This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File:                     bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier:          aVT+xAj2DCVLT7ByUkn26evxjy6/r0G7cAE4YkB6RTQ=
Subject key identifier:   A5:0C:54:45:34:29:3D:76:34:D2:39:48:E3:55:AA:04:86:22:90:BE
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0ABB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number:          0A9A
Signing time:             Thu 05 Feb 2026 05:28:14 +0000
Manifest this update:     Thu 05 Feb 2026 05:28:14 +0000
Manifest next update:     Thu 12 Feb 2026 05:28:14 +0000
Files and hashes:         1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: 1Ex/pq9Mwxe40OJBIASuC0nKIy9qI5eZ7HdQDIgqgk0=)
                          2: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: yu7Gzab+ZfqH+4m4+3KIWb8qWAN7g8OtQCUYR4Hw6Qw=)
                          3: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: R50vxZrWUTgOZOulbAeHkJh7/C1wukAfa8pX0j0danc=)
                          4: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: uBoNIMKOZ7mdZtPmDt522sQeNo1Hui8N7OHysFbsQzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 05:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Feb  5 05:28:14 2026 GMT
            Not After : Feb 12 05:28:14 2026 GMT
        Subject: CN=69842a6e-b97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:97:54:2a:da:9d:ee:4e:06:c5:47:2b:da:
                    4b:08:34:b9:67:cb:81:a9:c2:b0:f3:b8:a5:a5:40:
                    5d:7b:b9:54:3e:c7:a3:e0:19:21:66:e3:44:29:bd:
                    1f:01:02:4b:64:6f:6b:ab:0e:70:2f:67:cf:f4:fa:
                    ac:ff:67:55:34:9d:dc:29:bf:41:77:47:cf:4b:bb:
                    f4:7d:28:a3:35:a8:89:da:fa:bc:f0:96:7b:3a:95:
                    c9:09:55:7c:c6:26:92:21:e0:a1:8d:63:56:8c:bd:
                    f0:56:b5:2f:02:fa:52:86:bd:dc:3a:44:a6:fb:8f:
                    9f:9e:0d:5f:32:22:76:9c:75:d1:1f:ee:aa:ad:9d:
                    fb:c0:e6:19:61:26:4c:2b:67:58:1e:e3:e5:0e:63:
                    df:9c:d6:7f:8d:0f:53:c0:c4:ab:06:c9:cd:a2:2a:
                    e9:63:35:ce:5d:99:32:e5:32:48:94:10:6f:c8:e7:
                    33:08:68:27:b2:07:ab:18:59:7c:38:ab:d3:24:c2:
                    bd:52:66:e8:c2:12:a8:e2:fb:8c:29:87:de:e8:07:
                    16:ff:1c:9f:b3:39:5f:dd:8d:77:4b:25:a7:ae:14:
                    f3:c6:f0:f5:f6:c5:90:a3:86:ed:ce:ed:f4:35:0f:
                    cc:7f:ea:df:6f:2a:3b:f6:c1:0c:63:89:7a:ce:72:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0C:54:45:34:29:3D:76:34:D2:39:48:E3:55:AA:04:86:22:90:BE
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:60:2e:a8:e1:b9:d1:5a:d8:2f:a5:f5:2c:08:af:88:48:
         44:3f:c3:27:14:9b:87:98:0a:ad:c6:55:ed:91:59:2a:e3:0d:
         41:a0:b3:27:79:b7:bb:13:8a:a1:af:95:45:f9:0e:4a:66:3e:
         0e:c9:c3:69:11:c8:04:fd:e8:32:dc:7e:56:ab:1c:d2:f4:b3:
         8e:ae:4c:c6:bf:c8:ce:89:f4:35:ef:62:df:df:cf:80:c4:af:
         e2:b2:22:d0:ab:24:39:c1:e4:49:ea:6c:34:47:63:f6:50:3d:
         39:1d:63:29:f7:03:75:6e:99:40:dc:36:d9:d9:40:a4:45:50:
         77:29:6e:3c:a8:99:34:bb:08:5a:04:2f:09:0b:e0:f9:ae:3d:
         1c:42:62:01:ba:b7:13:3f:5c:d2:73:81:36:88:8c:03:f7:01:
         38:48:94:21:b8:3a:d0:9b:e0:a5:d5:a4:51:7e:cb:67:a2:77:
         62:a8:a8:b7:c8:2c:25:91:c1:eb:3e:6b:4b:ec:24:1c:d9:96:
         0d:07:6b:76:0c:8f:64:e2:89:50:ca:2f:3e:54:b0:2c:8b:bb:
         ef:6e:f4:71:de:41:a6:b0:35:ca:80:f8:98:a5:2e:22:99:3f:
         48:5c:f8:08:b7:a0:6a:1a:a3:d6:b8:1d:31:ea:b2:4c:d2:b4:
         55:37:ba:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjYwMjA1MDUyODE0WhcNMjYwMjEyMDUyODE0WjAYMRYwFAYD
VQQDDA02OTg0MmE2ZS1iOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjr6XVCrane5OBsVHK9pLCDS5Z8uBqcKw87ilpUBde7lUPsej4BkhZuNEKb0f
AQJLZG9rqw5wL2fP9Pqs/2dVNJ3cKb9Bd0fPS7v0fSijNaiJ2vq88JZ7OpXJCVV8
xiaSIeChjWNWjL3wVrUvAvpShr3cOkSm+4+fng1fMiJ2nHXRH+6qrZ37wOYZYSZM
K2dYHuPlDmPfnNZ/jQ9TwMSrBsnNoirpYzXOXZky5TJIlBBvyOczCGgnsgerGFl8
OKvTJMK9UmbowhKo4vuMKYfe6AcW/xyfszlf3Y13SyWnrhTzxvD19sWQo4btzu30
NQ/Mf+rfbyo79sEMY4l6znIPqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUMVEU0
KT12NNI5SONVqgSGIpC+MB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzM0Qy9BNzMyMzVFQzczQzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2
TXRQSTI3ODZ6RUNDejJwYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsJmAuqOG50VrYL6X1LAiviEhEP8MnFJuHmAqtxlXtkVkq4w1BoLMn
ebe7E4qhr5VF+Q5KZj4OycNpEcgE/egy3H5WqxzS9LOOrkzGv8jOifQ172Lf38+A
xK/isiLQqyQ5weRJ6mw0R2P2UD05HWMp9wN1bplA3DbZ2UCkRVB3KW48qJk0uwha
BC8JC+D5rj0cQmIBurcTP1zSc4E2iIwD9wE4SJQhuDrQm+Cl1aRRfstnondiqKi3
yCwlkcHrPmtL7CQc2ZYNB2t2DI9k4olQyi8+VLAsi7vvbvRx3kGmsDXKgPiYpS4i
mT9IXPgIt6BqGqPWuB0x6rJM0rRVN7rN
-----END CERTIFICATE-----
Generated at Thu Feb 5 16:51:22 2026 by rpki-client