This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File:                     dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier:          iYM91Tr/cXHpoOFPEPE/ZG+S7bQ8SwsJh04/ltIhBcc=
Subject key identifier:   19:87:ED:2A:C5:BD:6D:08:E8:99:C1:56:4D:04:C5:6B:01:E9:83:1B
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer:       /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number:          E9
Signing time:             Sun 11 Jan 2026 03:19:18 +0000
Manifest this update:     Sun 11 Jan 2026 03:19:17 +0000
Manifest next update:     Sun 18 Jan 2026 03:19:17 +0000
Files and hashes:         1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: w+8qxON2X/J6uJhaYB9NEcRhiTBGWQ2rRZ46WcBu1SY=)
                          2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 03:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
        Validity
            Not Before: Jan 11 03:19:17 2026 GMT
            Not After : Jan 18 03:19:17 2026 GMT
        Subject: CN=696316b6-f2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:47:45:3f:dd:12:a1:c0:33:c5:55:26:52:
                    36:1f:d9:a7:8b:a4:5b:e3:4b:10:45:dc:36:a8:7f:
                    00:0a:57:5c:f2:ca:bb:ba:50:e2:c0:0b:6f:fc:88:
                    b8:d7:9c:47:1c:3c:cb:3d:a1:dd:3f:6d:7c:55:f5:
                    2b:bb:42:a4:2c:c4:0f:6c:e1:59:35:af:64:35:a8:
                    a9:95:e4:22:7a:3e:8c:f9:f4:df:38:80:48:45:46:
                    70:db:b9:44:80:03:79:60:b8:b8:64:1b:7b:4c:59:
                    0b:44:c5:42:48:97:4e:ed:41:90:50:eb:e8:d4:e2:
                    f0:dc:e1:a2:04:ca:7e:ee:9e:e2:20:a1:ab:5a:0f:
                    1e:72:9b:9f:a0:37:12:5c:de:d7:60:a9:e3:48:42:
                    7a:14:a3:79:a3:90:42:96:59:bc:22:66:64:dd:cc:
                    89:89:5d:40:35:3f:0c:43:2c:be:8a:62:35:db:4b:
                    cb:2d:8b:82:fc:a4:52:f1:ed:71:20:41:84:ee:7e:
                    7e:84:e8:30:0f:21:1d:db:25:35:b2:dc:d5:dd:a4:
                    8e:56:ff:4f:9d:8d:13:4d:25:c4:69:46:c0:f9:42:
                    a5:0e:9c:d1:ea:f2:19:ef:70:86:6a:cc:6b:11:b7:
                    1f:d8:2a:50:16:2b:d3:8d:66:5c:92:d5:d7:4d:a3:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:87:ED:2A:C5:BD:6D:08:E8:99:C1:56:4D:04:C5:6B:01:E9:83:1B
            X509v3 Authority Key Identifier:
                keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:2c:21:ba:dd:d7:b0:a1:56:b7:58:68:67:eb:5e:57:e6:
         ae:8e:19:61:03:06:51:7a:ec:23:cf:a9:1f:9f:f9:99:04:36:
         e4:78:96:f0:75:ac:ff:ac:79:06:8a:be:56:ab:47:e5:89:7e:
         50:fd:a9:98:4f:8c:83:2b:99:9c:c8:97:a8:cf:ea:b5:17:28:
         e3:ea:d5:9a:ba:2c:ce:a6:3e:73:5c:0e:c5:19:b3:2e:3c:fd:
         2f:59:0d:24:27:04:59:e6:f0:43:21:b6:9a:0b:db:9f:46:54:
         51:17:f5:65:10:61:75:03:e1:7f:d9:2e:fe:ab:e7:53:02:f8:
         0c:ec:2a:38:f4:de:59:a9:6c:53:2b:1f:33:38:b3:6e:13:4a:
         16:93:32:69:ab:31:62:b8:ea:79:ac:d6:b2:b1:8b:cd:bf:ea:
         4d:3d:b0:bc:38:8b:a9:2f:7f:68:38:29:22:2c:96:2c:62:a8:
         0f:9a:0b:ee:13:8d:ab:45:f8:55:0d:e9:bb:89:58:f0:4b:f4:
         48:bc:e3:0a:c4:6c:bf:e9:23:02:63:e3:97:e8:67:e3:6e:12:
         df:cd:df:60:8f:48:57:68:53:3e:db:8b:49:55:58:1c:87:72:
         2a:d6:9d:65:8a:87:de:5a:12:85:a4:e0:0e:48:47:39:c1:98:
         41:b2:d7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:57:43 2026 by rpki-client