a:36:36:95:dd:23:73:
                    ee:4f:d6:65:56:e2:b0:4d:c9:c0:4b:ba:0f:c1:a6:
                    ac:03:c8:93:4e:ac:d1:43:ce:ac:f0:7d:dd:f2:6c:
                    e3:24:18:2a:f0:5b:2b:a9:4b:7f:66:be:ee:67:7d:
                    e5:f6:4d:4e:fd:ff:d8:28:01:9f:2c:7d:15:89:1f:
                    ff:a0:51:a2:d9:75:0d:07:f2:e0:0f:21:4c:08:b4:
                    19:be:1e:ec:07:c3:21:84:d2:f1:25:43:33:af:93:
                    6d:b5:16:34:92:76:da:88:26:e1:79:45:17:4d:87:
                    42:4a:e8:cb:0f:45:d9:c4:f4:90:a6:c6:af:63:81:
                    d3:c6:15:a3:c7:4a:f3:31:04:80:6a:eb:9e:fa:21:
                    4c:e0:0a:79:6e:07:7b:19:a9:ee:ca:34:af:64:34:
                    67:7b:ba:cb:a7:3e:ca:3e:b1:f1:e1:73:fa:52:81:
                    31:2e:17:55:9f:63:22:6d:5e:82:17:e3:71:9e:94:
                    70:4f:08:f3:8f:f9:55:64:93:10:39:b7:16:9f:eb:
                    16:03:d0:0e:92:3a:73:1c:c2:73:d4:63:6b:f6:99:
                    00:32:10:14:5c:7d:45:72:41:f0:41:5c:2b:29:72:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D5:09:7B:0B:AB:E8:34:5E:2A:26:3A:84:B4:10:1B:19:C9:96:D7
            X509v3 Authority Key Identifier:
                keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5b:bf:e9:fa:3d:3e:59:be:00:b1:30:a4:9f:99:d9:a9:5c:
         63:3f:02:f9:e0:11:98:ad:d8:d4:b5:f7:33:f9:a8:b6:52:66:
         02:9b:69:2c:42:94:5c:f7:0c:52:b4:4b:de:30:82:69:22:f1:
         0c:be:92:37:b5:53:5c:18:b4:85:76:07:32:fb:da:cf:08:1f:
         b6:13:80:89:8c:49:c9:a0:05:74:84:8a:9e:64:50:40:56:9e:
         0d:69:5b:88:1b:e4:74:f1:d6:06:3d:d8:6a:07:c8:6a:69:72:
         74:2d:17:9a:f8:40:7f:52:bb:18:00:38:f0:f4:b6:87:f5:a2:
         a8:ab:b0:8b:e9:cb:da:ee:cd:b1:7f:2a:2a:c5:a4:84:a8:c4:
         80:46:a6:b3:fd:76:61:22:bf:e8:87:16:56:2d:e4:9a:79:1d:
         cb:b9:89:db:95:83:54:b9:2a:b8:0a:d4:6d:b7:b3:a0:a5:08:
         5d:7b:f7:4c:16:34:e3:0c:48:36:18:01:88:f8:81:88:91:40:
         08:bd:58:84:fc:53:72:f3:73:20:2d:69:4f:b5:9a:13:ca:2a:
         72:44:6f:df:3a:9d:f0:7a:b8:3f:51:bc:4f:aa:b2:35:c3:6d:
         26:14:5c:95:27:29:c7:cc:9f:ee:62:68:1e:73:20:2e:5c:6e:
         b4:59:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:56:37 2026 by rpki-client