This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
File:                     EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json)
Hash identifier:          UtRFPsd4CIKkhONuKQIAtjt691zd3ijF7JVHZqpnwdY=
Subject key identifier:   8B:BA:44:AB:BF:48:40:EA:F3:22:DB:5B:54:F3:6B:EF:A9:BC:FE:E7
Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA
Certificate issuer:       /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
Manifest number:          94
Signing time:             Sun 25 Jan 2026 05:36:56 +0000
Manifest this update:     Sun 25 Jan 2026 05:36:56 +0000
Manifest next update:     Sun 01 Feb 2026 05:36:56 +0000
Files and hashes:         1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: UN20DEpO5Gf56KUr6ZIvLKqF7XFZqflGeuGle/G3nCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl
                          rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 05:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA
        Validity
            Not Before: Jan 25 05:36:56 2026 GMT
            Not After : Feb  1 05:36:56 2026 GMT
        Subject: CN=6975abf8-a296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:53:be:e0:f8:b5:00:70:45:cf:47:fb:2c:
                    da:97:b9:cb:f3:ad:f3:0c:d6:a8:79:d5:4c:cd:72:
                    4d:e2:9d:f2:ef:08:f7:2d:f1:8b:84:fc:7d:1c:1e:
                    19:66:69:2d:29:48:19:4a:ab:86:82:e7:87:bf:40:
                    fb:e6:f0:a7:56:99:13:17:3c:03:a1:84:ae:7b:79:
                    19:15:24:11:78:d2:9c:1b:e6:93:e3:96:15:80:56:
                    13:17:58:6f:2b:88:2e:34:14:a1:a5:1d:f0:5d:d1:
                    f0:6f:2f:f4:14:18:f7:fa:5b:9f:67:b8:98:82:60:
                    22:ab:86:60:f2:d1:3a:05:48:5c:f5:b7:4a:df:7d:
                    42:08:af:e9:c7:9e:43:c7:fe:8a:f1:9a:36:25:fa:
                    83:8d:43:a6:6d:27:00:24:bf:3e:fb:7b:19:23:05:
                    74:f6:c2:0d:bc:83:9a:f3:44:ef:00:98:d3:18:fb:
                    7f:d0:4f:e1:48:e1:9f:fd:78:96:af:ff:ea:ed:e1:
                    8b:45:a8:f6:e6:5c:de:bc:e8:98:1e:e6:1b:0b:cf:
                    4b:cb:5c:46:67:56:c0:89:45:91:21:80:f5:95:fc:
                    c8:aa:ce:f3:f8:27:02:71:00:31:87:7f:5f:e2:1b:
                    e2:c5:fc:bf:0f:27:59:97:c3:6d:3f:02:ed:12:bf:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:44:AB:BF:48:40:EA:F3:22:DB:5B:54:F3:6B:EF:A9:BC:FE:E7
            X509v3 Authority Key Identifier:
                keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:b4:35:2a:9b:3a:6c:fb:1e:ab:18:03:83:32:ac:36:fc:
         f8:bb:cd:43:7e:75:67:c5:8e:a1:2c:4c:e2:f2:2d:b0:36:f1:
         d3:8a:52:8e:a3:53:c7:fc:43:68:28:d3:fc:7a:7c:3f:42:ae:
         24:44:08:b0:5c:c3:a9:bd:30:15:3e:4a:5f:a8:1f:c5:29:3f:
         b9:f0:bd:24:b3:22:55:ec:48:5a:eb:54:03:37:3d:1f:9c:ab:
         37:5b:0c:16:04:84:d7:a3:ea:59:02:b2:90:c4:fa:ba:da:48:
         3a:52:32:f9:5c:60:56:84:e3:ae:f0:20:3a:c4:5b:77:a6:19:
         ad:9d:97:0d:99:0b:73:f7:f6:b7:0f:20:fe:9d:aa:89:3c:7f:
         16:bd:a7:0e:61:3b:7d:99:96:b2:7e:6d:70:9c:58:92:43:2c:
         26:d5:cc:44:40:52:46:cd:b8:c0:e2:5e:ba:f6:20:13:94:67:
         3b:68:22:91:fc:51:6d:29:f1:f5:7a:bd:a9:90:31:bd:c9:eb:
         15:11:4a:cc:07:97:19:7c:df:1b:9a:26:d9:33:a4:75:f9:a8:
         f3:6e:84:6d:c2:94:ea:37:ae:9c:86:2d:b5:9c:fe:35:66:b3:
         6d:e1:31:3b:06:74:c8:c4:d6:b2:de:71:47:96:39:d5:b4:df:
         24:9c:c1:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZBRkYxMTAvBgNVBAUTKDEyMjM4MDM4NjQzMEFGRDYzRjM2NDk0NDc2NEUxQjM0
MTg2M0QwREEwHhcNMjYwMTI1MDUzNjU2WhcNMjYwMjAxMDUzNjU2WjAYMRYwFAYD
VQQDDA02OTc1YWJmOC1hMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HJTvuD4tQBwRc9H+yzal7nL863zDNaoedVMzXJN4p3y7wj3LfGLhPx9HB4Z
ZmktKUgZSquGgueHv0D75vCnVpkTFzwDoYSue3kZFSQReNKcG+aT45YVgFYTF1hv
K4guNBShpR3wXdHwby/0FBj3+lufZ7iYgmAiq4Zg8tE6BUhc9bdK331CCK/px55D
x/6K8Zo2JfqDjUOmbScAJL8++3sZIwV09sINvIOa80TvAJjTGPt/0E/hSOGf/XiW
r//q7eGLRaj25lzevOiYHuYbC89Ly1xGZ1bAiUWRIYD1lfzIqs7z+CcCcQAxh39f
4hvixfy/DydZl8NtPwLtEr/yBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIu6RKu/
SEDq8yLbW1Tza++pvP7nMB8GA1UdIwQYMBaAFBIjgDhkMK/WPzZJRHZOGzQYY9Da
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkFGRi8zQjdCMzFCNjE0
RDgxMUYwQTM3RUMwNEVDNEY5QUUwMi9FaU9BT0dRd3I5WV9Oa2xFZGs0Yk5CaGow
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkFGRi8zQjdCMzFCNjE0RDgxMUYwQTM3RUMwNEVDNEY5QUUwMi9FaU9BT0dRd3I5
WV9Oa2xFZGs0Yk5CaGowTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKQLQ1Kps6bPseqxgDgzKsNvz4u81DfnVnxY6hLEzi8i2wNvHTilKO
o1PH/ENoKNP8enw/Qq4kRAiwXMOpvTAVPkpfqB/FKT+58L0ksyJV7Eha61QDNz0f
nKs3WwwWBITXo+pZArKQxPq62kg6UjL5XGBWhOOu8CA6xFt3phmtnZcNmQtz9/a3
DyD+naqJPH8WvacOYTt9mZayfm1wnFiSQywm1cxEQFJGzbjA4l669iATlGc7aCKR
/FFtKfH1er2pkDG9yesVEUrMB5cZfN8bmibZM6R1+ajzboRtwpTqN66chi21nP41
ZrNt4TE7BnTIxNay3nFHljnVtN8knMEX
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:05 2026 by rpki-client