This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File:                     dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier:          BxH13EmU+pbHwpEF8zoDYCh00XWZsdoyQZWpclOTo2c=
Subject key identifier:   63:07:84:B0:7A:79:A3:0B:A7:1E:7B:E0:E4:F6:2A:B4:2C:2A:70:B0
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer:       /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number:          E4
Signing time:             Thu 01 Jan 2026 03:43:39 +0000
Manifest this update:     Thu 01 Jan 2026 03:43:39 +0000
Manifest next update:     Thu 08 Jan 2026 03:43:39 +0000
Files and hashes:         1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: jlz0/nUJXL5gMaIXSFiGI9XboaZ6AaTxOhIXwQHtqxE=)
                          2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
                          rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
        Validity
            Not Before: Jan  1 03:43:39 2026 GMT
            Not After : Jan  8 03:43:39 2026 GMT
        Subject: CN=6955ed6b-57a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:43:78:a6:99:5a:3f:c1:f2:7c:55:2e:81:
                    b3:18:51:ee:a8:7c:75:72:62:75:c8:e7:ca:b4:01:
                    4e:d1:20:1e:64:06:e8:0c:4b:66:2d:4d:90:23:7f:
                    c5:83:67:4e:0f:14:5b:f9:10:fb:6b:a9:ce:92:56:
                    2a:21:7e:b1:d1:d2:4c:42:7e:02:fd:45:0c:c9:4f:
                    a9:b3:54:db:4d:3f:dc:8a:51:35:9a:a5:b1:31:d1:
                    84:bd:41:fe:3e:cd:5a:81:e1:a0:e0:9a:03:5d:6c:
                    1c:00:54:62:b4:95:13:5b:f3:27:1d:3d:0e:49:b4:
                    9c:44:70:77:85:65:6d:22:b6:10:5f:d8:2b:67:c6:
                    51:dc:e2:fa:39:eb:4b:6a:79:6c:fe:be:b5:be:6f:
                    06:9b:01:55:94:09:0a:39:65:43:52:3d:52:9f:fc:
                    1a:ab:e3:60:4e:e3:f4:95:0a:57:a7:66:e6:cf:88:
                    23:25:39:e9:80:14:81:7d:a6:96:cd:98:fa:a1:3e:
                    49:53:bf:75:0e:ed:61:04:b4:fb:d0:67:12:80:66:
                    4c:b4:42:9b:2c:77:12:60:ba:d0:fa:c2:10:ce:c1:
                    b0:c5:8c:2f:dc:0c:e0:7e:6c:8c:75:ad:b9:4b:b1:
                    4e:35:91:da:cf:7e:1b:ad:1e:1e:af:6b:e8:18:02:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:84:B0:7A:79:A3:0B:A7:1E:7B:E0:E4:F6:2A:B4:2C:2A:70:B0
            X509v3 Authority Key Identifier:
                keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:65:51:40:0e:f4:f1:77:c2:09:4a:5d:07:c5:5a:fb:33:34:
         d2:66:00:b3:d0:40:48:12:4a:bd:06:bd:c3:b8:2e:f6:09:4d:
         f0:7f:f2:3c:44:45:67:df:f8:43:80:b9:ed:34:9f:92:1e:93:
         f5:8c:55:25:9b:d7:42:18:83:a9:9e:34:0d:a4:20:43:ba:6d:
         9a:13:6f:f9:32:4c:d7:56:85:9f:f2:16:88:ef:96:25:fe:e2:
         c1:48:15:7e:33:cd:9b:21:7f:ea:fe:8e:d7:06:43:f6:c1:fe:
         a8:6c:72:16:96:de:0f:41:14:2a:56:09:e2:d7:64:35:f0:3e:
         04:18:e7:8c:ba:15:f9:aa:da:14:d6:16:17:d0:aa:32:cc:be:
         ed:ee:41:38:0a:e4:5b:b8:4d:74:6b:e8:93:d6:b7:9d:8b:4e:
         12:b4:ea:0c:81:15:7a:4f:3e:2d:5d:a9:56:a0:4b:6b:6d:ce:
         03:20:85:5e:aa:82:fa:1a:e9:51:c9:af:5a:c8:b9:8c:86:8a:
         12:51:8c:72:60:12:c4:b1:a9:a2:3a:52:be:80:50:c9:0b:ac:
         8e:c0:e1:03:ed:f5:e9:ba:57:48:8d:ab:c4:f5:0b:0a:0a:bf:
         93:16:29:20:be:32:59:0f:a6:e8:09:cd:97:75:0a:da:a9:c4:
         74:c5:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 06:04:37 2026 by rpki-client