This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          14BxncpZOeN7XS1QIsUXVx3D0IVisjnc9lhAVVROb3s=
Subject key identifier:   F8:B1:C7:BC:D9:2C:C6:F8:B4:42:12:5B:5F:D0:3D:0C:B8:73:9B:E2
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1D7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1D76
Signing time:             Sat 24 Jan 2026 15:56:16 +0000
Manifest this update:     Sat 24 Jan 2026 15:56:15 +0000
Manifest next update:     Sat 31 Jan 2026 15:56:15 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: +0vDbsHBe2WwUa+prDoL+oRsQamGxOIyyNxKKI1L01E=)
                          2: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=)
                          3: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=)
                          4: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7551 (0x1d7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jan 24 15:56:15 2026 GMT
            Not After : Jan 31 15:56:15 2026 GMT
        Subject: CN=6974eb9f-94c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:19:92:e6:95:db:a9:59:c3:92:43:ad:72:
                    4f:b6:10:ef:f3:be:65:5e:d3:f6:21:ce:46:71:f4:
                    cb:c2:74:5e:76:6a:25:91:cc:1a:7e:3b:b6:1e:31:
                    25:37:75:26:22:7c:6f:1f:19:f7:3b:40:2d:f3:06:
                    a5:e6:e4:71:c8:11:56:8b:9d:25:ea:99:54:c5:57:
                    48:df:d0:36:44:31:ed:be:2b:08:9c:d7:cc:c9:af:
                    8d:bb:a8:56:0f:d1:67:94:98:11:63:de:55:51:12:
                    88:9e:f5:28:ca:51:f7:9c:76:a6:f0:d6:f3:d2:7b:
                    f7:1b:fb:03:72:45:ef:fe:9f:ad:1e:1b:d7:87:c3:
                    f8:47:be:13:32:53:d6:b3:1c:4d:c6:16:d0:b2:6f:
                    de:7d:35:d5:6b:87:56:5f:02:4d:1d:f0:3c:2b:30:
                    d3:64:e2:54:d3:75:77:22:e7:62:e0:c8:49:d6:f9:
                    6a:cb:27:41:58:74:6c:fd:d6:ab:ca:25:3c:b4:b8:
                    1b:20:e1:32:3d:85:a6:82:81:16:9b:62:ad:91:00:
                    85:de:88:e4:ae:3f:90:d2:2e:82:6c:4d:9e:4c:16:
                    bd:c6:b4:9c:44:39:de:0f:dc:78:4a:ee:d5:ef:93:
                    f3:82:15:96:e3:95:be:93:a6:46:cf:4a:f6:ed:cf:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:C7:BC:D9:2C:C6:F8:B4:42:12:5B:5F:D0:3D:0C:B8:73:9B:E2
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:e1:82:03:43:bd:40:c8:57:3f:d8:fd:13:74:6f:fe:80:
         f5:85:85:b4:c5:52:1b:3c:a2:9a:31:dc:bc:5c:61:7a:fe:50:
         16:41:12:6b:11:86:e2:9f:83:0a:1a:72:f2:68:49:8b:a7:6b:
         7b:ff:00:27:14:02:70:11:58:47:73:c1:7d:b8:a1:54:70:82:
         9a:0c:b2:0c:f6:cc:dd:0d:bf:40:d9:83:9c:25:05:a4:ff:3a:
         ab:09:98:7f:ca:34:46:23:79:59:e4:30:ec:28:de:ee:a2:a2:
         3a:a6:cb:ab:e3:4f:24:d3:5a:c0:8f:3c:ff:07:90:74:4b:63:
         bd:ab:a9:31:0a:10:39:41:33:35:48:ff:64:28:a6:26:1f:76:
         75:00:cc:28:00:ae:e5:d5:cb:1b:83:be:f4:46:6c:27:28:7c:
         71:86:e3:06:41:76:38:31:85:b0:61:53:cd:6c:e5:06:c5:3a:
         77:fb:8d:32:10:a2:a1:27:f9:83:c7:43:0f:25:1b:18:89:76:
         41:15:b2:cf:50:c7:33:16:00:eb:2d:94:1e:30:db:c3:31:cf:
         bb:4c:a7:58:7e:d3:30:91:74:e0:34:f5:3f:83:89:05:1a:a6:
         9d:64:c8:ff:75:d5:1c:cd:eb:77:49:5a:34:8d:79:9a:53:a9:
         74:fc:e1:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw
OThDOUNCM0QwHhcNMjYwMTI0MTU1NjE1WhcNMjYwMTMxMTU1NjE1WjAYMRYwFAYD
VQQDDA02OTc0ZWI5Zi05NGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJwZkuaV26lZw5JDrXJPthDv875lXtP2Ic5GcfTLwnRedmolkcwafju2HjEl
N3UmInxvHxn3O0At8wal5uRxyBFWi50l6plUxVdI39A2RDHtvisInNfMya+Nu6hW
D9FnlJgRY95VURKInvUoylH3nHam8Nbz0nv3G/sDckXv/p+tHhvXh8P4R74TMlPW
sxxNxhbQsm/efTXVa4dWXwJNHfA8KzDTZOJU03V3Iudi4MhJ1vlqyydBWHRs/dar
yiU8tLgbIOEyPYWmgoEWm2KtkQCF3ojkrj+Q0i6CbE2eTBa9xrScRDneD9x4Su7V
75PzghWW45W+k6ZGz0r27c/5+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPixx7zZ
LMb4tEISW1/QPQy4c5viMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD
QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt
MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbK+GCA0O9QMhXP9j9E3Rv/oD1hYW0xVIbPKKaMdy8XGF6/lAWQRJr
EYbin4MKGnLyaEmLp2t7/wAnFAJwEVhHc8F9uKFUcIKaDLIM9szdDb9A2YOcJQWk
/zqrCZh/yjRGI3lZ5DDsKN7uoqI6psur408k01rAjzz/B5B0S2O9q6kxChA5QTM1
SP9kKKYmH3Z1AMwoAK7l1csbg770RmwnKHxxhuMGQXY4MYWwYVPNbOUGxTp3+40y
EKKhJ/mDx0MPJRsYiXZBFbLPUMczFgDrLZQeMNvDMc+7TKdYftMwkXTgNPU/g4kF
GqadZMj/ddUczet3SVo0jXmaU6l0/OHE
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:11:41 2026 by rpki-client