This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
File:                     EU2YjjFR6VKba6150-lUNuU34SM.mft (raw, json)
Hash identifier:          K9vEnRLoXU6musDkOTqKBUGju9naS8N2QpxBK2rGiuA=
Subject key identifier:   AA:DC:57:CE:36:55:E8:9A:17:0C:31:5F:50:F5:E6:CA:A7:F6:98:31
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Certificate issuer:       /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial:       0878
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
Manifest number:          0861
Signing time:             Sat 24 Jan 2026 20:10:03 +0000
Manifest this update:     Sat 24 Jan 2026 20:10:03 +0000
Manifest next update:     Sat 31 Jan 2026 20:10:03 +0000
Files and hashes:         1: EU2YjjFR6VKba6150-lUNuU34SM.crl (hash: bhRU2Etouj/NSPDmZOUcI9UMvhveb4ipIso7r4RepN8=)
                          2: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (hash: VOepHc1HyCfrEW738kMBAMUMo6FUtXYjckaaoVEy+k0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
                          rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 20:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2168 (0x878)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
        Validity
            Not Before: Jan 24 20:10:03 2026 GMT
            Not After : Jan 31 20:10:03 2026 GMT
        Subject: CN=6975271b-8bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:0f:13:17:a4:fa:3f:59:04:72:49:ad:fb:
                    4d:de:f4:f1:ed:c7:54:d3:a1:52:18:5b:be:52:67:
                    38:c8:52:00:96:33:c4:fb:e1:66:87:bc:45:6b:cb:
                    a9:eb:ea:a5:d7:a6:a2:05:e8:b1:1a:a0:89:f4:ba:
                    ff:a7:84:1a:5c:eb:d4:22:05:07:d2:37:84:a4:62:
                    73:84:94:4f:44:8a:2b:cc:26:8c:f0:32:b2:7a:92:
                    88:fc:33:61:c9:9a:df:c9:e2:c7:94:f9:60:0c:6d:
                    48:77:9b:df:1a:1f:54:30:8c:dc:46:7f:86:40:13:
                    47:1c:c6:e5:02:1d:d0:c9:6f:35:a5:bb:b3:71:48:
                    52:52:49:3d:eb:fe:bd:3b:ad:22:cd:85:96:5f:5f:
                    ad:4c:63:05:0a:4a:1a:18:d7:18:ac:f3:7d:6d:b4:
                    eb:9e:66:46:68:5a:4b:14:da:87:1d:52:82:01:fc:
                    13:40:c5:0a:52:37:ed:ee:09:5b:01:20:a5:bb:86:
                    a8:0f:02:09:e8:0f:5d:bd:8b:de:6e:e5:74:92:f0:
                    5a:1c:3f:f9:14:54:53:05:20:38:e4:93:bd:ee:f4:
                    3d:a5:8c:e3:f9:49:c1:e0:23:db:36:8b:91:36:e7:
                    6b:68:c2:90:f9:49:40:ac:16:3c:fe:a5:85:0b:ac:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:57:CE:36:55:E8:9A:17:0C:31:5F:50:F5:E6:CA:A7:F6:98:31
            X509v3 Authority Key Identifier:
                keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:cc:1e:a6:dc:c3:92:57:0d:31:0b:90:9c:d4:13:9c:3c:
         2a:46:b7:87:23:13:fc:c2:82:6f:51:3a:52:22:bf:53:e7:1f:
         f9:94:36:c4:08:ce:fe:e6:a6:07:2c:58:b0:06:71:60:40:f7:
         39:21:55:26:a8:91:3a:1a:72:00:b0:d2:f8:a7:9f:36:9d:19:
         55:89:8b:55:9c:72:a6:a9:ac:4b:dd:92:74:00:30:6f:bf:0f:
         84:49:0d:1c:c4:5c:ab:0f:15:d6:75:4e:2f:2a:6f:2b:b7:89:
         e3:85:5d:7d:f0:b6:03:54:f3:7b:bf:e9:66:3b:57:ea:71:d5:
         37:85:34:5e:be:01:39:83:0a:a0:23:54:2e:d4:eb:04:bb:e8:
         3c:bf:b0:c3:d9:e5:42:42:4d:95:71:ed:fb:81:79:2c:e9:3a:
         b5:26:06:ee:7e:d0:9e:f8:81:7f:08:26:93:6d:70:b8:62:d4:
         a2:d7:90:2d:0f:5c:53:2a:e4:5b:8d:3d:e0:50:d0:ee:05:b2:
         c0:22:59:ea:e2:4e:c3:71:f8:ad:23:46:b7:f4:39:34:91:1e:
         6c:fc:9c:41:f8:79:bc:63:d7:b8:63:04:e1:be:23:21:e6:86:
         a8:66:c1:4c:1e:b8:cf:13:03:59:83:ca:41:48:f6:b2:b8:eb:
         55:4a:c2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:02:40 2026 by rpki-client