This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier:          yNSPZFjdQuZJZcMXk74UxQAjB4hEo5fiqHQYNbEmuCs=
Subject key identifier:   06:8C:50:7B:94:E4:78:31:9E:8D:BE:13:3E:7A:4F:E9:6E:66:BC:10
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0E91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number:          0E7E
Signing time:             Sat 24 Jan 2026 17:24:57 +0000
Manifest this update:     Sat 24 Jan 2026 17:24:56 +0000
Manifest next update:     Sat 31 Jan 2026 17:24:56 +0000
Files and hashes:         1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: tzCpU7qSwefvMtdT0g6zPhkj7m8ElI3gewxSmCP7fR0=)
                          2: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=)
                          3: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=)
                          4: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 17:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3729 (0xe91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Jan 24 17:24:56 2026 GMT
            Not After : Jan 31 17:24:56 2026 GMT
        Subject: CN=69750068-1478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:41:69:92:60:f7:65:45:7e:1e:48:3c:9d:
                    f4:cd:bf:25:8c:c3:c4:bb:91:a0:bb:5d:6d:c2:b0:
                    8d:c2:6f:f1:f5:99:dd:ee:02:8c:da:96:83:f9:a9:
                    06:a0:d8:81:60:bd:3f:1a:e2:da:20:b8:34:f0:1d:
                    10:80:32:99:54:44:2b:28:b3:c7:ff:6d:30:d9:e5:
                    82:9f:3a:2d:cf:c7:d1:1a:4e:78:df:e7:8f:0e:b9:
                    ca:cb:a9:0e:2a:f9:66:24:57:12:30:cd:d1:3f:4b:
                    14:7c:86:60:ab:a4:51:14:8f:cb:04:a2:d9:a5:3d:
                    e5:d3:2d:ce:a7:a7:43:96:cc:14:08:21:6a:85:97:
                    24:86:90:16:2c:e6:de:96:ac:34:a4:a3:ee:81:43:
                    d4:e0:3b:24:ab:d0:42:49:d1:99:2a:29:7f:0b:80:
                    be:24:e4:42:bf:5c:33:c8:72:39:cf:ff:29:63:ab:
                    cc:e7:1f:d3:a3:63:08:83:37:f5:da:59:8c:eb:8b:
                    21:62:6b:14:66:80:05:e4:b6:19:c7:36:65:c8:7a:
                    56:2d:cf:f3:89:04:34:4f:6d:53:36:a2:90:b5:21:
                    66:8d:80:22:49:e0:dc:e2:d8:f4:49:37:b3:81:ae:
                    ad:4e:b9:72:fb:83:7b:0a:c4:1c:95:d1:b8:d1:17:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:50:7B:94:E4:78:31:9E:8D:BE:13:3E:7A:4F:E9:6E:66:BC:10
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:d9:bb:fa:0b:65:ea:9a:ed:7c:62:35:12:68:57:84:6c:
         dd:3e:eb:64:45:67:f1:65:8c:66:bf:b7:3a:7c:9a:45:fe:7b:
         fa:92:61:35:8c:df:9c:09:b3:a6:dd:e4:3e:70:ae:87:26:41:
         36:db:28:a7:f9:c9:da:8c:f0:2a:cc:34:13:ad:43:ed:93:bc:
         d7:29:cc:9d:18:dd:83:2e:97:25:08:92:0b:cd:dd:d5:e1:5a:
         c9:a5:d7:71:0b:fc:67:bf:67:64:24:5a:18:ee:82:65:4d:67:
         f2:0b:6c:ae:c0:87:de:b9:89:c0:92:ba:10:da:25:a2:03:7c:
         5f:93:53:d2:d6:37:0a:83:90:f8:12:30:16:09:c0:79:b1:91:
         73:24:f5:cc:42:e5:b9:e2:bc:34:df:76:1e:de:e3:2a:5d:11:
         14:8f:09:33:c2:65:78:54:19:28:5b:3f:31:ce:62:3f:9b:94:
         aa:db:79:bb:c7:32:8b:72:40:3f:34:fd:26:93:c4:3a:bf:73:
         a2:1b:b1:2f:96:d5:25:34:71:9d:a0:9e:74:2d:e1:21:71:69:
         96:a2:1b:06:42:b4:a0:95:0b:b0:d0:37:81:82:26:83:7b:8e:
         0a:70:eb:e0:b3:80:3b:aa:e9:47:9e:2c:b6:60:a6:ff:95:0a:
         7d:a0:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:57:34 2026 by rpki-client