This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          9KfnlCo1CuyysoLhRxYyFngvoK3M1cNBqn1fuRR1oOI=
Subject key identifier:   A5:94:C9:1A:E8:20:49:0E:87:A1:08:04:33:84:F8:4D:98:0F:48:B0
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       09D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          09D2
Signing time:             Sat 24 Jan 2026 19:23:01 +0000
Manifest this update:     Sat 24 Jan 2026 19:23:00 +0000
Manifest next update:     Sat 31 Jan 2026 19:23:00 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: YDh4WpMI9Md0jxJIxOFbmdeMZfUPR5QLpmfJDsmlfhU=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 19:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2521 (0x9d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Jan 24 19:23:00 2026 GMT
            Not After : Jan 31 19:23:00 2026 GMT
        Subject: CN=69751c14-a81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:9d:e9:57:85:ff:f8:74:fb:b8:d9:f1:aa:
                    8c:cd:f3:5a:38:69:4a:10:fe:f4:50:74:3d:25:2c:
                    db:d0:24:67:fe:56:21:9a:2a:d0:ba:50:5a:88:42:
                    19:7d:d2:81:b7:f8:f0:de:59:19:a2:c4:78:65:1d:
                    44:ec:32:0d:a1:15:9a:82:d2:e5:22:21:78:35:14:
                    1e:97:3e:35:74:ec:2f:7a:f4:d5:52:9b:f3:e5:22:
                    b6:f5:19:19:94:9b:4e:b2:a1:91:df:75:b4:5f:0b:
                    29:31:67:d2:32:52:59:a5:53:3a:96:a3:f3:7a:18:
                    93:31:4c:3a:19:3b:e5:33:b4:fb:d5:3e:3c:a2:e7:
                    1a:88:9b:c8:4c:89:af:5c:bb:ab:4b:b7:5a:05:76:
                    1b:f0:34:ec:3f:13:ca:f9:c4:ad:cd:44:48:d3:7e:
                    dd:6c:07:4a:04:17:bf:50:58:19:58:43:09:d6:c3:
                    14:60:7c:d7:00:56:9e:76:f0:67:d4:3c:cf:f3:d8:
                    97:a3:8d:b2:67:63:1c:6c:3c:04:5f:7d:73:a3:6e:
                    b4:73:50:0e:40:86:03:84:e3:1c:dd:db:e1:df:05:
                    11:8e:3f:b6:e1:0b:f9:65:29:3a:2f:bd:55:63:07:
                    1b:53:84:09:c2:fd:44:20:fc:13:f5:1a:e0:de:33:
                    bf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:C9:1A:E8:20:49:0E:87:A1:08:04:33:84:F8:4D:98:0F:48:B0
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:b0:19:8b:81:b8:ae:3f:49:d5:0c:d8:5e:2c:00:9b:2c:
         13:9a:95:06:27:98:3b:a8:74:a5:84:d9:e2:f0:93:55:c9:bf:
         4a:8f:0b:97:c8:6b:cd:19:50:85:ea:15:6c:95:2d:b8:49:eb:
         7d:12:c2:f8:ea:c9:1d:2e:39:36:4b:6b:5d:27:77:06:c6:47:
         51:a9:a4:29:22:ed:38:5e:43:ac:3f:6a:d3:d6:8c:3d:eb:b5:
         7b:95:b6:1e:74:07:b9:d9:35:b9:b6:96:d7:5e:71:5c:52:74:
         e1:f6:3f:e7:d3:a9:21:34:01:59:20:42:28:0f:10:e9:9b:42:
         80:f0:33:a6:03:bd:fe:18:0c:92:0f:e2:1a:a0:eb:db:db:8f:
         98:13:32:b6:13:f7:5a:75:4a:f4:9d:e3:2d:6d:74:ff:91:c6:
         d1:ba:67:09:db:43:0e:70:02:86:4b:92:d8:da:32:67:b4:23:
         8c:c6:42:7b:b4:21:3e:50:fe:12:68:ed:d6:88:f1:cd:24:8e:
         eb:e6:29:92:bc:86:9a:12:d1:ae:e5:bd:34:10:3b:59:7e:8c:
         43:ad:65:eb:6b:bc:db:0a:4c:44:2f:2a:04:a3:bc:71:99:b7:
         b8:43:77:73:e9:be:27:af:ca:60:73:39:e6:15:8c:71:68:61:
         98:61:d8:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF
MjEzMjIzNDkwHhcNMjYwMTI0MTkyMzAwWhcNMjYwMTMxMTkyMzAwWjAYMRYwFAYD
VQQDDA02OTc1MWMxNC1hODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnaud6VeF//h0+7jZ8aqMzfNaOGlKEP70UHQ9JSzb0CRn/lYhmirQulBaiEIZ
fdKBt/jw3lkZosR4ZR1E7DINoRWagtLlIiF4NRQelz41dOwvevTVUpvz5SK29RkZ
lJtOsqGR33W0XwspMWfSMlJZpVM6lqPzehiTMUw6GTvlM7T71T48oucaiJvITImv
XLurS7daBXYb8DTsPxPK+cStzURI037dbAdKBBe/UFgZWEMJ1sMUYHzXAFaedvBn
1DzP89iXo42yZ2McbDwEX31zo260c1AOQIYDhOMc3dvh3wURjj+24Qv5ZSk6L71V
YwcbU4QJwv1EIPwT9Rrg3jO/4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWUyRro
IEkOh6EIBDOE+E2YD0iwMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3
NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw
Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhSrAZi4G4rj9J1QzYXiwAmywTmpUGJ5g7qHSlhNni8JNVyb9KjwuX
yGvNGVCF6hVslS24Set9EsL46skdLjk2S2tdJ3cGxkdRqaQpIu04XkOsP2rT1ow9
67V7lbYedAe52TW5tpbXXnFcUnTh9j/n06khNAFZIEIoDxDpm0KA8DOmA73+GAyS
D+IaoOvb24+YEzK2E/dadUr0neMtbXT/kcbRumcJ20MOcAKGS5LY2jJntCOMxkJ7
tCE+UP4SaO3WiPHNJI7r5imSvIaaEtGu5b00EDtZfoxDrWXra7zbCkxELyoEo7xx
mbe4Q3dz6b4nr8pgcznmFYxxaGGYYdiH
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:42 2026 by rpki-client