This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          jLHz8CSdLANNNbm0dEbkiAFx49C41U2JFrUrNHgRKhk=
Subject key identifier:   31:27:F4:CE:39:92:F5:CE:2C:7D:A9:B4:06:9B:6A:EC:48:BA:8E:C5
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       042A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03C2
Signing time:             Wed 21 Jan 2026 00:03:11 +0000
Manifest this update:     Wed 21 Jan 2026 00:03:11 +0000
Manifest next update:     Wed 28 Jan 2026 00:03:11 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: wZbwI+Eu5qWMdmX7tiKka3bHF1EjmOLzWHDsZE7LvRU=)
                          2: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: rjo+bi3dT0jsXGyAaC/7THKFQ/vbxvn37jUfycsRuPY=)
                          3: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=)
                          4: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=)
                          5: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=)
                          6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=)
                          7: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=)
                          8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=)
                          9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=)
                          10: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=)
                          11: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Jan 21 00:03:11 2026 GMT
            Not After : Jan 28 00:03:11 2026 GMT
        Subject: CN=697017bf-7687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:08:51:eb:d8:77:94:d5:02:95:1b:d6:8b:
                    72:10:2e:8d:09:f3:91:0f:6e:42:3c:30:3a:6f:df:
                    c8:46:52:ba:86:ea:70:bd:60:06:83:79:0b:32:61:
                    6a:9b:60:e1:5c:9a:17:9d:49:3c:54:2d:de:df:17:
                    8e:c4:e5:de:6c:fb:16:b8:33:ee:20:ad:c4:5a:ca:
                    1f:8a:da:45:2d:2f:8f:81:c2:83:ed:5e:9b:d8:62:
                    be:36:63:ab:7c:ea:6b:e6:68:c5:38:5b:a2:63:28:
                    06:76:9f:61:81:bb:a2:ba:38:72:42:ad:96:5c:75:
                    b2:e1:32:96:63:0c:47:40:fc:50:fa:9c:5e:9d:f0:
                    54:8c:60:17:66:71:fb:ee:5e:d5:9b:1a:8d:99:b3:
                    b5:6a:be:9d:87:28:79:96:26:c7:18:3a:ca:01:e7:
                    5e:18:2b:e4:50:75:51:b1:9c:cd:e0:ed:6d:17:86:
                    3a:90:84:ac:fd:e3:b7:18:2b:79:c1:3a:f7:90:85:
                    ef:24:13:fe:c7:0d:7d:8b:cb:b7:89:fc:32:f9:60:
                    2e:52:c5:03:7d:e5:2d:30:f2:a5:c9:0d:ea:14:41:
                    9c:97:2c:fc:90:01:20:03:cb:4f:7e:cb:d7:d0:f7:
                    51:7e:7d:f0:17:6c:0f:fc:0c:7f:02:a4:14:d6:86:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:27:F4:CE:39:92:F5:CE:2C:7D:A9:B4:06:9B:6A:EC:48:BA:8E:C5
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:09:41:20:71:30:98:24:0c:8f:9a:8a:5b:24:fa:bd:ee:67:
         65:d4:c3:35:05:a7:4b:34:85:a2:76:22:58:c0:be:da:e0:22:
         40:ff:0c:62:2b:b6:af:c8:2f:89:8b:af:82:a3:3a:e8:56:91:
         85:e0:9c:41:0a:9d:b1:9d:4c:06:b2:5b:c2:0e:b2:48:cd:16:
         94:09:8a:3f:70:a9:46:fc:d3:1e:73:8c:94:91:10:d2:7c:3f:
         14:b6:c7:a3:ad:1a:f4:04:ef:11:07:e9:bf:0f:18:6d:69:33:
         69:9a:c8:47:55:21:1f:b3:84:ae:0a:31:09:82:0f:92:4a:da:
         a5:4f:27:7a:b7:d8:be:34:17:4e:81:35:c3:62:66:42:7a:70:
         06:a3:da:42:2e:fb:ec:f8:2c:c2:b9:bf:87:1f:4b:60:bc:86:
         7a:87:d7:50:5c:a0:92:65:69:18:95:a0:c6:a0:98:11:2c:93:
         89:0f:b7:e7:73:ae:90:73:ba:7e:c6:e2:86:7a:3e:e5:49:5d:
         96:a7:ed:8e:cd:89:cd:17:ab:f4:8a:7e:e6:25:0c:e1:57:53:
         d0:20:7e:02:1e:23:e5:72:a0:e3:6c:f7:42:4e:4e:0c:1f:7a:
         5b:b9:d3:46:23:ae:1f:8a:84:3e:9b:90:4f:d4:b8:df:cf:7e:
         6d:14:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 16:44:29 2026 by rpki-client