This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File:                     ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier:          i6Vy5otJwcBoIuOUXjpJmlaYnW/eihXbmWAj4Mz2bug=
Subject key identifier:   9D:68:12:F0:57:97:2F:25:F1:E1:6D:25:78:14:A1:26:3F:C0:D3:47
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer:       /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial:       1CB5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number:          1C9C
Signing time:             Sat 24 Jan 2026 15:58:24 +0000
Manifest this update:     Sat 24 Jan 2026 15:58:23 +0000
Manifest next update:     Sat 31 Jan 2026 15:58:23 +0000
Files and hashes:         1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: lsj3TAlzZaU1HiKSCiEnh9y1l9i15NeAqT0gsqqwt8A=)
                          2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=)
                          3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 15:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7349 (0x1cb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
        Validity
            Not Before: Jan 24 15:58:23 2026 GMT
            Not After : Jan 31 15:58:23 2026 GMT
        Subject: CN=6974ec20-112c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:81:81:be:bb:cb:15:f8:a5:d7:d6:1c:db:
                    8c:50:b6:04:b1:d2:f6:2f:01:5d:1f:77:c1:a7:90:
                    26:9b:25:c3:91:1a:c3:4e:d7:bf:b6:ce:f5:58:dc:
                    1f:31:a3:4e:27:30:33:40:8c:23:64:98:03:55:ed:
                    94:76:b1:36:6f:33:91:4a:96:da:e3:da:70:6c:cf:
                    15:69:27:99:35:ec:e0:fe:a1:eb:68:6e:89:4c:04:
                    29:dc:c5:a1:cb:77:88:bc:09:8c:00:c5:7a:91:81:
                    7f:0a:42:0a:ca:89:9d:dd:af:b5:37:fa:85:51:b3:
                    56:f4:f7:ee:89:f0:18:98:81:ff:67:07:33:47:17:
                    35:11:de:cd:31:ed:fd:ea:9c:38:26:5a:fd:86:0a:
                    20:20:b7:73:03:e5:a3:03:e3:ad:26:d7:c9:cb:bf:
                    c9:21:3f:a2:79:25:fd:74:34:72:30:94:90:95:b5:
                    23:fd:69:6c:0a:61:ef:8d:16:f9:f4:a2:86:49:0b:
                    b0:20:63:c5:6e:64:fe:85:38:db:bf:4c:cb:ca:e9:
                    2a:09:75:88:a5:4a:46:1a:16:a8:40:5b:36:c1:01:
                    ae:51:c3:c4:79:9a:8c:ae:e7:9e:86:d6:af:92:33:
                    c1:1a:db:59:63:fe:0f:11:f3:bd:03:44:06:e3:75:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:12:F0:57:97:2F:25:F1:E1:6D:25:78:14:A1:26:3F:C0:D3:47
            X509v3 Authority Key Identifier:
                keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5c:b0:bb:03:14:50:4c:3d:13:23:d6:63:eb:45:dd:c4:5e:
         f2:55:82:72:cf:45:8d:90:38:e6:23:e5:9f:b1:b1:86:64:7f:
         2e:45:10:94:5e:f9:21:c2:ef:91:8a:56:9b:b9:36:f6:c5:41:
         74:78:54:ce:e1:c5:af:49:8d:34:52:a0:a1:59:b4:d2:dd:25:
         6d:67:fe:10:d9:82:c4:97:dd:f4:31:df:7e:03:b8:30:2e:da:
         a7:16:db:86:46:46:2a:28:83:6c:fc:32:a2:1a:01:61:00:7e:
         05:c4:07:ef:22:33:1f:92:87:76:97:bc:ba:e8:5a:8d:ed:4f:
         0a:8f:0a:88:0a:e1:a6:79:92:74:24:0a:81:1b:ed:6c:c3:6f:
         96:e3:1d:44:ba:ed:67:b0:00:a5:8b:78:12:a0:85:e1:cd:11:
         55:46:56:f7:91:08:e8:ae:20:44:0e:9f:69:e5:bc:98:ec:ce:
         f8:1c:62:f5:72:7e:c6:8a:d7:96:44:8b:7c:a2:f9:3f:07:71:
         81:42:9b:15:bc:03:7d:21:90:fc:b4:71:36:98:21:06:d3:16:
         74:50:34:dc:5a:df:7e:1a:e0:5c:ce:0f:9a:81:cc:a7:4c:81:
         e5:5d:cb:58:04:55:71:ed:0f:62:ea:ac:fd:57:b3:27:cb:bf:
         0e:f8:6e:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0
ODIyNjBFRDgwHhcNMjYwMTI0MTU1ODIzWhcNMjYwMTMxMTU1ODIzWjAYMRYwFAYD
VQQDDA02OTc0ZWMyMC0xMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4+Bgb67yxX4pdfWHNuMULYEsdL2LwFdH3fBp5AmmyXDkRrDTte/ts71WNwf
MaNOJzAzQIwjZJgDVe2UdrE2bzORSpba49pwbM8VaSeZNezg/qHraG6JTAQp3MWh
y3eIvAmMAMV6kYF/CkIKyomd3a+1N/qFUbNW9PfuifAYmIH/ZwczRxc1Ed7NMe39
6pw4Jlr9hgogILdzA+WjA+OtJtfJy7/JIT+ieSX9dDRyMJSQlbUj/WlsCmHvjRb5
9KKGSQuwIGPFbmT+hTjbv0zLyukqCXWIpUpGGhaoQFs2wQGuUcPEeZqMrueehtav
kjPBGttZY/4PEfO9A0QG43U/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1oEvBX
ly8l8eFtJXgUoSY/wNNHMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4
MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE
RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9XLC7AxRQTD0TI9Zj60XdxF7yVYJyz0WNkDjmI+WfsbGGZH8uRRCU
Xvkhwu+RilabuTb2xUF0eFTO4cWvSY00UqChWbTS3SVtZ/4Q2YLEl930Md9+A7gw
LtqnFtuGRkYqKINs/DKiGgFhAH4FxAfvIjMfkod2l7y66FqN7U8KjwqICuGmeZJ0
JAqBG+1sw2+W4x1Euu1nsACli3gSoIXhzRFVRlb3kQjoriBEDp9p5byY7M74HGL1
cn7GiteWRIt8ovk/B3GBQpsVvAN9IZD8tHE2mCEG0xZ0UDTcWt9+GuBczg+agcyn
TIHlXctYBFVx7Q9i6qz9V7Mny78O+G5l
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:50 2026 by rpki-client