This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
File:                     ME1k4_EFEpfktirH3jSA9Hoprg8.mft (raw, json)
Hash identifier:          G9fe1Nl5x9lMmJ0GLZ0ufPWXw/g/D4Ee0juiDvF+Woc=
Subject key identifier:   BF:63:E2:ED:5F:91:9A:CB:E3:3A:7A:C5:BA:CF:4E:8C:25:8A:D7:C3
Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F
Certificate issuer:       /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
Manifest number:          04AE
Signing time:             Tue 27 Jan 2026 01:22:50 +0000
Manifest this update:     Tue 27 Jan 2026 01:22:50 +0000
Manifest next update:     Tue 03 Feb 2026 01:22:50 +0000
Files and hashes:         1: ME1k4_EFEpfktirH3jSA9Hoprg8.crl (hash: YA0dFikt68aKuAXh20Ke/CLUtCpqtpv5ty5DeC3sFJU=)
                          2: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (hash: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU=)
                          3: A9B82544A89A11EFA52A9970C4F9AE02.roa (hash: SIcxhOEIM41kk3geT6tTo6gosphamPrjvTMVkyrZL2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 01:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F
        Validity
            Not Before: Jan 27 01:22:50 2026 GMT
            Not After : Feb  3 01:22:50 2026 GMT
        Subject: CN=6978136a-2a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:b3:4d:f3:54:a0:69:30:f2:e8:52:41:db:
                    ee:43:e8:87:e8:db:20:66:5e:95:6b:c0:77:cc:fa:
                    5c:c9:5b:d7:f5:1b:20:c4:43:6a:1f:14:6b:52:1c:
                    a7:04:ec:e8:0b:35:21:e8:41:65:98:47:b8:a2:90:
                    6b:52:b3:19:9d:fd:cd:7f:25:14:03:5b:99:75:14:
                    73:39:40:81:46:87:f9:82:af:12:9e:49:e1:5a:e5:
                    73:37:73:88:b8:3d:eb:f0:37:15:aa:9f:50:cd:e0:
                    df:db:ca:05:9f:2f:8f:8b:a8:e9:76:56:da:ba:27:
                    8f:e6:3a:1e:8e:50:9e:cf:7b:06:8c:0a:ad:b7:54:
                    fc:53:e1:16:b7:da:e9:4c:96:59:53:6a:9c:c8:70:
                    2f:ce:6e:0d:cb:a6:e5:64:03:15:4c:d9:f0:1a:ee:
                    eb:e0:d9:43:a1:34:71:eb:71:1f:e5:b3:8e:dc:20:
                    d3:a0:b2:a8:fe:47:81:73:dc:7e:9b:ff:05:53:cc:
                    9c:f9:4b:87:5b:ec:73:df:03:85:53:2b:af:21:2c:
                    31:90:96:b8:72:a7:2f:3b:29:e1:2e:7a:ac:71:73:
                    b2:b8:ea:76:95:93:7b:e2:c7:b3:66:c0:07:86:55:
                    f0:61:c1:b0:91:7c:7f:01:15:d3:6f:2b:aa:ca:08:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:E2:ED:5F:91:9A:CB:E3:3A:7A:C5:BA:CF:4E:8C:25:8A:D7:C3
            X509v3 Authority Key Identifier:
                keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:c4:aa:19:30:47:94:4f:32:c8:d8:9e:f6:3a:ef:88:30:
         42:9c:a1:e9:d2:05:58:eb:78:6c:ca:5b:87:c1:17:37:89:e5:
         dc:be:72:a1:46:9c:e1:5e:cf:41:ed:42:f2:ac:29:99:f9:18:
         f0:e1:7a:4d:fe:73:ba:df:b8:d4:d9:18:27:05:bd:e7:df:60:
         a2:d7:72:33:f5:b8:fb:f4:29:fb:1f:08:c8:a9:e0:4a:3d:8a:
         d2:cf:7c:d0:3f:12:0e:21:34:5e:01:a5:cd:a8:84:6d:17:ed:
         23:78:fd:04:8a:f7:07:95:70:ef:61:d6:77:0c:80:c7:83:c7:
         7b:84:46:bc:6d:09:16:33:7a:00:d7:ed:de:a8:94:94:fb:1a:
         d8:68:e7:05:f4:37:73:5d:31:00:f6:e1:ee:09:dd:21:28:e1:
         4d:95:87:ef:de:fb:5d:9c:5d:a6:c8:c0:66:5a:f5:81:4a:6c:
         fc:39:e6:9f:c8:f8:92:74:b4:cc:a6:fa:21:d1:d3:da:3f:41:
         86:10:55:03:11:7c:81:18:fc:58:06:6e:b1:c9:d6:aa:75:45:
         d0:0d:b5:7e:dc:ce:02:df:0c:8d:c6:0b:60:b4:10:87:27:c9:
         30:c2:c7:10:51:7c:d5:84:29:85:f0:d6:14:e1:f8:74:13:09:
         07:aa:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 19:37:57 2026 by rpki-client