This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File:                     EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier:          wllqldHGHz65bdrD0C1nfNxP6DJabAq3mDnw3tsw3yg=
Subject key identifier:   20:50:ED:5F:C7:D6:CF:F4:0A:58:7D:AD:9C:FF:E6:20:0A:88:42:BD
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number:          B7
Signing time:             Sun 11 Jan 2026 05:16:36 +0000
Manifest this update:     Sun 11 Jan 2026 05:16:36 +0000
Manifest next update:     Sun 18 Jan 2026 05:16:36 +0000
Files and hashes:         1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: oHHd0spXwmqHtn4Eb5AcvXccba2CX0zJ5iZGZwafado=)
                          2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 05:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Jan 11 05:16:36 2026 GMT
            Not After : Jan 18 05:16:36 2026 GMT
        Subject: CN=69633234-c52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:d1:67:67:79:69:c5:ef:25:42:c3:94:8c:
                    d8:87:39:b5:c1:62:3f:0f:cc:dc:85:d1:53:f4:49:
                    8c:27:fb:0d:6c:56:e0:36:9e:10:ff:ae:c3:b9:f2:
                    bb:1c:4c:27:bd:20:bb:bb:54:94:d9:6f:19:64:01:
                    c4:09:83:a0:09:0c:43:5c:04:16:f9:f9:cc:32:43:
                    82:46:94:4f:ae:24:90:0e:37:96:31:d7:73:74:9e:
                    01:a2:d8:50:4e:88:9d:b5:23:4f:b1:f1:b2:0d:25:
                    fa:e2:7c:6c:eb:e3:94:e9:4b:90:d2:94:d3:04:a7:
                    82:9d:bc:f6:5b:63:37:47:98:c6:ce:d7:a5:ec:0d:
                    b2:59:f7:16:d9:f4:0e:14:a7:14:04:d7:90:ae:90:
                    e9:32:b4:72:63:78:da:d1:df:79:0f:a3:88:e9:1c:
                    90:78:be:3e:6f:94:af:dc:b2:5d:78:88:d9:65:08:
                    87:2b:ac:65:0f:c7:7b:82:e3:de:c1:6d:78:aa:78:
                    81:f5:d0:88:43:16:fd:e5:c0:c6:8c:d9:e4:44:12:
                    4f:3d:f0:74:1c:86:1f:d5:17:68:ef:0b:84:af:1a:
                    d8:82:b0:e4:e8:78:50:07:a1:66:f3:79:80:dc:ef:
                    42:57:ac:39:ec:94:ee:36:3f:01:68:eb:71:6e:1b:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:ED:5F:C7:D6:CF:F4:0A:58:7D:AD:9C:FF:E6:20:0A:88:42:BD
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:83:62:dc:50:bc:b3:63:ee:e4:69:57:bf:bc:02:ce:41:a6:
         07:b3:1c:a7:aa:8e:d1:43:ad:35:2b:a1:fe:64:87:2f:ed:b4:
         20:60:3f:aa:52:95:94:95:9b:94:c0:04:36:3d:fe:22:4a:8c:
         29:37:d4:b8:80:33:79:f4:41:4c:51:60:87:1f:79:9f:03:20:
         22:03:17:a1:fe:08:b7:24:0a:7d:fc:f6:b5:98:d9:b6:a6:4e:
         a8:51:a0:c3:27:2e:5e:f7:a2:40:1b:6e:4f:5d:e1:ac:00:7b:
         b9:e4:50:f5:74:08:ec:c1:fd:80:fd:50:a2:43:52:4d:54:52:
         59:74:b0:f2:a5:b5:fb:c6:69:e0:1b:9d:11:31:5b:5b:e0:0f:
         6d:6f:e9:42:7e:da:fb:b9:b0:a2:39:99:4b:1c:52:ff:96:50:
         9b:9d:05:4f:96:8f:9c:4f:ce:c8:d5:cd:64:a7:73:d7:fd:a3:
         cc:a7:27:49:b5:c7:d4:5b:d2:f0:7a:81:0e:fa:91:64:7f:53:
         08:df:32:63:3c:57:d4:5e:e0:f7:b7:87:ad:53:b1:8f:f8:45:
         b3:92:66:cb:22:fe:8e:5b:50:af:da:a8:1f:cb:d6:91:68:a9:
         a0:57:73:48:09:a3:f7:3c:d4:34:0a:90:e6:bd:52:88:24:a0:
         97:73:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 17:24:06 2026 by rpki-client