This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File:                     EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier:          OfWhmzlQ8rmmmuirl8/0ShO/26fL5DqwL7ZERpiC2cs=
Subject key identifier:   91:55:D0:41:58:C1:F3:25:62:8B:F5:54:29:3D:A8:F3:52:44:70:E8
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number:          06C2
Signing time:             Sat 24 Jan 2026 21:31:26 +0000
Manifest this update:     Sat 24 Jan 2026 21:31:25 +0000
Manifest next update:     Sat 31 Jan 2026 21:31:25 +0000
Files and hashes:         1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: tNEgxyuqc/AHFnXCCkEHTNHAmKDL6I3DbITLd+WHZjM=)
                          2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: KCNnwNsM5O+BHfoDwJZAeCCvRNudta19kRq1knCyDAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 21:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Jan 24 21:31:25 2026 GMT
            Not After : Jan 31 21:31:25 2026 GMT
        Subject: CN=69753a2e-da25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:0d:2f:41:36:b8:c8:a1:c2:b7:a0:f6:b9:
                    ec:71:af:d3:96:2a:b4:6c:8a:fa:f9:6d:8b:1a:43:
                    17:a7:65:f3:34:87:d4:c2:2a:9b:6c:54:e3:f5:eb:
                    a2:a0:e6:13:52:fb:bc:10:3d:3e:68:10:51:06:c3:
                    ff:18:43:82:0e:bf:6d:09:ef:98:cf:08:99:bb:bf:
                    39:f6:48:fa:81:56:d9:f1:d2:68:ad:e7:81:e1:f3:
                    ee:8f:a1:04:f8:bf:1d:bf:41:74:bf:ca:10:d7:32:
                    16:c7:b4:82:46:c2:71:54:4e:60:36:dc:eb:ae:46:
                    dd:6d:96:f8:8f:57:16:a3:d7:25:57:80:37:ec:c4:
                    1f:3a:99:e8:8c:68:f1:99:ae:cf:c2:3c:b2:92:48:
                    28:ab:67:15:67:52:44:8c:02:20:55:6d:22:1b:11:
                    20:9d:c3:cd:04:2f:fd:5a:2f:98:40:bb:bc:22:b2:
                    72:09:4c:3b:32:d3:7d:d6:2f:c3:79:c5:8b:74:c1:
                    ff:60:ea:37:9a:4e:b2:6c:8d:49:32:dd:88:d2:36:
                    a5:5c:74:c1:94:df:99:17:40:f6:53:d6:c5:a2:e7:
                    45:b1:d8:7e:9c:6c:e5:ea:d7:00:94:9d:57:cc:15:
                    12:56:1e:82:5b:4a:aa:94:af:2d:29:ee:11:d4:38:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:55:D0:41:58:C1:F3:25:62:8B:F5:54:29:3D:A8:F3:52:44:70:E8
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:63:0a:fc:25:60:da:24:d6:60:44:48:3c:06:4e:75:c0:ab:
         5d:a3:2f:c9:86:1f:69:3c:7a:42:a7:c2:ce:be:73:8a:1c:1c:
         00:96:8f:84:9d:ef:66:ca:d6:d5:c7:51:53:54:a8:91:d8:35:
         69:14:b9:48:03:e2:b2:00:89:ac:1a:67:a7:c5:15:7a:9d:41:
         59:84:ac:cd:8c:50:65:42:2c:e7:0f:29:99:e2:13:07:56:be:
         b7:e0:ba:b2:78:ee:23:0e:2c:37:0e:80:04:b4:a4:27:d9:97:
         36:25:aa:18:c7:c4:40:af:7c:a2:95:12:c1:ad:7f:f0:47:b9:
         7a:8d:36:60:3c:97:64:ed:54:2d:bd:a2:fe:e3:66:f7:df:77:
         3e:a4:a5:50:92:37:ee:1a:b1:fc:02:42:52:93:1a:cc:29:a4:
         48:6e:6b:20:d4:87:af:3d:de:da:46:36:2e:4e:ee:18:a5:e7:
         37:1e:6a:20:21:09:03:08:3c:48:de:bd:e6:aa:19:65:84:8c:
         b2:7d:13:76:9f:c0:27:ed:60:d9:af:6b:5c:fb:28:3b:db:0a:
         f5:af:8f:b9:d1:40:b9:d3:3f:a8:79:ec:88:ee:8b:37:e1:e4:
         6a:08:bf:90:b8:96:08:53:58:f6:49:70:ac:1a:f1:a8:03:1f:
         2f:cc:54:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE
ODBGOEM2Q0IwHhcNMjYwMTI0MjEzMTI1WhcNMjYwMTMxMjEzMTI1WjAYMRYwFAYD
VQQDDA02OTc1M2EyZS1kYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshsNL0E2uMihwreg9rnsca/Tliq0bIr6+W2LGkMXp2XzNIfUwiqbbFTj9eui
oOYTUvu8ED0+aBBRBsP/GEOCDr9tCe+YzwiZu7859kj6gVbZ8dJoreeB4fPuj6EE
+L8dv0F0v8oQ1zIWx7SCRsJxVE5gNtzrrkbdbZb4j1cWo9clV4A37MQfOpnojGjx
ma7Pwjyykkgoq2cVZ1JEjAIgVW0iGxEgncPNBC/9Wi+YQLu8IrJyCUw7MtN91i/D
ecWLdMH/YOo3mk6ybI1JMt2I0jalXHTBlN+ZF0D2U9bFoudFsdh+nGzl6tcAlJ1X
zBUSVh6CW0qqlK8tKe4R1DhQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFV0EFY
wfMlYov1VCk9qPNSRHDoMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD
NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS
TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJYwr8JWDaJNZgREg8Bk51wKtdoy/Jhh9pPHpCp8LOvnOKHBwAlo+E
ne9mytbVx1FTVKiR2DVpFLlIA+KyAImsGmenxRV6nUFZhKzNjFBlQiznDymZ4hMH
Vr634LqyeO4jDiw3DoAEtKQn2Zc2JaoYx8RAr3yilRLBrX/wR7l6jTZgPJdk7VQt
vaL+42b333c+pKVQkjfuGrH8AkJSkxrMKaRIbmsg1IevPd7aRjYuTu4Ypec3Hmog
IQkDCDxI3r3mqhllhIyyfRN2n8An7WDZr2tc+yg72wr1r4+50UC50z+oeeyI7os3
4eRqCL+QuJYIU1j2SXCsGvGoAx8vzFRA
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:41:15 2026 by rpki-client