This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File:                     EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier:          tnPYosqhKyuNt+Rah9IDJYdZs/9pFJyx1R/tJ4laQBY=
Subject key identifier:   89:67:FA:9F:69:71:19:C6:2D:B8:0A:68:FC:46:9E:19:F1:8E:0D:AB
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number:          0110
Signing time:             Sun 25 Jan 2026 04:09:06 +0000
Manifest this update:     Sun 25 Jan 2026 04:09:05 +0000
Manifest next update:     Sun 01 Feb 2026 04:09:05 +0000
Files and hashes:         1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: pRA3IfLTHHSxzCYlBgKiNa+zTrGScxJOfmqEZGg73J0=)
                          2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Jan 25 04:09:05 2026 GMT
            Not After : Feb  1 04:09:05 2026 GMT
        Subject: CN=69759761-aacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:cd:fd:40:55:d7:d6:bb:32:be:72:ab:7e:ea:
                    71:61:2e:1a:eb:84:33:8c:2a:fb:93:8f:c8:c7:cc:
                    e1:be:09:80:d0:a6:22:e0:44:0f:82:de:b5:ac:7a:
                    0b:2b:ad:81:dc:ba:58:93:f2:ab:72:26:bb:62:b5:
                    c6:02:70:04:ee:96:ba:22:88:ae:cb:ac:d1:7a:ed:
                    74:21:1d:65:1a:8a:26:08:58:45:be:29:a5:a8:9b:
                    35:4e:71:03:9f:af:ef:87:63:aa:74:d5:b5:e3:fd:
                    67:c1:2d:73:fe:f2:03:be:57:fa:f8:0b:06:95:83:
                    08:55:62:e4:b8:62:a6:e3:d7:1b:1f:3b:44:17:0b:
                    1e:81:31:66:ae:4e:dd:06:cc:2e:17:e7:50:d0:f8:
                    3d:be:53:59:f1:7e:10:33:d7:ee:74:99:3b:d5:b3:
                    70:c6:c7:ac:23:73:4b:5c:c3:dd:6b:91:d8:2f:db:
                    26:1d:64:9e:19:d4:f5:ab:34:a4:a1:06:54:11:d3:
                    c9:45:d5:b4:08:f1:fe:cb:aa:8c:ab:7b:69:90:38:
                    39:d4:51:89:0e:94:77:39:9b:be:dc:59:2c:72:78:
                    8b:48:8e:52:0f:aa:57:04:1a:75:8a:f9:c4:47:7d:
                    87:60:ea:77:2b:54:76:6a:13:23:63:bd:30:73:83:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:FA:9F:69:71:19:C6:2D:B8:0A:68:FC:46:9E:19:F1:8E:0D:AB
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:00:c0:1e:b9:24:bc:bf:1f:d7:fb:2b:50:be:40:15:48:b3:
         ce:6d:fe:a2:3e:61:5f:5d:42:02:cb:6e:e5:b4:03:62:a1:fd:
         35:8f:4a:2b:54:0d:48:59:35:d4:52:36:21:97:ed:a6:68:c9:
         27:d6:1a:47:6e:d4:c4:98:ad:27:31:c8:6b:73:4c:a1:50:d5:
         b5:0b:8f:23:4b:58:f7:4d:3b:d0:f2:ac:58:a1:e4:d8:34:19:
         5e:92:f9:b8:57:ca:b6:da:83:21:7e:50:6d:60:0d:c2:50:23:
         5e:b5:7d:ef:e6:f4:fc:d9:68:bd:b2:3b:91:bb:f4:f0:2e:5a:
         ed:52:01:f3:b3:9d:82:f5:84:ee:65:28:0d:2e:60:08:89:8c:
         ac:9e:95:0f:0a:1e:95:d5:eb:bc:06:e5:04:2f:20:9c:6b:16:
         eb:cb:ba:05:d6:0f:f2:b3:93:c5:cb:05:83:21:90:17:c8:d5:
         9d:c4:93:e0:da:dd:fd:cb:9d:9f:e5:08:90:2d:23:3f:87:81:
         98:84:0d:0e:96:63:d7:f1:8c:82:00:65:56:e9:a3:53:20:7d:
         45:d7:01:e9:89:d7:0e:72:78:14:45:3b:2f:ae:42:1e:ea:3a:
         d2:b6:1a:4b:3d:c0:be:b1:ed:17:97:28:3d:e8:f0:22:cd:04:
         dc:b9:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:34:02 2026 by rpki-client