This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
File:                     EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft (raw, json)
Hash identifier:          +GhgPUWOuI31EnirT9TkPaUfsKzslFxPqQmXonzS7W0=
Subject key identifier:   21:3B:89:86:6A:BF:38:AB:58:77:62:CF:47:53:14:5C:1D:B7:07:98
Authority key identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13
Certificate issuer:       /CN=A91F1451/serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
Manifest number:          1A
Signing time:             Sat 17 Jan 2026 06:53:41 +0000
Manifest this update:     Sat 17 Jan 2026 06:53:41 +0000
Manifest next update:     Sat 24 Jan 2026 06:53:41 +0000
Files and hashes:         1: EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl (hash: /UJcYTqctCoRbnJe9jmwUL88zaGh+rPRkQTO0WrrgIs=)
                          2: ACD9C588D02211F0B0E25D5AC4F9AE02.roa (hash: IxsbO9caoWANKEL7yLLsjG2dE6EtRcTKwdSNu4xo6YI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 06:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
        Validity
            Not Before: Jan 17 06:53:41 2026 GMT
            Not After : Jan 24 06:53:41 2026 GMT
        Subject: CN=696b31f5-0a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:d6:5f:01:b3:0f:3d:6f:7a:dc:10:af:9e:
                    43:8f:5b:ad:cf:06:b6:c1:4a:f6:21:f2:f3:cc:ce:
                    04:b7:63:a3:c4:f7:47:4a:32:1b:9b:93:91:9b:01:
                    90:dd:ce:ea:03:42:7f:d2:d3:fa:fb:a1:74:7f:1e:
                    b8:bc:bb:d3:f7:d8:4a:42:4d:01:aa:e3:e5:ab:22:
                    77:14:5f:97:08:0d:d8:e5:de:66:b8:80:5f:2c:d3:
                    17:a8:6c:c6:e4:b3:1b:99:16:56:08:61:25:4c:4d:
                    af:46:7d:c7:78:c0:cf:12:a6:39:bc:5e:ad:6b:7b:
                    24:6d:ad:c0:2d:bb:24:75:4b:21:f6:6a:0f:33:26:
                    9c:b8:4b:12:33:7a:c7:f9:e7:ce:e7:5a:0b:d0:89:
                    64:46:4d:ee:ac:c8:66:b5:7d:9a:f0:2b:e0:12:2f:
                    a7:92:b4:43:6a:9b:c1:97:b2:86:22:eb:7b:a8:ce:
                    84:6e:32:a6:ac:2a:58:0e:84:1b:39:83:81:5f:12:
                    ae:7b:b1:03:aa:2d:fe:c6:ef:cb:0b:be:d9:7a:42:
                    02:5e:20:5a:86:a2:90:2e:e0:56:b6:a1:b3:9f:dd:
                    05:6a:91:9b:3e:40:08:73:1c:2b:04:e1:2d:0c:7c:
                    bd:d5:bb:51:a3:42:31:46:ce:7e:8d:a9:e8:03:c4:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:89:86:6A:BF:38:AB:58:77:62:CF:47:53:14:5C:1D:B7:07:98
            X509v3 Authority Key Identifier:
                keyid:11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:17:c2:d3:99:06:60:a4:70:01:84:65:28:ea:9e:56:ae:33:
         11:d1:b8:c4:9c:5e:7a:1c:5d:ea:fe:a5:7a:90:96:c8:e1:29:
         6f:d2:5d:aa:c5:7a:df:41:cb:b4:16:4e:f5:31:fd:85:3c:72:
         38:23:b2:29:8a:6d:75:38:9e:9a:04:be:d4:97:b5:c4:47:20:
         dd:24:3f:b8:69:9e:96:e8:03:78:0a:01:ba:0f:6b:39:92:9a:
         d2:30:a9:20:0e:5a:4e:25:e9:36:4e:ac:34:e0:09:38:97:19:
         76:d0:66:f4:78:56:52:8f:34:ea:61:b7:c8:e2:47:91:22:2c:
         03:d5:d2:dc:64:75:87:cd:4e:74:69:ec:73:14:b8:25:42:86:
         88:6e:51:f8:9f:a5:fd:d0:1b:e8:f2:da:1b:f7:44:21:06:22:
         f3:d3:f9:92:22:2f:41:eb:fc:08:4d:ed:be:e7:29:96:b7:2a:
         03:38:42:ec:eb:03:eb:6e:eb:b9:0c:95:98:3e:eb:93:1c:8b:
         2b:a3:d7:95:f9:1f:03:b8:32:01:c6:5f:12:04:7d:9a:1a:87:
         86:55:18:1e:5b:08:ea:c2:0b:a7:d2:0a:47:1b:d4:13:bb:69:
         77:4f:b9:21:76:e1:29:81:5b:04:24:a5:89:d0:e6:25:e7:d1:
         41:c9:5f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:11:04 2026 by rpki-client