This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          Ni3KmpKbOZsnDqgtXSj0IMQmdyVU7NOAT+1dJgJswT8=
Subject key identifier:   23:14:6B:D5:0F:C2:D7:6F:25:11:71:88:1F:62:00:C9:71:03:AB:A9
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          E7
Signing time:             Sun 25 Jan 2026 04:40:45 +0000
Manifest this update:     Sun 25 Jan 2026 04:40:45 +0000
Manifest next update:     Sun 01 Feb 2026 04:40:45 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: dIRccJ5bjHuj7FWrvcTBU8x9g7jJRLllIujQ0tqPIo8=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: AKBTFuYWF0QJYhEYy3kesNey7V4DUjbDl4ck/CpF7wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Jan 25 04:40:45 2026 GMT
            Not After : Feb  1 04:40:45 2026 GMT
        Subject: CN=69759ecd-e68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:00:2f:07:58:1a:7a:93:ff:ef:fe:58:91:
                    20:31:80:e7:b9:4a:c2:4c:35:0c:01:7e:65:e1:a9:
                    73:98:3b:2c:b8:be:7f:55:9a:7d:a3:90:2e:c3:de:
                    16:2f:2f:d7:60:a7:92:9a:fb:3b:00:b1:2c:2f:75:
                    6c:f3:e6:43:52:2f:a3:78:85:70:96:95:23:be:c0:
                    19:b0:23:fd:de:d0:5e:ca:a4:12:7d:83:55:38:c7:
                    54:b7:33:0b:60:82:cf:5d:d7:0a:9b:df:f6:8a:07:
                    f8:09:3e:e8:c1:04:da:5b:16:b1:f6:72:6f:ad:9a:
                    8c:30:ce:5a:b0:c0:f0:b4:75:18:6d:fa:df:b8:a6:
                    66:87:24:27:55:ca:b3:d8:51:4d:89:10:f7:77:0a:
                    53:17:65:72:01:02:16:49:31:8c:9e:fc:bc:a0:bd:
                    09:f7:59:04:5d:26:67:f4:58:46:16:9d:e3:a5:a0:
                    7b:02:0f:d1:a4:6b:b0:31:76:7a:5a:81:86:f8:f3:
                    4f:cf:56:2f:c3:31:51:77:38:83:62:48:72:99:55:
                    2a:03:54:01:6d:07:a2:aa:51:e5:eb:fd:d5:fc:1f:
                    f2:ef:c8:e5:e9:99:3e:29:5c:52:60:d0:41:8f:c7:
                    1e:46:79:84:8d:4c:67:18:51:9f:a2:1f:2e:66:74:
                    b8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:6B:D5:0F:C2:D7:6F:25:11:71:88:1F:62:00:C9:71:03:AB:A9
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:fe:75:61:b4:ff:ef:7a:96:ad:80:97:c2:cf:c3:a3:19:
         84:c8:d9:33:f3:36:9e:7b:f4:82:1b:66:cb:80:9e:58:93:a7:
         61:b0:8b:4a:a9:d1:3d:5c:c6:25:dc:7c:f3:00:f0:d9:c4:9a:
         b3:59:c0:1a:aa:84:fa:0b:5b:2b:eb:21:9a:80:f1:cd:92:a8:
         86:e2:c5:49:8d:67:14:03:30:5e:c0:14:0e:e4:d1:52:29:a5:
         9a:0a:d6:26:20:3b:d6:9d:12:ac:60:df:d3:39:00:fa:14:81:
         68:ef:b9:a0:51:a5:e0:3f:18:cf:79:69:49:dc:17:bb:f9:64:
         5a:25:f6:94:93:f1:ba:7d:bb:74:b5:0c:30:f4:c8:a3:ee:1e:
         fd:dc:d7:1c:2c:4f:ea:9c:d6:41:9c:9b:38:c8:6e:d0:bc:9a:
         d3:ff:4f:1a:dc:e9:d1:95:a6:87:88:c5:0c:4e:21:c5:68:73:
         25:23:eb:ef:61:a6:ed:1a:62:db:1a:4e:e9:49:81:80:82:6c:
         51:ab:f0:29:55:00:4b:96:c6:58:1d:de:21:25:67:03:a4:88:
         81:32:21:25:c9:25:f5:a1:04:08:06:7d:cb:f4:53:33:82:f8:
         e3:5d:74:05:44:09:66:fc:b6:f6:49:07:b3:72:b4:77:a9:a7:
         95:8a:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:26 2026 by rpki-client