This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File:                     ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier:          m3L1VJ4aU8tXrvClC0hQp5Yj+SAZv4J/YJm13qHjFmA=
Subject key identifier:   A3:02:7B:73:FD:49:30:6B:85:01:A1:F4:20:D9:DD:A1:6B:77:8C:DD
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer:       /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number:          0A8B
Signing time:             Sat 24 Jan 2026 19:03:37 +0000
Manifest this update:     Sat 24 Jan 2026 19:03:36 +0000
Manifest next update:     Sat 31 Jan 2026 19:03:36 +0000
Files and hashes:         1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: rSycM/4D+ljgmjfwQOz4WVtLOJldLMnKHDcw1ow0JgU=)
                          2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: c+KKdUiE40XaCCosVDJRN/ivdbzY7AEBYwh4rejWgD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
                          rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
        Validity
            Not Before: Jan 24 19:03:36 2026 GMT
            Not After : Jan 31 19:03:36 2026 GMT
        Subject: CN=69751789-4f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:0f:85:9f:34:ae:57:11:3f:b2:9d:02:7f:
                    43:6d:a3:4b:52:27:e7:f1:db:7f:dd:07:0b:29:ba:
                    00:8d:33:bd:df:ab:70:ea:b4:10:b0:2f:08:07:c7:
                    3e:02:ae:38:6e:49:ed:b6:77:f7:5c:e5:25:83:ff:
                    59:bc:87:6c:ce:a9:7e:10:ca:a5:b0:b2:03:7b:ef:
                    77:cc:b3:d2:c3:b2:c5:40:08:a3:be:d9:65:a9:2c:
                    b2:fe:a5:ba:61:4b:65:ff:13:54:d1:40:d7:8c:a6:
                    51:04:b8:f9:4b:55:39:bd:02:15:61:15:45:a5:05:
                    74:e9:c2:4b:46:48:4e:5d:10:8e:d4:77:4d:c5:be:
                    a0:c9:d0:60:7d:00:71:ef:51:74:d8:9c:f9:7d:e4:
                    6c:84:fe:36:af:b5:c1:65:30:fb:46:eb:4d:01:bd:
                    4d:26:4b:6f:92:7a:5f:02:bc:30:43:39:82:73:82:
                    fa:c4:37:2f:21:24:7f:35:e9:71:86:e2:9d:4a:91:
                    1c:d6:ee:92:28:43:38:34:fe:54:02:f2:c2:39:bc:
                    0b:14:4c:a5:13:36:93:20:bc:b3:b9:47:2a:5c:f3:
                    ee:96:fc:d9:1a:cf:02:d9:79:e1:c0:47:e2:a2:7d:
                    6b:e1:a6:0d:4c:ec:d1:d5:f0:38:12:28:95:5e:12:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:02:7B:73:FD:49:30:6B:85:01:A1:F4:20:D9:DD:A1:6B:77:8C:DD
            X509v3 Authority Key Identifier:
                keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:db:28:5a:23:54:2e:79:37:90:36:25:b4:28:fe:d8:c6:a2:
         7d:07:4d:cd:6e:c0:ce:3e:34:a4:ff:fb:f2:d0:7a:56:f8:51:
         ad:bc:20:f1:35:d0:f7:13:51:96:c4:5e:8a:98:5f:76:7a:d9:
         eb:20:29:23:69:45:60:c6:54:97:e6:2d:a2:9e:f7:b6:3b:c0:
         91:0a:2d:68:df:05:09:5f:b1:32:be:08:e9:e8:92:ab:d8:02:
         92:59:fc:fe:21:57:3c:df:ba:1b:4d:69:b9:20:c5:8e:84:88:
         89:c5:71:35:3d:43:2f:38:eb:54:b3:8f:ec:80:25:01:4a:aa:
         b4:83:f8:8e:a7:ed:2e:25:ad:08:76:20:99:95:96:ca:10:21:
         bc:56:a8:3b:5d:28:58:80:55:c9:90:04:44:f7:4d:c4:65:d1:
         c0:f1:f3:25:ae:c4:af:18:95:cc:35:71:45:cb:d7:5b:94:8b:
         55:9a:39:86:76:52:ba:69:11:87:5c:24:d0:e3:e4:89:1e:a0:
         25:4b:79:d1:9d:dd:5e:fb:d4:6e:f9:0f:be:01:fe:fd:5c:e7:
         de:02:f0:fa:2f:5e:20:94:2f:32:2a:f6:62:00:8f:db:d0:2f:
         61:7b:93:d6:2c:54:f8:6c:36:42:30:21:5c:30:e7:99:d4:3b:
         d0:e4:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:30 2026 by rpki-client