This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
File:                     EQTOLG2R752aM5VvBzHZ4j8Tr74.mft (raw, json)
Hash identifier:          8MjJmBpkIYZbmNPiClSpolNWqGJjbgZnPk1qkCy3VNc=
Subject key identifier:   62:2A:74:C6:66:D6:C8:D0:A3:C3:D5:0C:8C:5B:88:15:EA:40:07:68
Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE
Certificate issuer:       /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
Manifest number:          0257
Signing time:             Sun 25 Jan 2026 01:02:09 +0000
Manifest this update:     Sun 25 Jan 2026 01:02:09 +0000
Manifest next update:     Sun 01 Feb 2026 01:02:09 +0000
Files and hashes:         1: EQTOLG2R752aM5VvBzHZ4j8Tr74.crl (hash: 1C6NTtRT1OEe1T0I8Wo68PXCooQrLkuutt5bzEezgDc=)
                          2: 4B9461EE360211F0B340176EC4F9AE02.roa (hash: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs=)
                          3: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (hash: PyeUHh2Ng6SJ5El0I6XUEocd+w1I2M5sfj3R1NBqgdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl
                          rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE
        Validity
            Not Before: Jan 25 01:02:09 2026 GMT
            Not After : Feb  1 01:02:09 2026 GMT
        Subject: CN=69756b91-4680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:ef:b9:e4:6f:05:82:07:09:ed:87:05:61:
                    82:ba:b1:f6:c5:7a:04:16:76:fb:96:f7:2b:5e:3d:
                    28:33:cd:16:ca:f9:a5:e1:f1:68:49:0a:0e:40:e4:
                    61:b5:2e:10:3c:f0:58:98:6a:c9:2c:ec:93:b9:bf:
                    4d:8c:fe:11:7a:c0:0c:c8:7d:0b:28:26:86:a1:c4:
                    3c:0a:a5:24:a1:87:29:81:18:e1:e6:d0:c5:de:a0:
                    4c:14:43:ef:7b:a0:ff:42:c7:78:6f:97:e2:15:d5:
                    b9:cb:8a:e7:27:a0:c3:a5:e6:82:bc:2b:65:c8:c0:
                    61:51:ee:b0:b5:78:42:9d:dc:65:41:6c:e5:cf:9b:
                    e1:88:43:d5:90:77:dc:f7:44:8a:16:dd:d1:81:b4:
                    d3:cb:ba:2d:61:3a:9c:32:2e:5a:f6:a8:24:bd:db:
                    d5:d4:ab:6b:fb:87:0b:9b:8f:5b:b5:5c:17:ef:a1:
                    d2:11:7c:76:e7:23:89:2b:b1:d1:9f:77:58:2f:ee:
                    a1:a6:16:0e:7c:90:38:6a:45:f9:c0:03:9a:8d:a2:
                    7c:e5:cd:42:9f:3e:40:ff:a4:ca:49:6b:74:79:04:
                    a1:f2:08:1a:e1:03:72:d7:a5:65:09:50:87:f8:7f:
                    92:1a:b5:b5:3d:9c:4f:ba:45:a3:12:19:88:2f:26:
                    79:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:74:C6:66:D6:C8:D0:A3:C3:D5:0C:8C:5B:88:15:EA:40:07:68
            X509v3 Authority Key Identifier:
                keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:45:28:d7:ed:34:66:79:b5:4b:ce:37:92:df:60:e6:bb:
         ab:52:73:0a:e5:04:5c:11:b9:0a:9a:69:0f:27:bb:ba:31:9c:
         41:ae:65:cd:62:30:aa:0b:d9:4e:d3:e3:62:87:ac:da:d1:e4:
         d3:8c:79:64:18:2a:dc:fa:ae:de:65:7a:25:32:05:d1:9c:d3:
         b8:30:4c:fa:06:6a:1e:0d:a2:73:9c:76:ec:84:94:0d:85:5b:
         4a:44:cd:2f:c9:6f:c6:3b:36:00:4a:47:3b:fd:47:c4:51:67:
         e7:b6:fe:e3:9a:66:d8:9f:4e:a0:b1:cd:f8:f6:de:bd:d1:b4:
         3f:33:d3:31:b1:b3:b9:76:8b:e3:e7:ad:8c:93:a8:6d:5e:e2:
         59:33:67:cd:0c:27:e6:c1:08:52:6f:d8:45:2a:9a:02:95:6f:
         40:01:92:a5:47:7c:d0:c3:21:8b:45:2e:f8:7d:4d:22:d2:00:
         47:37:40:d3:de:78:98:67:86:93:3a:76:60:a7:c2:fd:46:74:
         23:89:a1:2f:74:84:a1:78:be:35:ef:8d:44:6f:88:a8:c3:51:
         0f:18:23:f9:61:67:47:91:ff:79:ba:da:d2:41:5c:7f:90:3e:
         04:ac:13:eb:20:2c:d1:cd:80:6b:a3:cd:10:09:9a:cf:19:74:
         a7:e3:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:18 2026 by rpki-client