This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File:                     f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier:          3/+Tw9jIAhktzL1ui8SBWxB+O4a/URpb7K+5pWNlkPE=
Subject key identifier:   BE:F5:BC:68:FA:D5:35:19:85:5B:FF:03:6B:3E:11:52:B5:0A:11:B2
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer:       /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number:          020F
Signing time:             Thu 01 Jan 2026 01:54:49 +0000
Manifest this update:     Thu 01 Jan 2026 01:54:48 +0000
Manifest next update:     Thu 08 Jan 2026 01:54:48 +0000
Files and hashes:         1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: 3/a47nkqr6tGYbUjQv+3Lec2DDNmVCG1M1LavMyXgag=)
                          2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
                          rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 01:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
        Validity
            Not Before: Jan  1 01:54:48 2026 GMT
            Not After : Jan  8 01:54:48 2026 GMT
        Subject: CN=6955d3e9-775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:6e:33:07:51:fe:c5:be:b6:35:da:69:c3:
                    08:ad:35:47:ae:c8:62:01:d0:ea:6a:c9:66:92:8a:
                    ea:7b:7b:bf:48:2c:a9:23:81:e2:a0:b8:c3:28:85:
                    18:ee:a8:b6:6c:22:41:3b:6d:40:9e:4e:01:9f:c3:
                    ea:b2:9c:a3:0f:99:8e:af:fc:37:09:7d:55:b6:a0:
                    59:8f:6b:3b:cd:4e:a8:eb:00:5e:01:91:f7:1c:5d:
                    d5:22:c7:d2:51:c1:44:52:96:7a:30:8a:63:85:3a:
                    c1:f1:ba:40:6d:0b:39:5f:e5:b9:cf:07:95:c2:1e:
                    2d:88:cb:1d:80:c7:30:09:ca:c8:90:d4:57:42:80:
                    c4:3e:6a:cf:f4:49:30:73:67:d1:a2:37:63:60:73:
                    2d:98:0d:b2:30:d2:dc:47:f8:7f:2b:aa:e1:89:c7:
                    d4:aa:a8:61:f1:8a:9b:b5:f0:32:b9:a3:79:14:ef:
                    8e:97:3d:ad:df:36:64:bc:1b:32:2b:50:e1:fa:3b:
                    1e:33:b4:72:a3:35:46:0e:76:76:5e:a1:2e:f5:bb:
                    8e:b6:0b:05:21:28:98:3e:a8:d5:38:63:38:cd:f7:
                    5c:02:2b:db:03:bc:dd:9c:de:52:9f:22:82:a2:92:
                    81:b9:ae:8a:29:7f:80:d7:9e:11:01:8c:52:bf:e9:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F5:BC:68:FA:D5:35:19:85:5B:FF:03:6B:3E:11:52:B5:0A:11:B2
            X509v3 Authority Key Identifier:
                keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:a3:2f:36:0d:58:87:21:74:db:7d:30:ba:4b:cc:1b:d7:
         1d:c2:1d:3f:ca:7d:44:19:d7:28:10:23:6c:b9:90:3c:63:b7:
         09:9f:b2:41:a5:07:6d:21:6d:fd:b9:ef:b1:85:ef:0a:d9:98:
         9c:21:be:6f:b0:50:66:94:4e:6b:40:f3:e4:1c:f4:29:3a:32:
         58:78:69:fe:73:fd:0e:0e:04:13:54:82:16:46:aa:6d:b9:6d:
         14:50:ae:84:5c:6d:1b:ad:90:28:cb:27:bb:46:27:45:ad:e7:
         0a:db:50:6f:b2:6b:ff:ef:01:99:4d:9a:10:38:36:51:73:2f:
         0f:8f:59:11:df:41:a1:f3:1d:48:ec:ee:58:26:89:30:b5:e1:
         72:5e:a7:4a:d6:64:17:34:df:c5:4d:cc:20:5d:f1:25:fe:06:
         37:83:4e:b7:09:ee:a7:2e:8f:12:02:24:68:a3:48:5d:d7:0a:
         81:0a:a5:e4:16:1c:1c:13:23:61:41:0c:9e:dc:1c:2c:3d:f5:
         b9:2a:79:78:88:62:34:fb:39:e6:eb:7a:0d:4a:39:c4:60:32:
         fc:56:b9:5b:69:8b:e9:ff:79:ab:70:7e:23:2a:76:a5:a6:90:
         58:b5:19:26:56:82:f0:8e:a7:75:b5:ec:07:17:d0:7a:c6:de:
         db:d7:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 18:01:47 2026 by rpki-client