This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File:                     EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier:          BQ7tnRbAWeuKubr/jXRrZvAvK6RqaLRodPkfVcGLijQ=
Subject key identifier:   D0:B0:0B:F4:4F:1A:D5:81:6B:40:22:7C:61:C2:DF:1A:20:00:5A:01
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer:       /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial:       0947
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number:          0936
Signing time:             Sat 24 Jan 2026 19:38:42 +0000
Manifest this update:     Sat 24 Jan 2026 19:38:42 +0000
Manifest next update:     Sat 31 Jan 2026 19:38:42 +0000
Files and hashes:         1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: MO3blE2oJMTIqUoiUHtGA3gerXe7ZjOOvqrM4GLmBvo=)
                          2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: pLBLNv9Fb/TNHhGRqbBg8XhYWJCps7AirU8MPmkm88Y=)
                          3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: tpF+Fo0/SMnG3Lj9IswvRitdr7I9rgpf5sDorql/H7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
                          rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2375 (0x947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
        Validity
            Not Before: Jan 24 19:38:42 2026 GMT
            Not After : Jan 31 19:38:42 2026 GMT
        Subject: CN=69751fc2-3dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:3e:7c:fa:34:ef:3a:40:ea:83:e1:77:be:
                    0c:59:fc:e0:92:bd:7c:80:6b:e2:ca:1d:59:e6:23:
                    e6:55:15:8b:c0:ab:aa:70:45:4c:0a:cb:99:98:d5:
                    77:db:f1:91:c5:85:ac:8f:56:61:f5:d6:f7:70:e8:
                    74:a6:74:12:79:72:07:6d:e8:15:ae:61:14:df:56:
                    be:4a:75:ee:34:8c:1e:87:4a:e9:74:7e:08:c5:04:
                    27:ee:15:b6:3c:8b:14:5c:8f:5b:55:08:1f:e9:3a:
                    1e:08:64:2e:78:9e:80:cb:92:ef:d2:42:dd:a4:e9:
                    b0:95:cc:c5:c5:01:28:f2:f9:08:0f:66:b2:d1:7e:
                    5e:db:cc:e4:a6:64:81:da:cb:c9:c4:8e:40:dd:5b:
                    65:ad:b8:93:ff:4d:ef:f4:8a:8e:27:9e:3c:9d:90:
                    03:0a:08:65:67:ee:1c:fe:d5:17:78:13:84:5c:bf:
                    88:bf:93:d8:1e:9f:96:41:33:5b:6a:f2:6b:b2:98:
                    34:a3:e0:73:cc:4d:b3:0b:96:8a:01:05:00:77:33:
                    52:15:6b:3d:89:59:84:27:d4:29:55:77:4e:da:40:
                    3f:f6:67:bc:56:ac:48:70:2b:e7:b6:1d:cc:91:d8:
                    dd:81:4d:74:fe:7e:b6:af:3e:c7:00:9f:e3:7f:4a:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B0:0B:F4:4F:1A:D5:81:6B:40:22:7C:61:C2:DF:1A:20:00:5A:01
            X509v3 Authority Key Identifier:
                keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:be:dd:c4:62:f1:71:96:c4:c0:b6:58:fa:34:3b:a4:26:2e:
         35:ce:f7:84:3e:55:b0:d7:cb:5e:d4:f1:d3:73:16:21:ea:80:
         cf:a5:59:25:72:30:28:b0:ff:23:9e:36:5e:cd:08:16:75:58:
         d7:0f:0b:8a:a8:04:00:b4:89:93:25:74:de:5c:34:97:03:6b:
         26:7d:9d:06:db:86:14:40:21:bb:1c:c9:24:e7:8a:c8:21:86:
         25:a5:67:f8:6f:ed:90:89:65:c1:31:05:ca:ef:05:7f:d5:00:
         7f:c0:92:4c:3d:b1:e9:2f:3e:e8:2a:c4:23:8b:27:f5:0c:dd:
         97:01:1c:a7:96:a5:01:68:57:b1:f4:ca:40:6c:04:3f:7a:c1:
         75:b7:b4:84:8e:3a:9b:04:af:e0:56:48:7e:18:ac:87:ca:65:
         2d:af:7a:00:20:69:e2:c7:df:f3:13:a3:39:a4:59:a5:97:e9:
         18:90:0d:81:ea:8b:42:88:b2:89:88:dc:a9:31:fe:cd:12:e0:
         fc:79:b4:99:cd:d3:f3:cd:c9:40:51:d7:ca:76:1b:8f:4d:62:
         1d:c2:13:86:1d:50:13:e8:96:3e:3f:0c:09:5d:62:1f:15:e7:
         36:c8:24:c7:99:44:6c:ea:a5:b2:db:29:0e:b1:bb:e8:41:6a:
         14:c7:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:53 2026 by rpki-client