This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
File:                     E3xUsCE1C4OHmX0BWUrINodrRGw.mft (raw, json)
Hash identifier:          J4OFKHeb1x8+i0WBteyq/VPOluaVAM1do/MPSLOC01Q=
Subject key identifier:   D2:1C:88:B2:D5:A2:A9:23:88:B2:E7:5B:27:4A:3F:EA:06:A2:66:E6
Authority key identifier: 13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C
Certificate issuer:       /CN=A9193235/serialNumber=137C54B021350B8387997D01594AC836876B446C
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
Manifest number:          082E
Signing time:             Tue 06 Jan 2026 21:47:41 +0000
Manifest this update:     Tue 06 Jan 2026 21:47:41 +0000
Manifest next update:     Tue 13 Jan 2026 21:47:41 +0000
Files and hashes:         1: E3xUsCE1C4OHmX0BWUrINodrRGw.crl (hash: rMZOC4z765T4svIxFitv2/cVRban5IfrUqwLAtzgrWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl
                          rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 21:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193235, serialNumber=137C54B021350B8387997D01594AC836876B446C
        Validity
            Not Before: Jan  6 21:47:41 2026 GMT
            Not After : Jan 13 21:47:41 2026 GMT
        Subject: CN=695d82fd-007f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:e7:04:dd:69:1f:ae:be:b4:3e:90:f2:85:
                    76:7e:87:5b:26:ae:7d:5a:7b:53:53:29:14:10:07:
                    af:4e:32:ff:fe:f4:73:f9:92:7f:24:85:20:25:92:
                    ca:2b:92:f2:2c:e3:34:45:c2:51:16:84:44:33:4c:
                    cb:ed:43:89:d4:5b:a4:de:88:c2:1b:63:25:e2:30:
                    bd:99:7c:6a:f9:59:b4:4c:37:a6:23:07:4c:49:d6:
                    eb:4c:66:e6:c5:72:1e:a1:89:de:21:e4:fc:c7:cf:
                    51:4d:96:e3:23:ca:b5:72:04:f3:8b:8f:ba:ec:30:
                    d5:53:80:22:98:8a:bb:16:f1:36:eb:10:b4:2b:7f:
                    5f:6c:3c:5d:3a:5f:ea:78:9d:9b:df:38:7e:d9:c8:
                    f5:05:69:dc:6a:54:37:ff:e1:15:de:59:aa:84:11:
                    69:4f:2a:28:05:21:1d:97:b4:0e:a5:eb:16:5a:43:
                    b4:ae:b9:b6:9b:2c:99:44:6d:65:af:64:db:b7:ea:
                    2c:c2:a0:5f:64:23:cf:20:f4:89:83:0b:c2:4c:60:
                    11:84:11:8a:c1:66:c4:da:42:dc:5c:f0:e5:7c:57:
                    60:c9:e0:a0:8c:74:51:6b:7a:0f:3c:2f:f6:b8:42:
                    43:70:c0:19:f9:31:30:ff:84:aa:fb:22:31:85:33:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:88:B2:D5:A2:A9:23:88:B2:E7:5B:27:4A:3F:EA:06:A2:66:E6
            X509v3 Authority Key Identifier:
                keyid:13:7C:54:B0:21:35:0B:83:87:99:7D:01:59:4A:C8:36:87:6B:44:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3xUsCE1C4OHmX0BWUrINodrRGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193235/A4FC3B5A9FA011EB8042D537C4F9AE02/E3xUsCE1C4OHmX0BWUrINodrRGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:da:20:e8:d3:65:b6:28:c3:a1:89:1a:c3:8f:12:92:34:59:
         50:26:28:9d:0a:d3:e8:a2:f6:73:67:a2:5f:84:b7:17:d4:79:
         50:77:11:fb:98:da:a0:ee:95:7c:f9:f5:74:55:7c:03:f0:d3:
         e4:6a:f7:3a:66:15:c3:8f:5c:6b:2a:31:b3:87:a7:49:5c:04:
         3b:59:ce:c1:03:ae:e4:a9:e1:10:30:b1:fc:93:9d:6b:32:ef:
         29:ff:db:7e:6e:31:6e:e7:2f:83:a5:af:d3:bd:ce:bd:53:11:
         71:21:fa:31:8f:9e:dc:06:13:78:b0:4a:99:49:c9:1b:69:5e:
         00:bd:67:27:6f:11:09:fd:62:1d:52:f3:e8:9f:29:95:d4:39:
         cd:b8:24:43:da:0f:fb:94:88:21:2f:ea:65:02:f4:1b:2d:fd:
         42:04:92:dc:f8:25:b4:ff:67:2a:15:8f:5d:e0:a0:bc:55:a9:
         4a:31:eb:e8:09:f0:81:f4:10:de:ad:7d:ee:6d:7f:bd:a3:5f:
         3f:45:bf:17:c2:b3:ba:75:15:83:9b:4e:9a:91:97:54:3b:04:
         1d:49:5e:11:43:81:2b:e6:c8:6e:6b:89:f0:03:23:fa:63:c1:
         89:46:44:51:07:2a:6d:0c:9b:84:5c:5c:b7:2f:e4:52:3d:74:
         74:d7:57:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 10:14:21 2026 by rpki-client