This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
File:                     EhCVgwI-GF3korKUIxWZ1jZAvJo.mft (raw, json)
Hash identifier:          l1cYh5buoAmusuv7PbGQ/GBlYSLd/AWtyrc5IRl6WhU=
Subject key identifier:   60:AB:AD:22:A4:35:51:E2:5D:49:96:AF:FE:E1:2F:DD:64:4A:1A:BB
Authority key identifier: 12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A
Certificate issuer:       /CN=A918B5FE/serialNumber=12109583023E185DE4A2B294231599D63640BC9A
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
Manifest number:          071D
Signing time:             Sat 24 Jan 2026 21:10:24 +0000
Manifest this update:     Sat 24 Jan 2026 21:10:23 +0000
Manifest next update:     Sat 31 Jan 2026 21:10:23 +0000
Files and hashes:         1: EhCVgwI-GF3korKUIxWZ1jZAvJo.crl (hash: Q5YHljGMtrm5h/7XCErTLbYevZnAwCHq5mX5zC1ecVw=)
                          2: E649E89E6C0D11EB89BF4725C4F9AE02.roa (hash: 20mFFdly0NwVg0sh0PTK76DHn25NUKvd/zLLbGt7l68=)
                          3: E744DAB06C0D11EB89BF4725C4F9AE02.roa (hash: 6EZkAzkPk5SlMX3wqZPtJqCzo2SBsCkIIw69w24D0aY=)
                          4: 4652D2C2DF3C11EBAC0C7536C4F9AE02.roa (hash: RyO7TsWz01C7RyL01NueecIAQ4G8XObxp2ft3XjCtCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl
                          rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B5FE, serialNumber=12109583023E185DE4A2B294231599D63640BC9A
        Validity
            Not Before: Jan 24 21:10:23 2026 GMT
            Not After : Jan 31 21:10:23 2026 GMT
        Subject: CN=69753540-31fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:dd:57:c0:fe:07:95:e3:5c:53:31:1b:ed:
                    43:0a:44:e1:e4:ee:b5:9e:62:67:2d:ba:4b:b6:11:
                    8f:4e:5e:7c:a1:6c:f8:ba:e5:fa:89:e9:f8:17:21:
                    48:38:d0:6e:4f:8a:f7:72:e4:79:9c:00:14:c5:05:
                    ef:3c:57:e6:72:d4:ba:7f:08:31:4b:33:f8:a3:05:
                    be:8c:4e:85:21:dc:f6:24:a0:db:fc:5b:c8:fb:f4:
                    c7:b6:67:da:e6:eb:b4:bf:fa:6a:ae:c9:73:3f:26:
                    33:aa:ab:24:db:df:dd:33:e0:bb:26:c2:94:02:02:
                    ad:0c:5e:4d:bb:7c:6e:76:29:c0:46:cb:66:b9:dd:
                    ee:bc:39:83:f8:15:7c:4e:c9:f4:d1:a6:63:b1:f3:
                    73:56:22:2f:13:bd:9a:b7:38:43:24:a0:53:b9:a2:
                    45:03:36:32:f4:0c:65:8a:34:ad:ef:3c:28:a7:e8:
                    91:a3:27:00:22:8a:14:c3:db:ba:98:56:7b:8b:6a:
                    57:29:e9:2e:7d:6e:49:94:c5:49:48:0a:43:60:6f:
                    43:f3:6f:d2:9d:d0:4f:7a:6d:f2:67:bb:97:03:a0:
                    25:3b:64:bd:4f:26:94:96:a8:e7:41:a4:c7:05:61:
                    77:a1:49:4e:2d:90:3d:f5:70:ba:70:89:40:d2:9f:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AB:AD:22:A4:35:51:E2:5D:49:96:AF:FE:E1:2F:DD:64:4A:1A:BB
            X509v3 Authority Key Identifier:
                keyid:12:10:95:83:02:3E:18:5D:E4:A2:B2:94:23:15:99:D6:36:40:BC:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EhCVgwI-GF3korKUIxWZ1jZAvJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/3CEEDF906A9E11EBB6762318C4F9AE02/EhCVgwI-GF3korKUIxWZ1jZAvJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:65:8b:e6:67:84:4e:d6:e4:10:15:a4:6e:bd:28:73:7b:
         92:4b:cc:8b:62:91:8e:7c:99:91:4b:db:f7:55:a9:1c:84:a3:
         b6:3c:bd:13:5c:c9:91:20:02:da:f3:02:55:d7:88:49:1d:ce:
         ed:f9:45:78:a6:4d:45:02:e2:2b:53:05:fa:b8:48:fd:59:eb:
         67:ca:2d:43:f6:bc:db:26:eb:c7:b7:7c:b8:2e:e9:8a:40:db:
         0c:89:87:ee:55:c5:5f:ec:9c:17:db:46:7b:51:1d:cd:f1:49:
         42:82:02:99:7b:43:9d:90:c4:02:d0:79:b8:a7:84:ae:d4:be:
         ae:c6:8c:44:f5:20:d9:c4:5a:1e:70:2e:71:c2:84:16:39:f1:
         a9:61:9c:d3:97:e1:64:4b:3f:18:20:be:d5:9e:63:dc:3b:ca:
         63:29:20:e5:18:28:26:d8:85:56:30:dc:57:e0:5e:39:51:98:
         cc:77:a4:8e:fd:25:6f:b2:9d:15:1b:a2:7d:4a:7a:11:c1:5b:
         6b:3c:67:8c:15:8e:ea:38:93:56:02:11:eb:12:db:0c:95:38:
         7d:3a:87:e3:9a:cc:b3:2a:8a:73:af:9b:5a:22:c9:fd:9a:15:
         40:62:8e:4c:58:d3:c5:fc:21:89:3d:61:15:50:ff:4f:4e:bb:
         a3:57:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:57 2026 by rpki-client