This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
File:                     eErjDFQTMvpDt1Y83AGwLtG9nFA.mft (raw, json)
Hash identifier:          f1UU3TkMdSIC616Hl70WtyS+DyWZZk26QnebI9JyEVg=
Subject key identifier:   76:9D:1A:F6:ED:8D:2D:CE:15:22:7C:BA:B6:8C:C8:82:7C:F5:A5:98
Authority key identifier: 78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50
Certificate issuer:       /CN=A916BCBA/serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
Manifest number:          05
Signing time:             Mon 05 Jan 2026 06:59:12 +0000
Manifest this update:     Mon 05 Jan 2026 06:59:12 +0000
Manifest next update:     Mon 12 Jan 2026 06:59:12 +0000
Files and hashes:         1: eErjDFQTMvpDt1Y83AGwLtG9nFA.crl (hash: Sb4RFp6/avnO0CR//2JnXmn1Hofc1i0F8gCs2wpLbKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 06:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=784AE30C541332FA43B7563CDC01B02ED1BD9C50
        Validity
            Not Before: Jan  5 06:59:12 2026 GMT
            Not After : Jan 12 06:59:12 2026 GMT
        Subject: CN=695b6140-142f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:fc:b9:50:3b:23:df:f4:d7:cb:79:aa:a2:
                    ef:62:cd:15:26:6c:f5:6d:32:ff:cb:7b:6f:1c:c3:
                    00:08:50:b9:f0:8f:32:f7:22:c8:5e:ff:1c:86:cd:
                    59:5b:1d:62:53:f9:3c:8c:d5:66:9b:c0:f1:69:90:
                    94:7a:2b:28:e4:45:64:e5:9c:d6:9a:bf:cf:04:18:
                    1c:27:70:aa:0c:fd:ab:e2:e2:af:3b:b5:fb:e7:15:
                    ff:1d:08:34:f6:52:84:33:12:d6:9c:af:5d:17:11:
                    51:33:a7:fd:f9:30:0c:84:33:67:4a:92:99:9e:bb:
                    ae:9c:ca:17:0e:cd:ad:7b:48:e0:b1:e6:b1:46:74:
                    c8:53:25:d9:03:c2:92:35:64:d4:af:d7:0f:19:f9:
                    55:85:5c:1b:a7:5d:9c:07:e6:a5:6d:8e:07:0c:54:
                    92:26:10:42:04:17:06:4b:c3:05:9c:3d:ab:57:38:
                    2d:0a:f1:02:97:9f:35:64:22:49:41:34:f4:7c:83:
                    d6:66:a4:7a:e4:4f:8b:54:26:d3:fe:56:29:bc:e8:
                    80:23:19:70:00:c5:d0:6a:23:3e:91:f4:9e:92:70:
                    4b:18:c6:34:63:4c:6a:3b:64:5e:37:4d:6c:9f:26:
                    2e:da:07:2b:2c:3d:c5:27:a3:0f:7b:dc:d3:d3:5b:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9D:1A:F6:ED:8D:2D:CE:15:22:7C:BA:B6:8C:C8:82:7C:F5:A5:98
            X509v3 Authority Key Identifier:
                keyid:78:4A:E3:0C:54:13:32:FA:43:B7:56:3C:DC:01:B0:2E:D1:BD:9C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eErjDFQTMvpDt1Y83AGwLtG9nFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3C928DC6E62C11F0976A95FB6F6F56BC/eErjDFQTMvpDt1Y83AGwLtG9nFA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:1b:94:5e:ab:bc:da:aa:10:f9:9e:49:4c:0e:1c:02:1d:
         eb:bb:15:a2:cd:61:93:ac:16:b5:1a:44:d4:0a:d9:5d:05:76:
         c6:55:5a:60:ff:b0:14:02:3f:a5:ec:98:b8:ee:ad:e2:88:77:
         ad:24:dc:bb:c5:e1:bd:08:8a:c7:89:4a:94:64:55:01:24:86:
         10:b4:03:de:3c:db:47:07:82:c6:81:cf:43:e1:5a:a2:69:2e:
         74:f3:14:3a:22:c7:09:e3:aa:d6:ba:b3:29:77:ee:c5:30:71:
         9b:3e:77:c5:b0:dc:d4:3f:c5:fd:85:6e:a3:5f:4a:54:b4:d7:
         cf:53:af:83:b3:ec:22:d7:25:9e:d4:00:9f:91:45:0d:74:c6:
         f6:2b:d4:9f:a4:57:dc:2f:e5:a9:01:34:62:e9:17:f0:52:0c:
         d3:00:ad:7e:2b:1d:6d:13:b7:2c:9f:ae:a3:f0:bc:c2:6e:c0:
         a8:65:52:96:e9:04:28:9f:5b:56:f1:07:65:f2:47:f0:7c:95:
         7a:1e:81:fd:87:fd:c8:ff:39:d7:ee:d0:3e:64:7c:bc:e8:48:
         62:7e:d7:4d:cb:0d:f5:99:ca:39:58:8d:00:27:f0:95:d9:2e:
         2b:31:59:25:77:5e:89:32:8c:a9:fe:00:b0:9d:56:c6:46:66:
         c7:43:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 06:34:31 2026 by rpki-client