This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          IAq5tFzOiPontcXdtnriH6g8WsTE/5gKJ91Bdvo8PPA=
Subject key identifier:   2F:9A:02:21:C3:B1:99:06:A6:1A:B9:43:20:75:46:88:F0:D0:A1:87
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          0127
Signing time:             Sun 25 Jan 2026 03:52:23 +0000
Manifest this update:     Sun 25 Jan 2026 03:52:22 +0000
Manifest next update:     Sun 01 Feb 2026 03:52:22 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: eCVPl+TqRKbrSGPD5Y2qTtc0TQtx+JJf7yZLg+k6nL0=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Jan 25 03:52:22 2026 GMT
            Not After : Feb  1 03:52:22 2026 GMT
        Subject: CN=69759377-f7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:58:3d:07:ba:b0:97:d6:1c:ba:12:5c:2f:
                    7e:5e:1e:29:32:6b:b4:90:d6:bf:01:17:bb:3c:34:
                    7e:b2:c9:13:f8:d3:21:38:f7:f5:ea:c8:27:87:df:
                    fd:fc:1d:0c:17:31:05:5c:cd:0a:e1:70:45:0a:e1:
                    90:3b:2e:37:eb:44:15:ed:2d:87:a7:13:a1:15:43:
                    45:7f:b7:e6:90:a2:dc:64:ac:f1:a9:8d:3a:c7:78:
                    9d:10:65:04:01:79:11:13:e3:a9:14:80:54:ef:98:
                    64:10:c1:3e:11:d3:ec:0c:e7:dd:2b:23:19:8c:d8:
                    2b:15:c9:e8:c7:e7:fd:ee:ab:76:75:bf:85:9e:9f:
                    b1:8d:5a:d3:e1:71:b5:03:1b:07:3d:63:61:7d:46:
                    ab:42:62:38:0d:57:33:49:7d:ce:cb:57:de:34:96:
                    b0:e4:7f:05:ca:21:c1:52:94:cf:aa:c9:25:23:d7:
                    3a:16:c5:64:cb:89:b5:5f:7c:26:ea:2f:34:5d:16:
                    c0:ac:89:8a:59:92:bd:bf:f6:dc:ab:1d:86:0a:b8:
                    5d:ec:6a:a4:76:56:24:14:3b:ed:b1:37:be:66:05:
                    c7:ef:1e:da:99:37:e4:f5:e1:c5:36:ad:17:b5:bd:
                    d9:03:2f:34:0f:d3:38:38:c8:85:c4:dd:14:a0:d2:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9A:02:21:C3:B1:99:06:A6:1A:B9:43:20:75:46:88:F0:D0:A1:87
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:a7:87:a3:35:4b:ea:99:b1:3d:74:56:23:29:42:f6:7d:
         5b:60:75:d6:f1:ab:11:9a:f6:23:8b:60:13:86:a5:3b:ae:5e:
         18:6b:3e:49:97:55:73:66:22:48:e7:29:8a:0c:44:41:1e:cc:
         b2:b0:6e:0b:bc:9a:b3:c6:a1:0b:b3:79:60:3d:48:ee:1e:37:
         bc:96:d2:4e:df:6b:5a:e1:28:65:d2:0f:30:d2:78:e0:bd:a9:
         a7:47:5c:03:9f:b2:b2:a5:f7:d5:ad:39:d4:b9:24:1a:93:77:
         61:7e:4a:82:54:e9:c3:24:23:84:fa:6f:d4:5f:c7:37:fd:31:
         54:e3:ee:27:b5:42:db:96:05:8c:85:f9:99:e8:36:51:51:37:
         57:c7:43:f2:e3:7b:53:d6:7f:c1:62:5a:18:ff:41:3b:ac:05:
         6b:54:17:95:2d:15:61:12:a2:75:a1:63:71:16:cf:a1:01:60:
         e6:b4:2d:d2:6b:e3:dd:3b:a9:c7:86:9c:36:a2:43:20:60:f5:
         1f:e6:8e:f7:0f:51:20:b7:9d:44:e7:f7:e3:71:47:67:a0:b5:
         94:fd:7b:15:f2:0b:ae:3c:b7:43:88:2f:46:bf:a4:39:c6:34:
         b5:09:ac:ca:84:15:0b:b3:8c:d9:22:fa:1f:72:19:d7:c9:db:
         a4:c5:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:09:24 2026 by rpki-client