This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
File:                     2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json)
Hash identifier:          8BrsAJwXLcRv4AiQnDkBe4wMmnkyF93gwpBkxkeqQ7o=
Subject key identifier:   B5:5B:36:77:85:36:85:3D:83:A6:C2:3D:FA:80:EA:C9:66:B5:A2:D2
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
Manifest number:          0226
Signing time:             Sun 25 Jan 2026 01:21:22 +0000
Manifest this update:     Sun 25 Jan 2026 01:21:22 +0000
Manifest next update:     Sun 01 Feb 2026 01:21:22 +0000
Files and hashes:         1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: UxfuaneJ7+9hCiV71Rh3e6dnJP4qIIPgaqLamqQY1vc=)
                          2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 00:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: Jan 25 01:21:22 2026 GMT
            Not After : Feb  1 01:21:22 2026 GMT
        Subject: CN=69757012-a842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:ea:45:05:55:f7:c0:68:7e:d1:d4:ff:99:
                    fe:18:42:72:fb:6c:68:1b:9b:6a:81:8c:53:24:22:
                    04:95:3a:6b:5f:56:ad:29:fc:0a:91:4b:d7:99:14:
                    b2:e3:4c:4e:af:fa:a4:95:39:c6:d7:5e:26:1a:2d:
                    d2:58:2f:c3:48:34:3e:5e:4a:d6:83:c9:cb:0c:25:
                    7a:95:9d:77:15:a6:24:63:74:b0:d8:af:f9:cc:25:
                    50:08:e3:92:dc:ee:37:65:60:21:ad:b5:dc:a6:66:
                    22:61:86:04:3b:1b:16:f1:37:4c:82:4c:05:91:d4:
                    8e:b7:f8:c0:59:2d:a5:ad:c2:e0:a5:e5:6d:94:9d:
                    6a:13:87:1e:8d:8b:44:e1:8b:62:12:a8:7b:97:3d:
                    06:8b:7a:2d:bc:2f:4c:70:fe:15:1d:fe:0b:cf:c3:
                    8f:5f:54:c1:4b:21:f9:07:0c:03:50:b2:76:05:b0:
                    c0:56:7d:11:8d:9a:9f:58:42:e0:1e:65:43:b6:12:
                    3a:f3:51:53:87:f8:52:02:b3:cb:4e:c2:f1:c9:f5:
                    04:94:03:1b:ac:79:47:48:af:3d:92:5c:86:26:17:
                    17:9e:e4:bd:e4:05:26:1c:a5:53:73:e6:0d:50:f7:
                    55:3f:c1:e8:67:6f:2d:9c:39:ee:4b:32:cc:d5:2d:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5B:36:77:85:36:85:3D:83:A6:C2:3D:FA:80:EA:C9:66:B5:A2:D2
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:59:59:1c:c4:59:f4:f9:36:be:a7:36:7a:bf:69:cb:9a:ff:
         e3:14:a1:85:e5:9c:29:f4:02:b8:16:26:43:6d:b7:74:02:fb:
         7b:6b:c0:c0:16:03:36:c5:a7:f2:17:aa:ab:30:6a:18:9e:37:
         eb:70:e1:80:fe:ca:d8:02:90:8b:35:ff:b5:6b:59:bf:a7:43:
         c3:fb:4b:5a:c9:ea:6e:6f:ba:8b:24:17:08:7e:37:aa:e0:2d:
         b4:dc:87:7f:94:9a:43:55:fa:da:7c:f6:c4:3d:4e:63:6c:13:
         5f:80:c0:3a:a8:f2:d2:0c:d6:36:06:46:58:cd:f0:5b:c6:ab:
         ad:1c:c7:17:10:84:f3:ca:d7:98:aa:90:e4:28:b4:66:94:f9:
         c8:7a:a7:51:e2:74:04:e6:5a:65:01:94:96:ef:e8:0c:30:fc:
         77:ef:fc:b6:d7:c9:a2:66:a1:fb:ca:fa:85:7f:8e:fa:0b:c0:
         51:0f:c8:21:fa:ea:db:e2:c9:8a:b1:81:96:c4:86:85:d2:c4:
         03:b7:13:e4:68:84:02:f6:e3:a5:2d:51:73:b2:ab:f0:ae:f9:
         9a:74:5f:75:3a:a0:e8:9c:99:6a:64:6e:56:79:60:c8:3b:6f:
         25:5a:d0:d5:fa:45:6c:89:4a:bd:1e:9c:42:63:7f:83:d0:38:
         08:46:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:52 2026 by rpki-client