This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          FpwDO1aRI/vnKFbedF4HOafKeyxdLL5oDszrffkTO7k=
Subject key identifier:   A5:E8:D1:4D:A2:EA:AB:1C:FF:DF:D2:8A:FC:13:11:E8:A8:BE:79:0D
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       3501
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          3500
Signing time:             Sat 24 Jan 2026 15:09:26 +0000
Manifest this update:     Sat 24 Jan 2026 15:09:26 +0000
Manifest next update:     Sat 31 Jan 2026 15:09:26 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: EE0jZ4LMogf8aXHpOKSeDnOOOgpO5FZdkew3KXb21+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl
                          rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13569 (0x3501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Validity
            Not Before: Jan 24 15:09:26 2026 GMT
            Not After : Jan 31 15:09:26 2026 GMT
        Subject: CN=6974e0a6-4c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:2e:34:30:49:e0:27:b4:0f:10:4b:c6:fc:
                    65:5e:a2:5a:9c:51:27:94:76:fd:84:cd:72:af:31:
                    6f:14:c0:7a:94:db:7f:4b:1d:82:0b:46:63:63:aa:
                    f5:cd:e0:5a:85:93:e4:ea:6f:18:02:55:4b:d1:ba:
                    2c:6c:9c:8f:d9:0f:ce:19:62:78:83:d5:b1:62:ce:
                    af:a0:89:66:9e:20:29:7d:f4:a0:8a:df:c0:2b:c9:
                    a8:b9:9e:1e:e8:af:7c:95:b5:a7:fe:a0:7e:80:c2:
                    e3:d5:30:b7:a1:be:66:b6:38:80:9f:ca:d8:5c:d9:
                    6c:a2:bf:cc:01:57:37:8f:b3:10:f2:f5:98:ce:1f:
                    ad:69:c4:57:1b:36:4d:cc:f3:00:d4:ea:27:ad:64:
                    7d:42:ee:6a:14:cb:04:c8:70:b5:46:c5:83:9a:98:
                    86:1e:b2:5b:e1:f6:d7:61:f3:1b:ff:7b:5b:a5:17:
                    8c:fa:8a:a3:60:40:69:4d:bb:62:db:37:c3:32:c5:
                    04:da:ec:df:45:cf:9f:19:3a:45:ba:f4:f7:45:0e:
                    66:3f:da:f7:67:5a:30:cb:45:0e:b0:4c:be:79:b3:
                    86:68:57:40:95:05:d5:cb:55:b2:fb:94:93:f6:e0:
                    7a:fa:7b:60:e5:b8:db:5f:78:35:ba:a7:47:1f:70:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:D1:4D:A2:EA:AB:1C:FF:DF:D2:8A:FC:13:11:E8:A8:BE:79:0D
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:27:b2:d3:f0:11:28:bc:97:aa:63:19:d3:0e:3e:b3:95:
         c6:69:c6:01:96:36:ef:f0:b1:66:11:41:1f:b9:46:62:86:0e:
         26:9f:28:8f:0e:ad:b3:09:c6:55:04:8c:06:b3:49:90:fc:75:
         7c:7a:8e:91:2a:e5:1c:10:b4:7a:ee:14:d6:8a:4f:2e:e2:a8:
         f8:e2:82:5e:04:89:00:60:3c:0e:4a:77:2d:52:cf:46:1c:39:
         c2:62:a7:2d:1f:ab:42:68:c5:92:d5:06:5d:f1:60:87:fd:c7:
         29:25:4a:37:5f:76:08:58:2b:ac:b7:64:5a:a4:36:83:a1:89:
         f6:6f:b9:43:be:73:12:c9:ce:29:ab:2f:5a:24:58:b6:c8:31:
         44:3d:5e:ca:df:e9:f0:e8:55:e0:d9:6c:c0:78:e2:50:a0:83:
         2e:5f:88:fa:6f:51:4a:17:36:f6:9b:af:00:2e:68:17:98:07:
         0c:27:b6:cd:3b:eb:d0:60:ff:8c:fe:21:a2:3e:2c:20:f9:65:
         76:97:24:97:ea:e0:18:6c:5f:e5:ce:4c:19:82:9f:1d:b0:11:
         96:56:fb:ff:73:dc:71:5d:d5:f2:89:d1:75:d4:e3:7e:e0:2f:
         3c:6f:31:ca:8c:2a:16:88:30:25:06:f3:f9:f0:04:07:92:0f:
         85:a3:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:48 2026 by rpki-client