This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File:                     EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier:          g1Jr5J8yrB5+4gVG9DXoaDOX73Hv/JUJZDH+ysg8PSQ=
Subject key identifier:   8B:CE:85:2A:61:A5:1B:7C:BE:C2:0B:E6:7A:3F:20:9B:49:50:83:CD
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number:          0175
Signing time:             Sun 25 Jan 2026 03:06:05 +0000
Manifest this update:     Sun 25 Jan 2026 03:06:05 +0000
Manifest next update:     Sun 01 Feb 2026 03:06:05 +0000
Files and hashes:         1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: 2d8T9Kgejd1K8Pp46uwbsrRiCJaHQWSv+FwM/msbqRg=)
                          2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Jan 25 03:06:05 2026 GMT
            Not After : Feb  1 03:06:05 2026 GMT
        Subject: CN=6975889d-f198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:40:76:3d:3f:3f:42:59:cc:97:48:4d:fa:a9:
                    48:06:c4:27:a3:32:43:59:79:f8:35:8d:b2:44:28:
                    ad:2e:10:6a:03:e9:1b:6a:39:a1:78:a3:78:4a:db:
                    d2:e3:1f:4a:cb:61:a2:bc:21:16:f2:32:04:a1:69:
                    40:aa:81:03:bf:07:21:ca:86:aa:46:2d:7d:27:22:
                    75:a6:bf:18:9e:36:1a:aa:96:19:01:cb:19:73:c1:
                    b5:f9:43:26:30:7c:ce:2a:7b:83:9e:80:de:bf:eb:
                    4b:5b:da:59:6c:36:0c:cc:ac:66:85:f4:b2:19:1c:
                    a5:4a:85:48:4f:05:9a:d7:bc:d7:e4:ff:78:8a:88:
                    c5:b9:e4:aa:ad:ac:fd:95:c6:29:cf:67:e3:c0:2e:
                    bf:ff:99:f1:5e:19:dd:a5:9a:0e:33:e9:5e:ec:e7:
                    3d:81:91:c0:62:49:11:7f:62:91:c8:2a:ab:e5:b8:
                    02:23:63:36:74:3c:5b:01:7e:f8:15:50:56:71:37:
                    a1:70:e7:52:ab:4b:7d:33:5f:e7:4c:60:9e:16:a6:
                    e3:f9:45:17:e7:2a:cc:5b:01:98:8a:66:02:b2:c9:
                    d3:69:e6:2d:71:3d:c4:20:42:06:df:20:2f:54:d5:
                    ae:7b:92:16:5a:05:2e:d5:66:03:b9:9e:a8:a7:34:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:85:2A:61:A5:1B:7C:BE:C2:0B:E6:7A:3F:20:9B:49:50:83:CD
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:b4:1e:a5:d4:43:39:5f:02:b6:94:99:9d:a1:2d:24:7b:
         89:6e:a0:d0:61:0b:d4:33:7d:36:d8:ed:af:b1:9d:b7:39:16:
         19:51:e0:1c:0b:a8:22:a8:d7:6c:80:3a:4d:81:53:f7:cd:1b:
         e8:ad:e1:1a:13:02:73:97:99:ed:66:26:6f:7d:b5:06:6e:ee:
         e4:51:d0:d6:9f:a8:1c:df:9d:d8:4c:ae:7a:87:92:23:6a:b0:
         74:68:c1:eb:c2:ea:fe:25:6a:3b:2a:ff:64:89:6e:60:66:97:
         2f:22:ce:05:46:4d:48:84:a1:fb:45:03:d4:ab:21:8e:75:4a:
         eb:5e:a4:99:56:2e:15:e5:e4:47:6b:9f:32:42:c4:91:38:0c:
         da:0e:27:36:ce:b7:82:e3:e4:6e:77:32:18:26:81:8c:aa:5d:
         a8:77:72:bb:ad:b2:d2:ce:ff:4c:b6:81:4f:bb:d8:c3:0b:81:
         60:7f:28:00:0b:5d:99:f8:5b:bf:de:7e:00:a3:97:36:e1:25:
         14:ad:88:a2:16:6f:f1:50:11:6c:ce:69:80:cb:4a:6d:ba:a8:
         c0:66:08:b2:7f:a0:08:74:71:b1:72:b8:52:0a:6c:a3:b0:4c:
         1f:56:a0:9f:f3:e3:08:70:e8:23:17:c1:86:fd:cc:2d:ca:c7:
         7a:6b:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:50 2026 by rpki-client