This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier:          DtlHm6ZgUDUS0VUi0K4blNNXxW4P4BaJbDiJuEgUzcc=
Subject key identifier:   25:66:4F:78:0E:98:98:92:F9:B8:8D:8D:88:EA:08:EC:71:9B:F5:3D
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer:       /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number:          01E1
Signing time:             Sun 25 Jan 2026 02:03:17 +0000
Manifest this update:     Sun 25 Jan 2026 02:03:17 +0000
Manifest next update:     Sun 01 Feb 2026 02:03:17 +0000
Files and hashes:         1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: wVMnJQp9S6AF3qYYu3XzKjhsIMuxTz4tlACoRDs/lnk=)
                          2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
                          rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Validity
            Not Before: Jan 25 02:03:17 2026 GMT
            Not After : Feb  1 02:03:17 2026 GMT
        Subject: CN=697579e5-57dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:05:74:12:db:ab:d9:52:af:2c:7f:a5:98:
                    5b:0d:fe:20:04:78:e7:df:51:db:09:b5:57:e1:14:
                    3c:f8:b4:88:09:79:e1:96:e5:cf:df:94:4c:e7:86:
                    d2:c7:7f:4f:54:9d:89:8d:ef:a3:de:05:1e:5e:56:
                    a1:21:be:b7:ea:9b:69:0a:c0:55:9c:ea:e4:e8:f6:
                    58:91:5f:64:fb:e8:f3:89:e1:6a:f7:9b:b2:c8:6b:
                    9e:ea:f4:a1:fc:db:8a:e5:73:5e:cd:bc:58:be:f6:
                    b9:35:22:e4:dd:44:21:2b:b8:9d:b6:be:8e:ba:52:
                    59:d2:bd:26:35:3a:37:8f:9c:75:5f:87:4d:6e:74:
                    c3:c3:e8:8e:a4:b5:1e:74:12:46:ea:cb:9b:58:7c:
                    89:86:4e:d0:a5:df:c4:19:5e:a8:38:72:22:2d:4a:
                    2b:22:ab:88:d2:6b:e3:70:0f:2c:c6:45:25:95:01:
                    80:22:77:77:f8:cc:e7:57:f9:6a:ba:9a:46:df:87:
                    d7:d2:8f:4b:6e:52:af:9c:5a:2f:ed:5d:2b:e5:44:
                    79:fc:7b:e3:02:7d:34:f4:23:a9:66:e1:dc:33:47:
                    54:1d:1f:c5:ed:5c:81:34:96:a2:40:34:bb:09:eb:
                    59:3d:90:57:f0:fb:e7:cf:ec:ff:39:12:c3:58:74:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:66:4F:78:0E:98:98:92:F9:B8:8D:8D:88:EA:08:EC:71:9B:F5:3D
            X509v3 Authority Key Identifier:
                keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:aa:22:94:9d:d0:b2:d7:85:e4:7f:86:ae:5f:3a:1f:37:
         9f:cc:0f:78:0b:e6:97:9c:34:d4:4b:2f:a1:5b:ec:1c:09:11:
         64:e7:68:6b:4e:69:73:f8:05:69:ba:ff:b9:9f:50:b6:e8:50:
         a4:c5:be:b1:86:52:e4:a4:81:c2:9b:af:03:41:83:ae:cd:9c:
         87:4b:f4:51:bf:25:ff:5b:1b:0b:67:50:a4:b3:fb:b8:b8:7b:
         fb:9e:8e:32:7b:a5:c9:c2:70:a9:53:69:2a:e2:c5:4a:74:9f:
         be:83:5a:bb:1a:d7:2a:30:3e:ae:23:57:61:4d:03:68:b8:bf:
         d1:bd:2b:cc:3a:81:ab:3b:a0:16:e7:c5:68:72:a3:e4:ca:b9:
         50:60:f7:35:6f:dd:3b:09:c2:22:a5:f0:57:b7:d7:0e:ad:72:
         8d:b5:2e:46:32:a3:80:91:ce:9f:1a:80:66:0f:85:99:36:77:
         94:5a:fd:c9:0e:e4:2b:9a:58:74:a2:8e:88:66:a4:bd:c2:2b:
         18:4f:fb:34:cd:6b:d6:99:e7:68:62:9e:23:3d:c0:f8:e5:93:
         ce:e8:61:5d:69:a9:89:70:f0:45:80:3f:f4:4c:66:93:44:9c:
         6f:75:0a:2a:09:14:64:09:a9:55:a8:c8:da:9e:f4:69:b0:27:
         e8:de:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:59:55 2026 by rpki-client