This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          mvsyc8+obb5ArTO3N/hQPPEj4kwjQfgsmIYl9C6gQYQ=
Subject key identifier:   37:32:5C:E4:C1:1D:4E:23:98:58:25:BD:CB:70:16:C5:CE:28:ED:3A
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       0671
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          066B
Signing time:             Sat 24 Jan 2026 21:51:10 +0000
Manifest this update:     Sat 24 Jan 2026 21:51:09 +0000
Manifest next update:     Sat 31 Jan 2026 21:51:09 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: 8UaapPc8VFUI2QilI66chZ/vivNwRZ1Wh60VswD6PWE=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: ijiCAPwBqro/NY/HWHS1Qe1Is15S0zP4v93++I4AYLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: Jan 24 21:51:09 2026 GMT
            Not After : Jan 31 21:51:09 2026 GMT
        Subject: CN=69753ece-d5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:b2:60:1e:19:48:79:4b:28:62:a3:76:71:
                    01:4e:67:e1:2e:a8:a9:47:74:26:bb:f2:95:0c:71:
                    1c:90:a8:48:ec:fc:20:9b:08:98:b3:c9:1e:c6:5f:
                    4c:d1:e4:e1:9b:dc:b1:67:60:49:5a:3f:0b:31:2e:
                    59:46:eb:52:98:d4:dc:80:de:89:64:f1:23:fe:0a:
                    9b:34:b0:fc:fd:0d:af:7f:cd:73:40:c2:2e:5d:b3:
                    47:d7:29:87:5e:3c:24:f2:08:b7:46:34:16:4f:78:
                    ae:a1:e3:2c:e0:6b:ee:d6:e7:24:1c:d1:f1:27:24:
                    c5:5c:c8:8f:ef:41:e8:31:80:4c:8f:20:a4:ae:d6:
                    cf:95:43:e9:ac:50:1b:07:8a:04:59:2c:bd:f4:f2:
                    2f:9f:a1:73:0c:13:e5:dc:39:86:6c:6d:6d:28:83:
                    16:75:37:6f:89:7d:3d:e3:45:e0:48:7f:b2:52:0f:
                    a6:15:62:4d:d8:b4:e5:d2:e2:44:3d:6d:88:1d:16:
                    fc:27:d7:9a:fa:79:d1:24:1c:1e:65:18:db:3b:35:
                    82:79:a5:a9:71:61:fa:a2:1d:27:47:9d:b2:54:fc:
                    8b:ee:c9:13:d4:77:ca:56:81:e6:04:3d:0d:51:dd:
                    05:05:94:f7:c3:53:f7:a3:87:5a:c3:69:2f:67:01:
                    7f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:32:5C:E4:C1:1D:4E:23:98:58:25:BD:CB:70:16:C5:CE:28:ED:3A
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:80:f6:eb:e2:4e:dd:3e:3e:4d:ef:e9:90:c8:53:84:1f:c4:
         65:79:68:77:dd:30:fa:8f:37:18:57:35:ac:90:05:1b:0b:06:
         5d:fa:38:45:a0:a2:c9:ce:7d:19:76:63:30:50:78:f9:20:88:
         92:c0:18:dc:22:3f:4d:23:02:53:29:52:f0:12:59:61:f0:dd:
         d7:a7:41:ba:cb:53:92:66:ef:e9:b9:72:40:30:c5:62:e3:79:
         d4:d3:25:37:6f:00:e1:71:17:8e:ab:07:ea:03:d2:6a:f0:97:
         e4:1b:af:9b:f4:d6:aa:27:13:14:97:20:6e:86:14:cd:19:fc:
         94:78:43:8a:c1:0d:35:8f:76:a6:4d:7d:50:92:16:5d:2c:a4:
         86:60:86:23:ce:93:0d:ac:72:80:89:ca:6e:16:ab:d0:e1:48:
         d9:84:c1:a7:4a:bc:b6:8f:e7:f2:14:2b:15:30:aa:45:4d:89:
         e8:78:6e:22:b0:cc:fa:59:87:36:f7:90:67:cb:e8:55:9d:7f:
         de:66:53:12:e9:b1:41:07:ac:15:6c:35:d6:eb:03:b1:b2:9c:
         b5:e0:b3:2d:98:5f:a4:63:89:1e:70:57:47:64:9b:0b:e7:35:
         c8:e2:39:79:a5:fd:a5:5c:c7:a6:d3:ba:8b:53:10:34:cd:c3:
         70:f9:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:44:21 2026 by rpki-client