This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          5HooTS0Ja16mcxem7Lit/wJcV8DzmW7yqTlvcbk9wvI=
Subject key identifier:   AB:38:CD:2F:EB:AF:02:A2:5A:DC:C9:65:50:8A:44:AB:F1:50:FE:89
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          F2
Signing time:             Sun 11 Jan 2026 04:29:44 +0000
Manifest this update:     Sun 11 Jan 2026 04:29:44 +0000
Manifest next update:     Sun 18 Jan 2026 04:29:44 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: lYbxbEw7dr91BNGZ7UT4Eym4J/4Oo1d7KL5AeGm8mSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Jan 2026 04:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
        Validity
            Not Before: Jan 11 04:29:44 2026 GMT
            Not After : Jan 18 04:29:44 2026 GMT
        Subject: CN=69632738-9943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:94:ba:28:8c:f0:0d:c3:5b:34:82:64:3f:
                    02:6b:3f:21:79:19:e7:23:6b:dc:ed:20:bb:84:37:
                    f5:ad:b3:db:20:74:30:53:45:1a:91:c0:84:27:a0:
                    f0:54:8a:5a:9d:d1:04:12:41:4a:db:45:10:a9:fc:
                    8d:35:2a:9d:da:f0:1b:82:34:f6:5a:6a:c2:85:e3:
                    f9:f8:0c:61:4e:ab:70:35:7e:5f:89:85:9e:d6:46:
                    28:59:89:6e:8a:00:22:7c:4c:88:72:3f:d1:df:f6:
                    ad:b1:dc:70:9c:9c:bc:5e:3d:19:12:28:ae:78:b0:
                    30:ca:d4:94:14:fa:5f:5a:f3:41:78:76:90:57:89:
                    d5:56:5a:ad:02:fd:ec:23:3c:03:e0:a4:a4:81:71:
                    1b:9d:19:9f:ab:68:b6:be:f3:de:93:aa:cf:20:30:
                    09:07:0d:a3:71:2e:f9:0e:ac:31:51:f0:17:35:a6:
                    90:d2:f1:94:59:4e:56:09:52:31:84:a7:b0:29:9f:
                    f3:2c:a1:f8:c0:6d:ff:fb:8e:f7:63:50:17:e0:23:
                    e7:d3:f2:1a:af:2a:21:ef:24:15:75:8e:05:c9:13:
                    88:1c:d3:63:a7:07:29:59:32:c9:06:3c:00:ef:59:
                    1b:12:ef:a6:38:92:af:b7:d6:c3:4c:f0:a4:33:b2:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:38:CD:2F:EB:AF:02:A2:5A:DC:C9:65:50:8A:44:AB:F1:50:FE:89
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:76:98:de:88:8f:58:64:28:0b:3c:23:83:0c:5e:f5:79:
         22:5c:50:c5:13:9d:d2:a3:76:cd:b1:1c:24:9c:63:05:7e:34:
         ae:13:28:5c:b9:63:fe:d1:40:6d:14:5b:8a:58:53:6d:9c:ca:
         38:70:e5:8d:90:39:4c:b2:84:f5:e8:ba:1f:27:b3:3f:33:e5:
         54:18:96:64:55:82:1c:a5:9a:be:6a:34:9f:31:00:b6:4c:5f:
         15:8b:e5:f3:7b:7a:6c:f1:a2:bb:9e:cc:2a:97:93:96:32:90:
         bf:fd:3a:e5:a3:00:38:86:07:35:a0:5a:5a:75:a8:62:fe:b9:
         7d:33:7e:a8:62:c7:bd:12:b7:2c:2e:1d:af:c9:e2:4d:a3:29:
         4f:cc:83:64:df:d5:26:4b:74:f1:c7:bd:62:c0:16:95:8d:82:
         12:ce:7b:dd:fc:05:6c:fc:24:83:72:d1:99:d7:c5:e9:6f:73:
         8b:bb:5f:34:01:37:0a:8d:64:c5:d9:4b:80:3d:04:0f:39:57:
         8a:2a:41:f6:51:42:d6:0b:77:eb:af:24:77:95:69:3d:6d:d5:
         30:45:4d:1b:d6:0a:c9:7b:13:05:aa:7f:92:c0:3b:df:8c:08:
         89:b1:0d:9b:72:46:45:2e:58:98:34:0a:73:f6:27:d7:33:b2:
         02:5e:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:58:23 2026 by rpki-client