This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
File:                     eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json)
Hash identifier:          RhabPQH0ragYwPPUvkjmx+wuq24DoOPiqE3vM0rdHWs=
Subject key identifier:   04:19:8E:28:0E:35:46:B1:A2:F6:4A:B3:F8:2A:29:60:24:77:57:A7
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Certificate issuer:       /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
Manifest number:          B2
Signing time:             Wed 07 Jan 2026 05:24:15 +0000
Manifest this update:     Wed 07 Jan 2026 05:24:14 +0000
Manifest next update:     Wed 14 Jan 2026 05:24:14 +0000
Files and hashes:         1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: 1TH9418ul5MTFeR81RTN0GMNgrXBEz7kfyBqttJBnRM=)
                          2: 8C42B9F4CE2B11F0899B7C13C4F9AE02.roa (hash: EVNLBppAXZj6hQlNnHNmYNZlrW1a/lzCWpVHtVOHtsc=)
                          3: 3317EBC2B68611F0BC9B1221C4F9AE02.roa (hash: QaG7hFyUa++2CozFj5Q36xlh1YQYBvCOe5CqGAdapx8=)
                          4: D02660DECE9A11F08236E30AC4F9AE02.roa (hash: V+ACuG3nW2tKEZbcmdL8KIbylIYzMpqsLVZdufTuTYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
                          rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Jan 2026 05:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
        Validity
            Not Before: Jan  7 05:24:14 2026 GMT
            Not After : Jan 14 05:24:14 2026 GMT
        Subject: CN=695dedff-4357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:ca:bb:7d:99:74:d4:93:2b:64:5b:89:52:
                    04:88:8c:55:06:6f:56:f2:1e:9e:3a:22:a8:37:b5:
                    c1:18:3f:93:d6:1f:98:16:2c:c7:1b:8c:af:bb:c9:
                    39:c1:d1:ff:1a:b2:5f:86:8b:15:58:47:5d:67:33:
                    6c:98:3b:fb:cc:b9:d7:d0:3f:5e:0d:84:4a:e7:c2:
                    f0:67:b1:6b:7a:a6:90:2f:07:56:a1:d6:f7:7b:66:
                    c6:64:c2:c6:53:04:b4:4d:80:25:7f:8b:98:df:6a:
                    e8:85:65:b0:12:9c:e8:aa:95:2f:b3:ab:76:6e:d7:
                    77:64:8e:1b:b6:b4:f6:41:ac:50:49:dc:a4:b2:1a:
                    75:f5:5b:9b:fc:a4:47:71:55:9f:6b:fd:3c:6f:38:
                    f4:0a:f4:7a:cc:c4:01:64:4d:e4:04:22:67:ec:5b:
                    74:0e:70:a8:5c:7d:8d:cb:27:6d:0f:23:1d:ad:a4:
                    49:50:82:c6:72:7e:ac:f0:e9:d4:ef:be:ee:a4:12:
                    75:13:f7:0f:96:3a:77:2f:31:89:83:b1:d8:8b:94:
                    f2:f6:d4:a7:c3:19:08:1b:75:a5:fd:38:81:31:08:
                    2d:ed:a2:ec:b0:87:f7:fa:2d:cd:32:fc:02:f6:4f:
                    ca:8b:f5:77:7f:5c:d9:73:fe:76:93:81:ba:81:7c:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:8E:28:0E:35:46:B1:A2:F6:4A:B3:F8:2A:29:60:24:77:57:A7
            X509v3 Authority Key Identifier:
                keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:8e:61:22:22:62:2d:9a:06:5a:cb:60:bf:47:32:ce:af:
         0d:74:04:fc:fe:8a:8e:70:48:b7:28:b1:dc:98:5e:23:51:ef:
         64:6b:36:6d:cc:d5:9c:96:dd:83:49:23:72:ab:d8:53:df:c1:
         b5:cc:92:59:f4:ed:58:85:8b:a0:07:60:c6:90:f9:96:24:bb:
         77:1e:52:f7:61:14:dd:92:2b:da:89:25:84:79:3b:ee:6f:7c:
         2e:6d:a3:62:69:8f:f9:b6:84:a0:1c:78:98:c6:74:07:17:34:
         47:78:31:43:50:5b:10:1d:f0:6e:37:04:f2:f5:c2:c3:87:f0:
         1f:37:52:b8:e0:90:a6:33:ed:65:af:b4:cb:b9:7f:5e:9a:db:
         95:9b:bf:09:cc:f3:4d:35:1a:b9:32:95:75:a1:72:c5:4f:92:
         e7:83:31:90:65:95:09:30:d2:35:15:f9:b3:e9:b4:85:d8:17:
         de:e7:5e:e8:62:3a:95:10:11:33:6b:db:fa:09:8f:79:35:ce:
         b9:79:88:5b:a5:c4:1a:9b:65:b8:6a:44:37:c4:74:83:95:ec:
         c6:59:d1:11:e8:d1:75:17:4f:2d:e1:ae:fc:08:53:24:45:f5:
         99:57:2e:32:11:bd:2c:f2:fa:1b:2d:d8:52:f4:2c:91:3c:17:
         7c:a9:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:12:34 2026 by rpki-client