This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          6lhev0VG+KJk5bcW8tLIHlt0sj9IwWmPc6w78XSTT5A=
Subject key identifier:   DC:16:DF:3A:9A:3F:F0:29:47:41:07:C3:CE:86:21:BF:06:CA:A0:A4
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       019A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          0197
Signing time:             Sun 25 Jan 2026 02:43:28 +0000
Manifest this update:     Sun 25 Jan 2026 02:43:28 +0000
Manifest next update:     Sun 01 Feb 2026 02:43:28 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: 8jWZK23l55HRaA990HzTmhSi+Thcbz3GAP+4kAEjhag=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: 8onb495DsY+6sybfjvn3/yiqLOv+8ormyHYLSFvICB8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: Jan 25 02:43:28 2026 GMT
            Not After : Feb  1 02:43:28 2026 GMT
        Subject: CN=69758350-a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:c9:d5:95:1d:92:cc:32:87:6a:d0:f1:5d:
                    e9:28:29:6b:a1:f6:43:45:9b:a7:14:0b:23:c0:db:
                    22:73:dd:71:dd:e6:ed:8a:8f:d1:2c:6a:e3:cd:97:
                    dc:61:05:2e:87:69:1b:94:00:f3:5f:70:ab:85:fb:
                    6d:af:ed:a6:da:51:6a:23:cc:39:6f:4a:18:c7:03:
                    6b:90:db:f3:d5:fb:aa:66:ed:96:3f:87:bf:8e:ad:
                    3b:07:01:86:d7:ed:85:fc:c2:91:5e:dc:1d:10:22:
                    90:e0:72:1a:1f:7c:d6:41:2d:45:e2:63:c7:1b:6a:
                    c2:8f:0b:bb:83:0c:3b:80:2f:cd:47:2b:fa:47:68:
                    1e:98:53:ca:74:97:fd:83:91:91:dc:2a:1e:50:40:
                    9c:cb:e6:9b:26:97:01:ff:97:fd:c5:e9:d5:fb:79:
                    d3:e6:b0:b2:61:c9:8b:e3:0d:73:f3:a6:82:52:cb:
                    c9:56:79:fb:43:99:f1:0e:3b:ef:85:19:45:62:1c:
                    cb:51:15:45:0f:0e:79:77:cc:2f:7e:e4:f5:3f:20:
                    85:38:f1:d4:07:37:be:56:34:c3:08:9f:60:21:9f:
                    ac:6f:f6:00:78:22:1e:d9:68:0a:87:3c:47:a7:c2:
                    3f:64:34:21:61:8f:0e:ac:9e:7a:bd:a1:04:90:85:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:16:DF:3A:9A:3F:F0:29:47:41:07:C3:CE:86:21:BF:06:CA:A0:A4
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:bf:f1:17:bc:7c:2f:14:a5:5a:51:5d:42:45:5d:ba:c5:a0:
         5f:2b:99:13:39:c2:7f:a4:90:cc:b7:d6:1b:c0:42:58:70:5a:
         f5:38:c3:c2:87:6d:b4:ec:51:4f:54:35:7d:f0:3f:a2:30:10:
         49:39:66:4a:a2:30:1f:c4:7b:92:7d:5d:34:96:df:63:6a:41:
         06:18:59:a7:50:7e:a6:85:11:49:f9:b6:7a:79:c8:9c:fb:d1:
         bb:46:d1:22:34:d4:35:b8:46:05:0b:1a:8c:3b:69:54:1f:36:
         87:b2:94:56:3d:2e:4a:66:8f:b2:dc:02:f4:59:53:a0:21:f2:
         a1:35:c5:78:c0:6c:3e:49:a2:13:8e:48:d4:c0:f9:1f:c3:83:
         09:a3:5d:79:67:3f:5a:59:d8:62:c2:c6:77:7a:78:4f:f8:43:
         06:e0:8c:8f:fb:ec:ef:15:39:d6:8a:b1:b3:fb:bb:2d:fd:c2:
         57:19:da:9a:f2:02:96:13:72:a4:82:c5:3a:bd:01:5b:8f:35:
         99:14:50:b3:12:bc:fb:24:a1:f9:27:d3:31:83:56:b8:9a:f1:
         c9:06:23:80:5b:80:29:f4:55:1a:74:78:9f:83:63:94:05:a0:
         5f:2c:6c:b7:40:f8:be:7f:5f:04:e5:f8:3a:84:f8:51:af:4d:
         47:67:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:45:53 2026 by rpki-client