This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File:                     hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier:          KDq7wZUil3qNv2L+aB1ZTMI4sUt3wD+82hHNbD7Z4/M=
Subject key identifier:   39:AA:96:B1:57:50:64:00:8B:E9:E4:D4:C1:16:DB:24:03:D3:A3:1F
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer:       /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial:       034F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number:          0344
Signing time:             Sun 15 Feb 2026 00:40:36 +0000
Manifest this update:     Sun 15 Feb 2026 00:40:35 +0000
Manifest next update:     Sun 22 Feb 2026 00:40:35 +0000
Files and hashes:         1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: WIFrF+aXgEGtQ75dU7OAD13TNfS/bAkjzkGks5aN4vk=)
                          2: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: rCIHZh9wUruVRZk/2Wl+iO0bQmypaGymRp+P5pHJgrc=)
                          3: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: WLqs4EYDGZGhgsTcvZkB1qzpm9zeqwQq3iz4UzKMW3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 00:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
        Validity
            Not Before: Feb 15 00:40:35 2026 GMT
            Not After : Feb 22 00:40:35 2026 GMT
        Subject: CN=69911603-871a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:a9:2f:05:4b:f3:cf:84:01:8e:d8:4b:68:
                    95:8a:46:5e:41:c8:82:10:3a:df:e5:03:ba:bd:04:
                    80:46:50:71:43:d4:ed:bc:72:70:be:ef:49:44:4c:
                    ca:58:f6:82:1f:97:51:bb:13:91:1a:72:8b:76:e8:
                    fc:5e:01:87:df:17:f0:bc:d9:e7:4a:b3:db:07:58:
                    09:78:c3:80:5c:2a:7f:74:23:cc:90:53:8d:05:4d:
                    5e:9c:c7:68:9b:e9:d6:95:79:ca:d8:94:b8:57:3b:
                    d9:8c:93:df:a4:15:c6:67:52:b5:52:92:25:0b:fc:
                    88:b9:c1:86:8c:6c:c7:4c:a6:e3:e4:80:ce:8f:1c:
                    e7:26:f6:87:89:20:06:8a:46:1a:09:19:0e:48:d2:
                    8c:0e:43:af:57:38:92:f1:a9:da:02:91:8d:5b:6d:
                    ef:12:d0:1e:f6:70:47:69:86:d4:9b:2a:c9:56:4c:
                    0b:65:6a:b1:89:8c:13:ac:cc:10:34:46:e3:b3:df:
                    43:24:d7:71:c7:63:99:2d:4f:f5:ef:30:c3:b6:34:
                    0b:fa:f5:30:8b:53:a9:c7:d9:9f:41:be:94:56:1e:
                    65:c8:3d:c7:00:d0:9c:2c:5a:35:da:f0:e2:c8:d5:
                    6f:39:17:ac:a4:c6:23:48:9d:73:77:e1:01:0a:73:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:96:B1:57:50:64:00:8B:E9:E4:D4:C1:16:DB:24:03:D3:A3:1F
            X509v3 Authority Key Identifier:
                keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:d4:40:67:4a:4a:21:cb:05:e6:35:a6:82:db:17:9a:c6:
         2e:4b:a6:84:e2:69:83:01:a2:75:55:3a:24:e4:98:ad:15:c4:
         88:33:e2:03:00:b4:78:31:f8:9c:ee:3b:d8:0e:d1:32:49:e6:
         13:4b:48:85:c6:97:ec:94:13:e4:64:00:1b:db:61:04:5e:a3:
         40:32:2d:f5:c3:ff:41:ae:bd:49:0b:f7:38:1a:b4:ec:13:52:
         b4:02:83:8c:81:18:d8:c8:cb:cf:c0:3c:c6:1b:d8:0e:3e:b5:
         95:5a:8b:91:83:52:f5:4b:ef:36:f9:50:e6:77:2e:98:58:df:
         5b:34:27:41:55:f6:26:fb:8f:2f:e3:37:89:73:56:fb:11:6e:
         a3:a6:d9:6a:45:e2:f7:52:aa:33:d4:68:b2:a3:f1:bd:c3:27:
         00:ff:ec:61:35:36:48:ce:11:d0:f7:75:02:d1:ad:b2:44:1b:
         1e:94:94:12:cc:80:91:ad:75:a4:0e:00:b9:f8:67:97:b1:9b:
         45:a1:f0:3a:40:88:2d:35:d9:2e:a8:12:ae:13:f6:19:ea:18:
         a8:b7:5e:c9:88:82:97:e9:be:ce:11:b4:60:07:08:c0:7f:e7:
         1e:25:1c:83:fd:c3:49:42:6e:9b:39:71:d2:90:a8:45:76:e6:
         86:18:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 09:20:07 2026 by rpki-client