This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
File:                     EIRQx-37eFIbfkhx_obo9iOhBRs.mft (raw, json)
Hash identifier:          wZi8yg75JBdOwcv4veQdXABypCUdgJ1/sspXJDMmRGM=
Subject key identifier:   4F:69:D3:74:74:ED:C6:AB:D7:32:57:38:5D:4F:A4:04:2A:C8:71:99
Authority key identifier: 10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B
Certificate issuer:       /CN=A91BA239/serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
Certificate serial:       0264
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
Manifest number:          025D
Signing time:             Sun 25 Jan 2026 00:57:06 +0000
Manifest this update:     Sun 25 Jan 2026 00:57:05 +0000
Manifest next update:     Sun 01 Feb 2026 00:57:05 +0000
Files and hashes:         1: EIRQx-37eFIbfkhx_obo9iOhBRs.crl (hash: NS9YX8j6/mbzRI+JOm8oI4iefkrQntSrwEPRnskutr0=)
                          2: B2119B7464BA11ED8544E91DC4F9AE02.roa (hash: pUYNPnar81S73iFijD6KXWsT3TFbdkYlXNgNkRJcea4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl
                          rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA239, serialNumber=108450C7EDFB78521B7E4871FE86E8F623A1051B
        Validity
            Not Before: Jan 25 00:57:05 2026 GMT
            Not After : Feb  1 00:57:05 2026 GMT
        Subject: CN=69756a62-5174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:ba:cf:03:c3:62:fe:e9:99:39:dc:ef:ad:
                    36:15:71:c9:9b:c7:23:ff:06:af:48:1f:14:2d:a9:
                    bd:ef:7f:85:e7:53:c1:e3:8c:fe:06:78:06:85:44:
                    b3:d7:61:67:00:dd:18:42:a4:45:53:59:8c:75:02:
                    a1:06:6e:37:73:a8:23:be:f7:cf:19:77:51:13:83:
                    85:ce:08:36:7d:24:ba:7e:d8:d8:ab:07:a8:b0:12:
                    96:30:9d:1b:97:09:a0:72:93:90:8d:7b:44:19:34:
                    6c:4a:de:18:7e:3a:18:b8:fc:7b:4d:5f:5e:92:5e:
                    67:26:19:aa:a5:c6:01:8e:78:41:33:53:24:6b:11:
                    b3:1b:99:7a:21:39:cb:e8:af:c7:36:d2:be:05:de:
                    f7:24:e2:84:3f:94:09:d8:1d:1d:b7:8f:bd:f2:58:
                    86:3d:ad:4f:e4:c8:c1:a4:8a:78:47:46:dc:1d:c9:
                    85:96:2a:8c:f4:0d:c6:d3:55:3f:9e:3b:b1:5b:fd:
                    c8:8b:af:ae:48:43:9e:b6:de:8a:b0:1a:ca:a8:17:
                    38:dc:66:d5:ce:01:25:05:55:f5:c6:7e:c4:8e:6e:
                    9c:2a:f0:40:b9:ec:98:ca:02:a4:88:68:28:3d:ec:
                    48:a3:16:8e:4f:2c:10:c2:93:f3:62:1f:5a:a1:95:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:D3:74:74:ED:C6:AB:D7:32:57:38:5D:4F:A4:04:2A:C8:71:99
            X509v3 Authority Key Identifier:
                keyid:10:84:50:C7:ED:FB:78:52:1B:7E:48:71:FE:86:E8:F6:23:A1:05:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EIRQx-37eFIbfkhx_obo9iOhBRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA239/19AD0F1064B711EDA0918A83C4F9AE02/EIRQx-37eFIbfkhx_obo9iOhBRs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:92:66:54:0a:dd:e9:7b:e8:28:97:5c:b8:39:5c:63:6e:15:
         7a:e3:c6:5c:db:29:65:ae:56:48:31:e7:28:96:6c:37:9a:7e:
         59:c7:15:e6:25:b3:ec:6f:ad:e4:6f:e3:c5:66:bd:21:39:26:
         d7:21:00:19:0e:aa:18:b2:34:b7:ab:1e:5e:3d:38:c2:0f:89:
         8c:ec:92:9c:b2:a7:c8:d3:3e:c0:46:28:35:ca:a1:41:ff:34:
         0e:2c:4f:d5:23:08:18:9c:3f:ad:aa:ea:3e:6f:fb:ef:3f:61:
         17:cd:e1:44:3e:db:b7:da:38:49:38:c1:11:5f:b7:a2:55:2b:
         f5:f5:47:07:30:43:3f:9e:9e:90:e4:ad:9f:ee:c9:fb:30:b9:
         80:44:fa:dd:5e:54:95:6b:be:74:2a:04:1f:52:ec:c5:6b:a3:
         ee:3e:9f:b9:c0:96:10:b3:85:bb:32:39:7b:fb:2b:27:ed:be:
         8a:b3:b6:1c:50:98:40:86:93:6f:ce:72:c5:0a:2f:87:2a:59:
         7e:d9:8a:a2:65:77:d7:46:0c:34:38:94:d3:04:fb:b3:6d:3f:
         8d:df:ac:1a:d5:53:19:7b:2a:91:52:90:56:62:b9:f2:b5:af:
         79:0b:e8:90:8d:0d:0d:93:be:bb:a8:08:5e:fa:74:f1:d1:8d:
         55:01:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:16 2026 by rpki-client