This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
File:                     EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json)
Hash identifier:          c3IosbUDItLNcXeiapLBpCKGsDhE7mlX3TD1c7dK/tA=
Subject key identifier:   3D:68:93:87:9B:F4:B3:C4:7A:EF:46:F5:47:DD:7F:10:89:CA:22:D2
Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF
Certificate issuer:       /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
Manifest number:          F0
Signing time:             Sun 25 Jan 2026 04:33:18 +0000
Manifest this update:     Sun 25 Jan 2026 04:33:18 +0000
Manifest next update:     Sun 01 Feb 2026 04:33:18 +0000
Files and hashes:         1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: Bg7JCZtZ5u8oryb2jNL7XvN70oKeVj2FzvixN7e4UnE=)
                          2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: 6oeGOh3ugVYEAK7vv2j8Rduz62bW3HADtamWrA3ITZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7709, serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF
        Validity
            Not Before: Jan 25 04:33:18 2026 GMT
            Not After : Feb  1 04:33:18 2026 GMT
        Subject: CN=69759d0e-2284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:c7:70:ff:ff:1e:9d:16:e1:10:9d:84:48:
                    31:3f:ae:ad:44:62:22:94:de:65:07:8a:54:e5:f0:
                    88:56:d8:1a:cf:07:44:82:ac:c2:ba:e2:0a:b0:af:
                    02:21:ca:bc:98:79:31:03:4a:82:d1:d4:21:91:43:
                    66:cb:eb:ac:1d:2c:9c:27:00:47:e2:d0:b3:f4:d8:
                    e9:68:7e:7b:be:4d:21:ef:f6:f7:93:b9:f5:ec:52:
                    73:e4:f6:04:f4:e4:70:fa:13:2e:49:24:0d:7c:a0:
                    98:9d:05:9f:aa:0b:02:04:b7:f5:94:f8:41:7e:55:
                    ec:00:e7:df:f7:3a:5c:95:e7:53:e2:16:57:3f:88:
                    a5:7c:43:26:60:0e:48:20:2f:cc:67:96:a6:46:e6:
                    d2:3c:c8:e9:a6:1e:42:ef:98:ad:5b:54:22:ab:85:
                    1e:cf:ff:15:c1:58:ef:0a:92:9c:40:16:3f:71:13:
                    57:97:e0:f8:f6:a9:4f:c6:f1:fd:1b:2e:0e:ca:c3:
                    6a:52:f3:16:e6:17:0e:8f:1f:bb:27:e8:5c:7b:21:
                    23:56:8a:a9:6c:95:a3:ba:64:72:9f:5b:66:82:70:
                    bc:a7:69:31:d0:a8:f5:a8:05:c6:b3:ad:3a:55:19:
                    f9:d3:8d:e5:30:4a:11:2a:54:75:8a:69:ac:df:8b:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:93:87:9B:F4:B3:C4:7A:EF:46:F5:47:DD:7F:10:89:CA:22:D2
            X509v3 Authority Key Identifier:
                keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cc:b0:b7:d5:4c:3d:26:12:9b:44:06:f8:3f:25:fc:3d:fe:
         b8:19:88:63:0c:71:23:d7:a7:6b:80:6f:c8:a1:c3:2c:03:0b:
         f4:dd:76:46:51:a3:a8:4d:93:a5:6d:42:db:e5:f8:47:d1:ef:
         93:b7:25:e2:8c:0b:22:e7:13:a5:a4:39:58:cf:95:06:6f:f5:
         c6:f5:5d:05:85:d3:63:2a:1a:2e:88:d4:e6:96:d6:aa:53:b9:
         ec:9b:f2:87:50:29:66:17:60:ee:9b:cb:6e:59:83:d4:76:1d:
         71:7b:b7:97:bd:32:da:c5:84:c3:d0:4a:b7:64:56:64:81:6e:
         90:3d:fe:10:5d:21:f4:b3:db:b6:af:cb:81:0c:d5:10:dd:c6:
         05:ed:fa:06:71:ff:8e:66:a2:5e:4c:9f:0f:f6:b6:c7:4c:d1:
         b7:47:7c:be:9c:fa:08:09:07:88:af:51:9f:fd:82:25:88:d9:
         8d:0b:59:be:b2:60:d7:ad:7e:9a:f1:e3:47:d3:e5:90:fe:d7:
         df:db:87:49:ff:43:53:fc:bf:4f:24:ba:de:a9:33:1f:66:e9:
         f7:2a:70:dc:d4:77:d0:fd:3b:71:b8:43:ca:d3:51:3b:58:48:
         87:f6:cb:55:88:4b:d0:63:99:95:71:f9:f8:68:59:ea:aa:86:
         96:1d:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:49:12 2026 by rpki-client