This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
File:                     eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json)
Hash identifier:          vgqGqaaCsCFJek1/H/XWj+RJ/I7Z/hplwMq2VHufhz4=
Subject key identifier:   40:E7:91:E3:8B:A9:22:CC:7E:82:A8:74:19:E0:D4:19:9E:EE:31:E5
Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0
Certificate issuer:       /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
Certificate serial:       1135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
Manifest number:          112A
Signing time:             Sat 24 Jan 2026 16:57:59 +0000
Manifest this update:     Sat 24 Jan 2026 16:57:59 +0000
Manifest next update:     Sat 31 Jan 2026 16:57:59 +0000
Files and hashes:         1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: VNpu4X8ZE5HGlbA/yR0jaRZmldEt8ktd5EAzYg7sRAA=)
                          2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 16:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4405 (0x1135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0
        Validity
            Not Before: Jan 24 16:57:59 2026 GMT
            Not After : Jan 31 16:57:59 2026 GMT
        Subject: CN=6974fa17-88cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:df:7c:86:a6:e6:a4:ff:47:9c:3d:f8:a4:63:
                    9b:c7:6b:84:11:c3:1f:b3:dd:49:1e:fd:95:f6:4b:
                    ab:39:63:f7:c8:bc:5d:7f:5c:01:90:bf:41:1e:e2:
                    17:6b:99:43:67:e5:c4:d2:1c:1c:a2:53:b1:bf:a1:
                    a1:0d:d7:4c:72:16:af:54:91:58:ac:55:21:12:36:
                    d0:cb:a5:82:6f:06:e9:ad:ea:69:d1:54:63:d7:b5:
                    f7:f2:3c:fe:7d:62:6d:d4:0c:6d:6f:a2:f6:62:f5:
                    54:01:e6:92:48:82:d1:09:b0:af:c9:bc:da:1f:46:
                    e9:bc:98:b7:f5:be:dd:0d:de:86:f3:19:94:8c:71:
                    ca:dc:3b:fc:5f:bb:c6:31:86:d5:c4:27:35:fd:d3:
                    ae:5b:89:6c:7d:d9:e3:a4:34:45:20:f9:08:24:73:
                    8e:21:87:ae:11:58:ad:66:e0:34:62:8b:d4:04:90:
                    ec:73:b7:c9:69:d2:ee:4d:e0:14:9d:3c:4c:a3:8e:
                    83:1e:59:25:6b:78:1c:52:6c:b6:71:00:9c:ad:ed:
                    f4:cc:11:5f:70:1e:cf:2b:d5:68:81:0e:1f:1c:cd:
                    66:6f:18:10:03:56:6d:f0:57:95:ec:77:c8:82:96:
                    6b:99:07:df:a1:bc:6d:f4:3b:62:fc:27:74:6b:4d:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E7:91:E3:8B:A9:22:CC:7E:82:A8:74:19:E0:D4:19:9E:EE:31:E5
            X509v3 Authority Key Identifier:
                keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b3:75:c5:9a:f8:3f:19:1b:8f:8e:50:a2:7e:77:64:66:0b:
         62:69:cb:72:3a:df:c6:a1:2c:84:ed:c9:ad:fe:fd:5b:7b:c3:
         3c:cc:e7:cf:55:da:06:67:3b:71:34:91:e1:94:3b:08:67:5c:
         2b:0a:3d:4e:0e:80:60:8d:88:25:cb:de:80:da:9e:68:62:e9:
         e6:c9:98:5c:3a:35:ff:1d:bc:71:c9:d4:b9:49:fe:e0:a5:57:
         e2:ff:9e:48:85:27:cf:b5:d9:18:b4:30:51:45:e2:e2:67:9b:
         0e:e9:e0:82:ce:6b:30:36:e8:35:4f:39:64:54:04:5e:0d:fa:
         e7:23:3c:e8:bd:7a:35:3f:70:05:fa:5d:1b:79:26:ed:c0:a1:
         fd:21:5b:c3:a3:66:94:9a:96:e5:7c:d3:5e:e7:37:85:a7:32:
         7c:9a:f8:e6:ef:bd:26:16:da:7d:55:12:ef:bd:ff:b2:e3:01:
         62:c1:7f:b5:94:ff:c1:1e:fb:41:4d:40:09:8e:60:e3:24:eb:
         d8:31:41:81:5e:b5:da:bc:53:19:13:f9:50:32:aa:97:6e:93:
         f8:da:74:61:07:00:15:53:7b:8d:49:f8:bf:f4:c7:1c:4b:3f:
         46:44:06:3c:e4:4f:76:4d:33:19:55:6e:01:83:65:c1:e8:f7:
         15:68:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:40 2026 by rpki-client