This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
File:                     ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json)
Hash identifier:          L+VweoyRPRFf9taikCJ8x6di/WE0nMgZNXHWycQKNOQ=
Subject key identifier:   DE:1D:61:43:FF:E7:2E:4A:28:BE:8A:70:63:4A:F6:44:00:03:EA:98
Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D
Certificate issuer:       /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
Manifest number:          011E
Signing time:             Fri 23 Jan 2026 03:54:50 +0000
Manifest this update:     Fri 23 Jan 2026 03:54:49 +0000
Manifest next update:     Fri 30 Jan 2026 03:54:49 +0000
Files and hashes:         1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: 0QN++lzOiUed7Y8Wf4vdZdiw3iguF/G9qEPYpwQNSdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 03:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D
        Validity
            Not Before: Jan 23 03:54:49 2026 GMT
            Not After : Jan 30 03:54:49 2026 GMT
        Subject: CN=6972f10a-bd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:b1:e0:75:c0:2a:76:5d:9c:58:fb:c8:fa:
                    13:5b:b3:de:cd:c4:80:45:de:c8:23:fa:a4:21:85:
                    55:49:73:37:2e:dc:d9:44:26:8c:e1:c6:5d:88:8e:
                    bf:d2:9f:79:ce:da:67:5e:82:6a:1d:af:46:a1:95:
                    e4:e1:8b:7d:16:10:b4:37:d6:3f:b9:c8:3a:b2:89:
                    3c:f9:12:a9:d1:39:28:2e:1c:48:ca:34:c1:e8:80:
                    3a:33:8a:25:dd:97:43:12:b7:21:f5:b7:df:d8:ac:
                    80:11:bf:98:ab:a5:25:a5:22:10:7f:c1:02:32:dc:
                    f8:97:c8:86:16:0e:6e:41:ae:c4:d2:f5:e2:30:f2:
                    5c:03:58:11:48:a7:f9:fa:ba:80:8d:df:f0:fb:dd:
                    e2:59:3f:e7:9a:4b:08:af:6a:df:81:cf:ef:17:a6:
                    ac:0c:5e:d4:95:4e:99:43:ac:27:e2:b0:60:f0:ed:
                    f0:21:45:25:72:1e:71:6e:65:c9:1d:eb:86:02:ed:
                    cd:8f:8b:96:28:03:ee:f9:bc:fc:0a:87:5e:08:a1:
                    27:c4:eb:d6:bf:76:1a:7b:f5:c8:87:9c:9e:d3:11:
                    00:c1:58:7e:7a:3b:20:66:37:66:a1:be:33:f4:07:
                    77:57:b6:c4:11:32:3c:0b:02:c3:07:83:c1:86:8f:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1D:61:43:FF:E7:2E:4A:28:BE:8A:70:63:4A:F6:44:00:03:EA:98
            X509v3 Authority Key Identifier:
                keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:67:98:6e:84:7d:69:89:ed:40:d2:48:59:07:31:b3:2b:23:
         d0:b5:a1:80:6d:16:c2:4c:c8:4f:77:fd:49:de:b1:eb:7b:03:
         eb:fb:21:d4:27:70:01:67:d6:09:fd:f0:82:d7:2e:45:1d:53:
         3c:98:4c:53:54:82:6c:eb:2c:13:46:8e:3d:9b:4e:14:25:13:
         d2:d3:be:6e:25:63:71:22:74:1e:71:65:8d:d5:e4:09:70:75:
         ed:0b:7b:79:c7:1e:1f:3e:60:1e:f5:95:33:6e:af:e0:0a:69:
         12:30:58:66:e6:6a:ec:c8:c6:83:38:b2:44:c3:0a:a6:b2:25:
         7f:f5:5f:96:e4:01:36:48:0f:c7:35:14:90:c6:52:af:10:89:
         50:fd:f3:75:53:0d:8a:c5:74:93:90:4d:61:80:e1:fd:cb:4f:
         f7:96:aa:04:f1:56:64:7d:6c:83:81:52:75:34:77:d7:4e:0d:
         13:78:98:4c:71:e6:0a:8a:14:33:7f:48:42:6e:31:53:61:ae:
         ee:5f:df:a1:b7:64:2c:6f:bb:df:e4:ab:af:99:d4:2b:22:6b:
         df:61:59:69:19:a6:f5:cb:0e:e2:76:51:86:7d:51:7e:e8:8f:
         9f:a3:ac:93:83:42:bd:0c:af:36:4b:fa:60:90:4c:b3:e6:5d:
         f4:92:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:26:45 2026 by rpki-client