This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
File:                     09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json)
Hash identifier:          ls6JEXPZeChbL7gxjqOi+oH04KKloRFJl8Yqz4tIxc8=
Subject key identifier:   8A:1E:64:9F:56:CF:A7:8E:3C:20:CA:3F:50:1F:31:8C:89:0D:0D:C8
Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46
Certificate issuer:       /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
Manifest number:          0101
Signing time:             Wed 07 Jan 2026 04:20:50 +0000
Manifest this update:     Wed 07 Jan 2026 04:20:49 +0000
Manifest next update:     Wed 14 Jan 2026 04:20:49 +0000
Files and hashes:         1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: vLGRNaRgFXhi1SHiLyo2s4AaEocomDHydagxC1VsdX4=)
                          2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 04:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046
        Validity
            Not Before: Jan  7 04:20:49 2026 GMT
            Not After : Jan 14 04:20:49 2026 GMT
        Subject: CN=695ddf22-3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:3d:4e:a2:d9:14:72:a3:51:9c:4e:9f:c7:
                    af:77:9e:32:4f:91:d5:ef:db:58:0a:7b:b6:df:4a:
                    21:78:dc:e6:bc:31:d0:ea:43:b0:22:6d:d4:52:a0:
                    8d:dc:4f:95:18:16:1f:9b:00:58:55:19:00:62:7f:
                    dc:df:f1:02:7b:11:a4:91:5b:7b:5b:a8:11:72:8e:
                    0c:1b:34:42:fa:02:5a:3f:ed:a4:fa:10:e5:08:d6:
                    7f:33:8d:0d:2b:aa:54:2d:cc:c3:5f:f5:fb:2f:a2:
                    75:57:db:2e:d1:32:7d:9f:f1:ef:31:39:04:d2:78:
                    fd:3b:99:f2:82:9b:9f:1b:9a:ab:cc:96:cf:ab:9a:
                    9c:6a:ed:ea:e2:d2:9a:7b:be:48:b3:3a:c2:1b:26:
                    dd:c9:e9:cc:5f:94:4b:35:c5:2e:34:30:be:b7:f6:
                    7a:b9:dd:e4:d2:c3:99:1b:81:61:33:e1:c7:8c:ca:
                    03:7e:83:1d:dd:f7:9e:a1:a7:d0:54:65:28:7f:a8:
                    74:26:ff:63:be:84:5c:f8:b0:ca:89:70:1e:eb:08:
                    8d:c6:ed:16:54:7d:0f:a8:71:bc:06:91:d7:33:83:
                    e3:40:d5:3e:c3:2e:63:83:20:9f:ef:c8:b3:af:da:
                    02:ac:55:2a:70:65:95:f6:7c:54:dd:76:9e:9e:94:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:64:9F:56:CF:A7:8E:3C:20:CA:3F:50:1F:31:8C:89:0D:0D:C8
            X509v3 Authority Key Identifier:
                keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:fc:d5:67:b1:ef:98:cb:89:07:52:18:a6:87:7e:69:0a:eb:
         ca:7a:77:37:7c:0a:8e:47:7a:71:8f:43:a2:d2:19:a0:63:01:
         e2:5c:0c:ef:2c:b4:9a:b0:5f:37:76:b4:3b:c7:93:93:2f:c6:
         39:7d:18:65:ca:fb:ce:7a:6f:20:67:9e:d1:76:c5:33:2c:20:
         14:0f:ca:ab:c7:5b:0e:23:1e:bf:b4:02:f8:22:d3:b5:0d:95:
         eb:cb:dc:b9:b8:08:7e:c9:b0:94:ea:56:e7:9c:1c:f7:0a:4b:
         ee:da:73:61:03:92:47:e2:0e:88:b9:1f:f9:11:e2:f8:50:89:
         3d:05:fe:7b:55:71:f9:d1:26:7d:25:4d:1e:e5:fe:3a:f2:42:
         94:ff:88:62:0c:13:0d:a9:31:30:dd:0f:b8:2e:54:d6:32:7f:
         21:44:25:38:6c:d1:60:5d:30:08:09:06:5e:3a:1e:1d:9e:fa:
         1a:a8:b8:49:41:32:ed:cf:f5:63:f3:af:38:5b:53:77:59:91:
         84:87:c4:7e:73:2d:b8:02:28:d8:a2:d2:7a:3c:9a:72:ec:cd:
         6a:66:33:d1:6e:f6:0a:5d:de:e7:b5:91:23:81:73:53:51:ea:
         44:a9:2e:7c:39:92:5f:f0:ce:b5:82:0b:14:8c:f2:eb:4e:08:
         59:0e:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 10:14:00 2026 by rpki-client