This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          T39DvTzP4dfQVCcfBdi+BAn/qlYr/vPxfVPBHBTD1kU=
Subject key identifier:   28:55:F1:71:D4:FA:67:8C:BC:9D:16:4A:37:1D:4A:01:ED:F7:FD:04
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          E1
Signing time:             Sun 25 Jan 2026 04:46:30 +0000
Manifest this update:     Sun 25 Jan 2026 04:46:30 +0000
Manifest next update:     Sun 01 Feb 2026 04:46:30 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: Uit/82BNDHRCGVc+TKofmvxFJ3S2L//QrmcMt2OJJDQ=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: uf3h7x4X3w9L0qxsA/csqdSdJ4iieOaLJOms8tSWtWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: Jan 25 04:46:30 2026 GMT
            Not After : Feb  1 04:46:30 2026 GMT
        Subject: CN=6975a026-c0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:4f:af:05:e4:27:a3:d8:7a:23:ba:03:59:
                    01:1a:14:16:38:39:75:3b:a8:67:0b:1a:a8:a6:0a:
                    21:a2:d9:13:e1:ba:98:49:fd:8c:f5:87:fe:0e:f6:
                    e8:61:a4:c5:e2:ef:95:0a:3f:0e:69:6f:89:3b:67:
                    85:c8:01:ac:50:62:92:37:36:46:50:08:8f:96:7f:
                    c5:62:75:41:c2:ee:f6:2b:b6:60:1c:45:f5:1d:01:
                    0f:2d:65:15:70:51:e9:8e:38:18:72:9e:83:2a:1c:
                    17:62:7b:45:95:28:8f:c1:52:d7:76:0f:03:5a:09:
                    33:4e:93:b9:c9:75:c2:f0:d9:df:55:e1:80:4f:44:
                    f8:d0:64:45:67:11:35:ae:d3:fe:24:c1:2d:cc:42:
                    b1:c9:7a:4b:19:02:88:8b:b6:46:05:24:56:e2:b2:
                    f0:22:49:c1:75:1a:04:47:c7:24:cd:04:1d:63:d9:
                    6a:07:32:07:29:9f:03:6b:b8:83:f5:50:5f:5d:69:
                    cb:ee:ee:73:ae:87:27:62:90:65:13:a6:30:59:21:
                    20:20:66:d5:95:e5:0e:0e:90:99:a4:01:53:6d:60:
                    d9:37:b4:c3:f5:95:16:93:30:11:a1:21:a6:94:b1:
                    bb:36:46:74:80:e5:0c:be:b9:ee:c8:41:bc:58:53:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:F1:71:D4:FA:67:8C:BC:9D:16:4A:37:1D:4A:01:ED:F7:FD:04
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:bc:9c:8a:74:1b:c3:f8:ac:a1:b4:75:48:fe:2c:55:20:
         ae:fb:f2:51:d3:f3:57:c0:c7:bc:3a:55:f4:a6:ec:c5:3c:50:
         c1:21:11:be:9b:fb:6d:d5:87:1a:58:09:d5:df:5d:53:c1:f1:
         db:4c:06:cd:87:1d:7d:f3:46:80:54:61:e8:10:45:a2:7c:00:
         8d:7c:41:1a:d5:c1:d7:09:8b:f1:87:80:e5:ea:24:0a:5c:60:
         62:c1:e1:c1:96:ba:c4:0a:26:3b:32:d6:6d:4b:b8:0e:65:fc:
         f2:0c:42:fb:9e:15:bc:70:3a:ce:5f:31:ab:89:d1:05:b1:c8:
         f2:19:94:22:dc:97:9d:a0:50:a2:05:57:df:ed:06:08:90:d0:
         7d:33:5f:83:93:15:8d:59:eb:b9:ca:dd:6d:47:73:e8:8c:d6:
         26:82:34:2e:24:d9:de:f9:ff:58:d7:ee:09:82:4a:d3:5a:88:
         23:46:93:71:af:5f:9a:f3:00:57:12:bc:c0:ed:99:dc:cc:84:
         27:93:f7:11:6a:cf:53:c1:f6:dc:1d:25:98:f1:8a:7a:4e:7e:
         13:21:d1:c8:3c:aa:9d:b6:da:62:0c:3d:4d:ba:65:c3:3c:9f:
         1e:13:4e:cc:aa:5d:28:d9:8c:9e:80:74:ce:75:f0:80:b8:a8:
         97:f7:f7:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE5MkMxMTAvBgNVBAUTKDc5MjY4MzgwNkM4QkUzQUMxMzYxNEQzNzVFOTAxOTI3
NDA5OUJDN0IwHhcNMjYwMTI1MDQ0NjMwWhcNMjYwMjAxMDQ0NjMwWjAYMRYwFAYD
VQQDDA02OTc1YTAyNi1jMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlNVPrwXkJ6PYeiO6A1kBGhQWODl1O6hnCxqopgohotkT4bqYSf2M9Yf+Dvbo
YaTF4u+VCj8OaW+JO2eFyAGsUGKSNzZGUAiPln/FYnVBwu72K7ZgHEX1HQEPLWUV
cFHpjjgYcp6DKhwXYntFlSiPwVLXdg8DWgkzTpO5yXXC8NnfVeGAT0T40GRFZxE1
rtP+JMEtzEKxyXpLGQKIi7ZGBSRW4rLwIknBdRoER8ckzQQdY9lqBzIHKZ8Da7iD
9VBfXWnL7u5zrocnYpBlE6YwWSEgIGbVleUODpCZpAFTbWDZN7TD9ZUWkzARoSGm
lLG7NkZ0gOUMvrnuyEG8WFNN/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChV8XHU
+meMvJ0WSjcdSgHt9/0EMB8GA1UdIwQYMBaAFHkmg4Bsi+OsE2FNN16QGSdAmbx7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTkyQy9BNTI4MTREMkE2
MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi9lU2FEZ0d5TDQ2d1RZVTAzWHBBWkowQ1p2
SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZIcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTkyQy9BNTI4MTREMkE2MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi9lU2FEZ0d5TDQ2
d1RZVTAzWHBBWkowQ1p2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvmbycinQbw/isobR1SP4sVSCu+/JR0/NXwMe8OlX0puzFPFDBIRG+
m/tt1YcaWAnV311TwfHbTAbNhx1980aAVGHoEEWifACNfEEa1cHXCYvxh4Dl6iQK
XGBiweHBlrrECiY7MtZtS7gOZfzyDEL7nhW8cDrOXzGridEFscjyGZQi3JedoFCi
BVff7QYIkNB9M1+DkxWNWeu5yt1tR3PojNYmgjQuJNne+f9Y1+4JgkrTWogjRpNx
r1+a8wBXErzA7ZnczIQnk/cRas9TwfbcHSWY8Yp6Tn4TIdHIPKqdttpiDD1NumXD
PJ8eE07Mql0o2YyegHTOdfCAuKiX9/c3
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:32:42 2026 by rpki-client