This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File:                     EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier:          zbf2D+HegMrnBdEItzzuoXsotUhNgTv7iRXA9lqx/zY=
Subject key identifier:   E9:68:07:71:1D:3B:6D:F4:8C:06:9C:8D:7D:BB:DB:FB:CA:87:CF:8A
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       04EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number:          04E1
Signing time:             Sat 24 Jan 2026 23:00:20 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:20 +0000
Manifest next update:     Sat 31 Jan 2026 23:00:20 +0000
Files and hashes:         1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: UZeSLu/Ni6spwlPCZ2vpBxApbrCAEPH8gGAxgK630tg=)
                          2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: m8kc5pmxyNUtzE4T6XJqZukX44I+76FHWWNgV7rp9ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: Jan 24 23:00:20 2026 GMT
            Not After : Jan 31 23:00:20 2026 GMT
        Subject: CN=69754f04-e1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:bc:83:78:b8:e6:ff:04:d7:8e:a0:8c:f2:
                    6b:3c:9d:fc:78:61:66:8c:ef:36:c9:4d:99:cf:1c:
                    8c:9f:49:b4:89:4e:f2:13:44:f1:78:5e:a4:82:bb:
                    4f:d4:dd:76:02:19:fb:9c:a2:76:74:d1:f2:50:75:
                    ce:f6:c9:58:d2:91:5d:9d:c6:a9:2a:9c:f3:9f:ae:
                    03:82:d5:7a:6b:a7:58:e4:c6:4c:a8:7a:3c:c3:0e:
                    54:a2:62:0d:0d:11:6a:f5:8f:09:41:3a:3b:3d:60:
                    e2:28:0c:65:eb:c4:b9:68:b5:fb:75:6b:46:c3:d1:
                    47:a4:e8:2f:f8:dd:38:74:79:31:8c:83:4f:f0:02:
                    73:69:37:04:ec:40:99:38:fe:5c:43:bc:58:63:3e:
                    bd:88:91:60:c4:bd:3e:ce:d5:ce:11:14:f3:78:9b:
                    5e:31:57:e4:91:d7:ff:f8:4a:1a:df:01:d4:ed:d1:
                    bc:d3:15:11:69:01:5e:8b:7f:47:43:b6:e7:7c:aa:
                    f3:f9:c6:c9:f6:80:ca:15:74:65:77:18:77:c4:53:
                    ca:e4:be:a7:0a:4c:4b:cf:de:05:ff:36:66:0f:c0:
                    96:ea:a0:6b:1b:b9:c9:dd:2e:b9:f3:21:7e:e5:f4:
                    79:3f:75:85:31:36:97:58:e7:0d:ae:24:a2:ab:7b:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:68:07:71:1D:3B:6D:F4:8C:06:9C:8D:7D:BB:DB:FB:CA:87:CF:8A
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9f:99:60:38:dd:a9:0b:cb:83:0a:75:a0:79:2f:bf:86:79:
         82:af:c6:6d:ac:39:c7:13:af:14:45:7b:74:00:a0:ad:e1:79:
         95:cd:5d:2a:8a:8b:71:d7:76:90:6a:3e:12:f0:80:a5:96:00:
         a1:d6:7b:28:31:3e:90:29:1b:4f:a6:05:b5:89:d3:c1:d0:d5:
         cc:95:72:b2:40:52:c6:03:79:87:98:95:74:12:f1:38:99:1a:
         1c:1e:64:1c:a4:ed:eb:68:d9:a1:0e:67:64:4d:6d:20:c2:a6:
         2f:8b:f9:bb:b5:8c:4d:4f:04:86:73:69:a3:bc:b2:46:6c:b3:
         87:2a:02:4b:a3:c9:e5:83:a0:11:77:40:d3:7f:b1:59:40:33:
         99:44:78:37:fa:30:6d:ba:99:55:ae:48:b1:c0:01:1c:30:f0:
         90:69:a1:1f:89:3e:03:cb:ba:12:61:3d:42:aa:82:eb:cc:00:
         65:0e:35:a2:4c:65:7f:7b:4f:8d:6a:77:7c:45:77:21:c4:56:
         29:7a:bd:da:7e:ea:7f:32:1d:f0:cc:11:f7:1d:84:e9:94:7d:
         db:89:52:42:6b:f9:c5:9a:0f:e1:96:44:52:80:91:e1:c4:63:
         0c:70:b7:83:fc:a6:a5:cb:71:bc:dd:ca:5b:ca:40:a8:06:16:
         84:10:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:16 2026 by rpki-client