This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
File:                     IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json)
Hash identifier:          HIrQ4wdYFzhm2i0DXBeD5+z70YOFyv8FYaPz6mjkf5w=
Subject key identifier:   F7:D0:26:48:05:33:82:CC:A1:DC:A9:F0:FB:06:2B:C7:A8:46:F2:8D
Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD
Certificate issuer:       /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
Certificate serial:       01BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
Manifest number:          01B7
Signing time:             Sun 15 Feb 2026 03:09:38 +0000
Manifest this update:     Sun 15 Feb 2026 03:09:37 +0000
Manifest next update:     Sun 22 Feb 2026 03:09:37 +0000
Files and hashes:         1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: nwj3Hkg9/KpSz/p4i6UdNnsHSTyGpqrYBdZhnpJlNYA=)
                          2: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=)
                          3: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl
                          rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 03:09:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD
        Validity
            Not Before: Feb 15 03:09:37 2026 GMT
            Not After : Feb 22 03:09:37 2026 GMT
        Subject: CN=699138f1-c2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:5d:83:50:4d:9c:98:2d:6f:9b:0e:0c:5f:
                    9c:76:6c:0e:69:9a:a0:2f:a1:2e:a4:43:d6:69:cc:
                    82:3d:ae:ed:b9:bd:f8:7b:b8:e5:59:34:ed:12:98:
                    c0:ec:64:b5:cd:a7:9d:be:6a:b5:95:f7:35:41:b0:
                    28:18:26:f7:57:c3:87:cf:68:e4:62:94:5c:ec:cc:
                    22:02:e1:c6:00:19:d1:32:fa:16:d1:4a:da:a1:c2:
                    9a:24:d6:ca:d6:93:ca:3c:b5:39:04:45:ad:b2:de:
                    df:db:3c:99:d8:9b:7c:8b:0e:50:26:2a:22:bf:98:
                    52:fd:de:f3:e9:ce:c0:8b:66:a4:74:5a:16:68:72:
                    61:7b:48:b5:39:db:e8:b9:21:41:98:38:51:d4:28:
                    24:27:25:16:f9:e5:11:e0:97:92:54:83:78:ca:80:
                    d0:51:08:10:50:96:c5:1d:45:9a:72:9f:84:a0:7d:
                    47:e5:c2:37:02:e6:73:6a:e1:01:2a:2b:d4:31:9a:
                    35:8f:65:4d:6f:20:ab:39:4e:57:1a:aa:12:9e:43:
                    32:29:f4:0b:02:20:df:7c:89:06:82:83:63:74:e0:
                    07:78:e9:52:79:79:04:f1:bb:47:51:30:74:9b:f3:
                    f1:30:43:24:df:1d:96:49:c2:18:91:41:b2:5f:fa:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:26:48:05:33:82:CC:A1:DC:A9:F0:FB:06:2B:C7:A8:46:F2:8D
            X509v3 Authority Key Identifier:
                keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:71:f8:80:0e:f4:91:7a:27:df:04:34:7b:2d:c8:95:2e:c5:
         62:40:99:d5:f9:32:94:41:1f:21:37:65:e6:9a:07:d1:fa:d2:
         22:c6:53:45:b1:40:79:24:b1:49:9a:9c:72:ef:fe:c7:04:07:
         a1:38:43:d4:4c:58:8d:fc:b9:e5:f3:56:c0:d5:b3:b7:d4:1b:
         54:0c:ac:8c:7c:17:e6:0e:c5:7f:3a:2f:35:15:93:36:e1:a4:
         bf:48:ae:c0:1c:35:42:aa:ab:c9:43:c7:d5:c3:fa:14:75:c5:
         d6:45:3d:a0:83:7d:93:0c:0a:27:5a:01:de:88:e8:a7:ff:c3:
         b6:33:a0:15:02:81:7d:ca:59:59:54:af:d9:3b:03:ea:06:da:
         f3:21:2d:74:2b:a8:2b:e4:28:49:3f:f6:f5:b5:8a:53:6e:5c:
         5a:86:c6:46:c3:6c:9c:91:c7:92:09:b0:d6:28:3b:50:b0:1d:
         fa:7d:2d:3f:39:83:c8:39:c7:fe:33:fd:74:0f:6e:0b:5d:f6:
         cb:55:70:09:80:bb:3a:b0:12:d4:d1:fd:a3:57:1e:e6:7d:83:
         2c:9a:c0:a0:24:05:1f:21:00:c8:ac:8c:42:b7:13:e2:53:16:
         6f:26:83:e1:16:44:af:f5:00:00:06:d8:3c:5d:19:45:38:d1:
         20:f4:d4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:09:22 2026 by rpki-client