This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
File:                     eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json)
Hash identifier:          4ZW0RcVO7npFOLzjAshBftFyGjuU0gJWcTnzlEnkRAw=
Subject key identifier:   50:9F:CD:41:B9:11:43:97:02:30:86:F4:E0:DE:4E:B7:3C:60:F1:D1
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Certificate issuer:       /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
Manifest number:          BA
Signing time:             Fri 23 Jan 2026 05:15:57 +0000
Manifest this update:     Fri 23 Jan 2026 05:15:57 +0000
Manifest next update:     Fri 30 Jan 2026 05:15:57 +0000
Files and hashes:         1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: nh309pwDdhP2HHjSwxvLy7D0vLBt85S1HqcpGQaAr0c=)
                          2: 3317EBC2B68611F0BC9B1221C4F9AE02.roa (hash: QaG7hFyUa++2CozFj5Q36xlh1YQYBvCOe5CqGAdapx8=)
                          3: D02660DECE9A11F08236E30AC4F9AE02.roa (hash: V+ACuG3nW2tKEZbcmdL8KIbylIYzMpqsLVZdufTuTYA=)
                          4: 8C42B9F4CE2B11F0899B7C13C4F9AE02.roa (hash: EVNLBppAXZj6hQlNnHNmYNZlrW1a/lzCWpVHtVOHtsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
                          rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
        Validity
            Not Before: Jan 23 05:15:57 2026 GMT
            Not After : Jan 30 05:15:57 2026 GMT
        Subject: CN=6973040d-f0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:e9:51:3a:1c:34:84:80:19:1d:a7:31:6e:
                    a4:90:7f:c0:1f:cb:76:ff:5b:78:2f:a3:b9:27:45:
                    b4:08:16:d0:e2:a1:85:f5:fe:a8:44:f9:c2:10:01:
                    30:ea:56:8c:fb:94:9c:67:f4:b6:10:3d:f6:3a:98:
                    81:c2:c4:89:21:16:7b:2e:13:db:a4:be:f4:29:03:
                    ad:84:64:e6:3d:4f:c9:90:f2:e7:a0:02:e9:55:5b:
                    64:87:20:d9:22:8e:87:c1:c2:cd:32:29:ff:19:56:
                    fc:c8:0b:1c:6e:50:3b:ed:76:92:43:ce:70:e4:68:
                    19:54:c7:e7:50:4d:39:6c:cc:13:c7:37:c4:56:68:
                    c0:cb:b2:84:64:e7:9c:8a:af:6a:75:43:2a:49:a5:
                    b2:f1:b5:99:7f:99:a1:00:22:14:05:e5:cb:04:1a:
                    49:6b:3b:80:3a:39:11:32:37:78:3e:b5:d6:d2:d2:
                    0e:f1:dc:0c:33:d7:33:bc:86:53:26:8f:2e:18:44:
                    91:b6:d1:fd:e2:2a:4a:19:ef:a3:92:91:b2:bf:af:
                    51:05:9f:97:8d:0a:03:d2:80:12:f1:91:f9:1a:c1:
                    b0:d5:ec:05:cb:0f:72:82:2a:a8:92:84:93:68:a5:
                    de:1a:cc:88:7c:47:65:b4:e5:6c:49:61:7f:47:13:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:CD:41:B9:11:43:97:02:30:86:F4:E0:DE:4E:B7:3C:60:F1:D1
            X509v3 Authority Key Identifier:
                keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:5e:55:4c:0b:5c:db:f9:99:39:b3:9d:a3:e3:87:f8:e9:
         36:af:65:42:56:58:0c:a2:93:2f:57:41:36:95:4a:94:82:fa:
         49:06:0a:af:cc:07:77:7a:ff:3c:ab:19:6d:f8:9f:e4:17:53:
         70:17:5a:1e:38:91:f0:22:82:c1:8d:9e:9e:6c:29:33:f9:c0:
         31:b7:ec:d2:b2:67:67:99:f8:09:99:8b:4a:f6:b2:7b:2c:b7:
         ca:81:62:91:c2:c1:65:0f:c7:13:33:1b:b1:a4:d0:29:7e:c3:
         00:72:66:0d:60:fe:5d:cc:20:6b:cc:53:e9:8a:81:69:17:86:
         b1:e4:dd:2d:94:a0:2b:51:70:cf:10:ab:cc:29:cf:fb:e2:f3:
         0a:84:99:d7:5d:c6:c3:17:f4:fb:e7:c8:b8:62:be:5d:4d:8c:
         c8:97:f6:8e:82:74:9e:00:09:f5:95:89:01:84:e8:3d:8a:23:
         38:20:ff:00:cf:a6:95:16:44:6d:51:39:7d:a8:30:a8:d4:e9:
         85:d8:ee:a0:9c:bf:5c:90:30:3b:b9:2d:49:4c:9a:36:63:cf:
         ef:88:96:f8:2e:e3:20:52:98:c0:7b:4c:59:3f:6a:84:4e:33:
         cc:86:82:f6:09:d0:e3:dc:34:8e:df:f7:62:0d:e6:a6:69:87:
         de:d7:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:53 2026 by rpki-client