This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File:                     0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier:          5mC/8mk2JCyPetAsW0m1lxvdBuplyjjwJCN1Zc36QIs=
Subject key identifier:   D2:AF:C4:99:48:25:FD:84:3B:E4:BB:6A:B5:00:1C:93:32:C1:76:37
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer:       /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial:       1AFA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number:          227C
Signing time:             Sun 08 Feb 2026 15:48:54 +0000
Manifest this update:     Sun 08 Feb 2026 15:48:53 +0000
Manifest next update:     Sun 15 Feb 2026 15:48:53 +0000
Files and hashes:         1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: GMSh2mCfyKFlyoSZCbds+ClDDPMxit17Uxo67ujBgts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 15:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6906 (0x1afa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
        Validity
            Not Before: Feb  8 15:48:53 2026 GMT
            Not After : Feb 15 15:48:53 2026 GMT
        Subject: CN=6988b066-9d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:5c:64:e0:89:47:36:74:08:1c:bb:15:ae:
                    91:d5:07:e2:08:a4:bb:32:ee:3d:7b:56:0c:72:3a:
                    6b:94:a2:c4:76:26:6a:07:6a:6b:b2:8d:57:31:14:
                    0c:cc:60:f6:00:f9:1f:c3:66:a7:8e:75:07:0d:2c:
                    de:5a:8b:24:7a:81:f3:10:3f:74:e8:8a:e4:6a:cf:
                    16:ca:ec:ba:dd:d0:ca:d5:a5:79:e3:2e:99:17:a1:
                    24:30:ec:df:6a:0a:9a:46:23:cf:f2:92:ac:6d:03:
                    33:ff:c2:47:ad:bf:cb:e8:78:98:e2:56:ec:66:7b:
                    ee:3c:0c:d5:13:4f:96:54:16:ce:c7:90:21:1e:7a:
                    b3:14:c4:7d:ad:ca:d4:34:25:59:f6:02:b7:cf:66:
                    b3:54:e2:00:6c:72:d7:02:9a:36:90:03:b0:b4:d2:
                    8a:22:17:b8:c8:25:43:49:56:0f:52:80:3a:18:0a:
                    b7:6b:47:23:8e:15:c2:c8:cd:c4:91:65:88:6e:36:
                    fd:9f:8a:40:53:40:e9:de:e0:88:da:97:71:5b:e4:
                    06:f7:b7:03:a9:d1:12:c3:bb:f2:73:dc:c1:fb:89:
                    df:12:95:b4:a7:59:5b:2a:f6:55:66:fd:17:6e:f1:
                    e3:3a:16:39:38:b7:14:56:45:ec:82:94:b5:68:79:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AF:C4:99:48:25:FD:84:3B:E4:BB:6A:B5:00:1C:93:32:C1:76:37
            X509v3 Authority Key Identifier:
                keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:4e:32:a3:3b:27:8e:5b:23:86:b5:8d:4b:ac:7d:55:c3:
         f7:ee:b0:74:75:0b:f7:00:9d:0d:42:89:14:45:59:3f:1c:05:
         0e:b3:06:3b:24:f9:55:f8:c6:25:7a:fe:b9:c2:d5:a8:cb:8a:
         21:bf:b0:b8:49:4d:e6:c8:46:ba:e7:11:96:cc:8f:d6:14:b4:
         57:54:a4:05:c9:b8:8d:5f:46:07:0c:bd:70:3b:87:ae:9d:a2:
         65:a4:22:5b:dd:8e:06:9c:9e:f0:a1:54:d5:24:50:bb:58:49:
         ae:8c:8e:f9:83:e1:89:9b:93:15:55:9d:71:98:26:15:fd:db:
         db:b9:e7:10:9f:2c:16:71:45:3c:eb:5d:43:31:f7:e9:2a:ab:
         2b:53:40:c5:94:e4:4a:9d:21:8a:fe:d9:ce:b9:01:42:ca:c5:
         7d:c1:ea:0a:ef:c8:1f:8d:e9:9a:ad:2e:da:ef:b1:1c:82:9f:
         01:f4:8f:e7:fc:d3:da:4e:c5:bf:43:28:e1:f0:01:10:e7:19:
         0f:9c:49:3b:d6:65:0d:e4:ff:e3:7e:1f:b6:82:1c:fb:a6:29:
         04:a2:81:80:49:b5:f6:38:8b:de:b7:e1:a9:f2:77:c9:cf:f5:
         af:d0:f4:63:bf:dc:4c:bf:8d:8a:97:22:cb:55:fa:e0:09:6e:
         b9:48:c7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:55:07 2026 by rpki-client