This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
File:                     ewHKzBcP5qYbIDBBheholG33KFo.mft (raw, json)
Hash identifier:          1sN7w2+71nv4R5KuRPlmMTV58al6U6oBkXbSkyzk5CM=
Subject key identifier:   18:7A:8F:AA:2C:50:29:E1:60:8D:E8:0E:E3:73:37:43:28:2F:AB:0A
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Certificate issuer:       /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial:       104B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
Manifest number:          0D21
Signing time:             Sat 10 Jan 2026 17:53:32 +0000
Manifest this update:     Sat 10 Jan 2026 17:53:32 +0000
Manifest next update:     Sat 17 Jan 2026 17:53:32 +0000
Files and hashes:         1: ewHKzBcP5qYbIDBBheholG33KFo.crl (hash: Q1cEFiSzmiSquKV+bmV3vBWS01/XgkDqBO4bA+hyxZ4=)
                          2: 54E1D22809B111EAB045B31EC4F9AE02.roa (hash: sUa2A0DKHHPCMb/UX/61BJJiVNKNcVnpCjKm83fwetQ=)
                          3: 5690B49A09B111EAB045B31EC4F9AE02.roa (hash: rU/jrGd8jwEDd8LxQy9ov4erxV7f8fE3BXbMvU0R7ac=)
                          4: 42C9FE0C77ED11EBBFBAF568C4F9AE02.roa (hash: wPaJnYT2o0UAaRMN2nkywoIUWjPOmXPWmigfrwybkDc=)
                          5: C75AFE482A1B11F083453D57C4F9AE02.roa (hash: 5tvM16xxK8NcUxRO3nzMwZnKZ2ZPHXCMMDrpMMj/vOw=)
                          6: 4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (hash: shJoadfTlQBzgNQ+19NvZAod23jajgn1Tl3miO2Y35c=)
                          7: B3811802FED411EA83E4EC37C4F9AE02.roa (hash: fhn75hnvAM/eHyYwTUGBEzgQiQhS+4pm+bv2EOyW5UI=)
                          8: A874B08E072E11EA8A64DC59C4F9AE02.roa (hash: /NgnAgAPTU8YL6mOcICZgZ2Lr7uSKAho8MEphHHaKa8=)
                          9: EFDC701A099A11EAB5891D5BC4F9AE02.roa (hash: 30Q0tmGYk+osax1btnB3QB7qbDwmHH34cIJNiTAsjqg=)
                          10: D22EBE84AF8E11EAA40B786BC4F9AE02.roa (hash: 8DkTUR1J4V8NrFGRj7RxwVO1+Zi1yolpG0jRlBr9E6k=)
                          11: 5731ACF609B111EAB045B31EC4F9AE02.roa (hash: bGTTtd7/rtIq4skMTHhdB97UyYs3hhRsZz+Tw9F7E80=)
                          12: 92C1DA72F96911EA96156C10C4F9AE02.roa (hash: oAPTe//7g6jJuILhwaNX9BhWuyg62LMl2yGUtTWKtm0=)
                          13: E009A066072B11EAB6E08A52C4F9AE02.roa (hash: 4SqIkb1OTSgOBPyoPlmo5OcZbHHLhA/uBdR3qwJnhQM=)
                          14: 52BF1CA809B111EAB045B31EC4F9AE02.roa (hash: Xr65mHCatC6pICiwcQZa5i/oCzPDi7V6RY15OS4Gnwg=)
                          15: 55F662DC09B111EAB045B31EC4F9AE02.roa (hash: ZZIctFNRs+dF3/ungPeZECiQ8thFMvaOwkbS3/IBuW8=)
                          16: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (hash: LGtM8Ybe8d9FSZCTF44PIP0ysHKBmg7VxE2tYMnwgq0=)
                          17: 57D0ACB609B111EAB045B31EC4F9AE02.roa (hash: hi+qIA5c9JtFePIeFqR+iOVGTp8W0znKntzlRGKkINw=)
                          18: 48366FBA072D11EAAE8E1D56C4F9AE02.roa (hash: rA48W6mbmo1cUrHauh26/2axU9t4pVig1MM7fwr4HYM=)
                          19: 79E6617E073111EA993EC663C4F9AE02.roa (hash: KNdMMV4ddPG1PIYxHZGgTtyP02+HxhUN5trL6X8W8ws=)
                          20: 48DF5EAE072D11EAAE8E1D56C4F9AE02.roa (hash: EVnYxkLHFo2SdnBBwhslFrJor1VJ1G+vg7jcTYwtGck=)
                          21: 795DEE70073111EA993EC663C4F9AE02.roa (hash: an7/ATp9m2FH7/Oaqy/kFs8hFPzCVSeYxRj+XQGNM1o=)
                          22: 7FC0AC6009AE11EAA7CED313C4F9AE02.roa (hash: /8CRhSx6FQ2DuWKrYuiKIJQOBtYH6RTwYJy2Y9pxBwk=)
                          23: F254F0CE099A11EAB5891D5BC4F9AE02.roa (hash: hFBfd8G4g1FmKx6PuLjjSnV4/y+ga1+9BQQRoD46Goo=)
                          24: F34CE5D6099A11EAB5891D5BC4F9AE02.roa (hash: EycbjHKoId8Q0RL7IgnoYwrdCRnnTaYkg9os90cSbfc=)
                          25: 543B65D209B111EAB045B31EC4F9AE02.roa (hash: ZMN1daISp0LczA5U26jMhiYeT1nSAv1Yasy5ke9ykT8=)
                          26: 537DDF3A09B111EAB045B31EC4F9AE02.roa (hash: qAtZpYCgUE7XF72dDrj/L94aRV1ZqOTXhcPF6PCCyXI=)
                          27: 58DE045009B111EAB045B31EC4F9AE02.roa (hash: Da8Yzxv94zdJCJc8i1UasxbqVNmXViBJ1nylR1PfkJo=)
                          28: F49547A8099A11EAB5891D5BC4F9AE02.roa (hash: yO30SavdL0lkfH2zzbpK5z0lf3go0lJUNRihb4O9ztU=)
                          29: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (hash: a8AgtCob340nx8yuXL+f5RfLTroT5sWQn5L8IBvoNJc=)
                          30: 585A89FE09B111EAB045B31EC4F9AE02.roa (hash: EQhmpvzt8tPu0JkuvHMlwu2IJctW7a7QBQJVZSH/ehw=)
                          31: D2CA53BCAF8E11EAA40B786BC4F9AE02.roa (hash: kt/QhS+HSuW1mGGcNlDLEIbcQB0nMoMkqkgVwo38aaQ=)
                          32: 55703D7E09B111EAB045B31EC4F9AE02.roa (hash: 63TiAdKvqqYxBAI3wGnfXiLbHNNChNs4eajAtuZ5xaQ=)
                          33: 70CB2CA80B4D11EA9667AC1FC4F9AE02.roa (hash: yfQXawRTireCTQRb7xZfapGsbueAp0wxnbETVcNX62M=)
                          34: F3DDF814099A11EAB5891D5BC4F9AE02.roa (hash: gGFOwtHYVKtQUc8WJmjr//RYr4W1p4RPISOLlqprsos=)
                          35: 7AA2CD46073111EA993EC663C4F9AE02.roa (hash: CYK9f7PkALQsQBTl6o8dgHUkp/bZCI+9/pYzX3H0gkI=)
                          36: 0DD6A56C073011EAAD272760C4F9AE02.roa (hash: qBejjoYLdXtif3ZRqqrrPUtMJWD/QrhqZjHJnzgHkz8=)
                          37: F2D46CA0099A11EAB5891D5BC4F9AE02.roa (hash: Ghvi3pGT4pcObcWFUQUF1+74t/jTPSzrTwMbuA1l0j4=)
                          38: F0735BD8099A11EAB5891D5BC4F9AE02.roa (hash: gZW5b4GbZln6AGw6rT+ITMFh9KpuonYuWjnon6ryE+Q=)
                          39: F10FEA5C099A11EAB5891D5BC4F9AE02.roa (hash: IHqGkG4g/iAJtEoc1G8Eq60Xz68M4ea272cwSzqau7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
                          rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 17:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4171 (0x104b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Jan 10 17:53:32 2026 GMT
            Not After : Jan 17 17:53:32 2026 GMT
        Subject: CN=6962921c-31bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:c4:2b:d1:a5:d6:ec:7f:7a:b8:f2:89:27:
                    86:e9:44:18:08:3e:18:59:35:3d:3b:f5:5e:6c:26:
                    da:5e:f7:c7:56:2c:f8:ea:bd:cd:e3:27:2f:4a:0d:
                    f6:1f:46:67:91:02:ea:62:1c:34:66:0e:64:bf:73:
                    9e:6d:59:8d:ec:ac:4a:d2:5c:45:2f:f4:1c:95:89:
                    1d:77:bb:82:15:15:72:f0:e5:31:56:aa:e3:4d:8a:
                    74:9d:03:82:be:62:f9:50:a2:2d:0e:98:4a:64:8f:
                    33:d2:b0:23:2b:6d:5a:2b:d2:37:b5:bd:d1:aa:c2:
                    11:5f:95:34:e1:7b:1e:fd:de:85:b0:db:85:df:aa:
                    97:7d:53:9f:03:5a:52:7b:bb:80:ab:94:b1:f6:bc:
                    57:49:36:c9:c0:2a:ff:ba:e9:42:c0:18:51:9d:51:
                    a4:dc:c4:a6:11:09:62:0f:95:a9:6c:f1:22:69:44:
                    68:68:ca:e6:88:bd:92:c4:d7:63:3a:76:ee:63:57:
                    69:eb:f0:b9:c2:10:73:f6:4f:df:34:0a:31:89:99:
                    e0:3a:19:12:97:cd:6e:fa:fc:cf:ee:7f:ef:13:65:
                    75:ca:4c:40:ac:96:19:6a:5a:01:4b:3b:4e:7a:98:
                    e6:62:61:6b:22:15:5a:36:c4:e0:87:16:ac:d2:e8:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:8F:AA:2C:50:29:E1:60:8D:E8:0E:E3:73:37:43:28:2F:AB:0A
            X509v3 Authority Key Identifier:
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:0a:b8:6f:a0:a0:5f:29:e9:9c:18:4e:4b:76:68:a4:5d:
         ee:37:f3:f7:a0:d5:5e:07:42:2d:d1:c5:bb:73:69:09:b0:87:
         11:4d:3f:ae:c8:4d:da:70:21:7d:c7:f4:15:f5:d4:f8:30:95:
         f5:62:2a:3e:c3:52:ba:28:b0:6d:7e:98:f0:fa:78:73:fd:be:
         e7:7d:da:4b:34:9f:a5:93:50:7c:fc:af:10:20:1e:e6:2d:5d:
         9b:37:ca:36:11:a5:d4:90:e9:1f:7f:05:63:47:e0:95:19:42:
         34:6d:49:6a:6f:01:79:18:22:4c:77:f7:de:b8:9b:f6:0e:7d:
         df:cb:b1:4f:2b:e9:42:9a:92:b8:35:ba:46:aa:cb:88:6d:12:
         3a:26:cb:95:67:d3:74:b2:b4:62:59:73:79:c8:c0:35:9d:47:
         9f:e4:85:b7:27:b0:4d:b6:06:c3:28:0d:db:a2:ad:25:81:6d:
         8b:42:fd:7f:a1:19:ec:58:30:d4:fb:e5:13:66:06:64:19:ae:
         e7:ff:cf:66:a4:b4:5f:fc:08:a1:1c:10:97:cb:c7:1d:6d:89:
         85:8d:5e:76:fa:fd:dc:21:68:ae:7f:6e:b4:d5:4b:21:b7:39:
         99:42:e6:47:71:06:37:26:5d:e0:ae:73:31:ad:c8:de:26:47:
         0d:eb:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 11:33:18 2026 by rpki-client