This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          xhkAA6aqPNDK96Q7O9YRc+avnec9sWXSk2RKq3i7Jgs=
Subject key identifier:   BF:29:54:ED:BE:37:F7:61:D0:E5:2F:C9:B5:3C:7D:CA:E3:47:0B:E2
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          082F
Signing time:             Mon 02 Feb 2026 20:29:05 +0000
Manifest this update:     Mon 02 Feb 2026 20:29:05 +0000
Manifest next update:     Mon 09 Feb 2026 20:29:05 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: ETKFGdBIhZLkulNX2D/VXGJMWpUTy5+Deq3pa9Fwa4Y=)
                          2: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
                          3: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 20:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Feb  2 20:29:05 2026 GMT
            Not After : Feb  9 20:29:05 2026 GMT
        Subject: CN=69810911-f1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:28:8b:c9:12:2f:80:71:5c:92:16:72:3f:
                    af:9d:cf:bd:4b:99:e7:29:13:83:52:d1:67:54:5a:
                    d4:a4:82:59:6d:0f:72:a4:a6:06:2b:50:f1:7b:11:
                    06:31:04:33:12:81:c4:bf:b4:41:bc:11:84:2f:6d:
                    62:8f:03:4d:cf:40:7b:7f:a8:1e:7f:02:f5:93:80:
                    9f:ec:87:db:b6:2d:6e:29:81:ac:2e:ba:a5:d7:6f:
                    45:0d:4f:39:ce:65:44:18:27:f0:b7:d1:7c:b2:ff:
                    65:47:eb:b1:ec:4b:d5:61:92:79:30:9c:bd:95:99:
                    7f:30:8f:63:d3:11:13:90:e0:ce:9d:7d:c5:fd:86:
                    5c:ce:8c:88:cf:ea:49:84:e0:43:49:0c:0c:ce:72:
                    56:57:05:e7:16:74:c5:93:fc:15:02:b8:4e:ab:55:
                    6b:79:3c:f5:cf:6b:8b:b5:c4:6f:31:e9:5a:4c:54:
                    45:71:6b:00:66:ee:d7:8e:ce:05:00:de:7e:f5:e9:
                    87:60:d6:51:21:4f:85:d6:93:81:d5:16:cb:23:c9:
                    f3:e6:7c:3c:93:46:03:9b:9b:f1:12:85:5e:4f:4e:
                    8c:fb:59:66:64:4c:a8:42:bb:e5:29:db:80:c8:f4:
                    a3:57:25:72:19:a5:a1:7c:73:8f:a0:ef:bd:32:3c:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:29:54:ED:BE:37:F7:61:D0:E5:2F:C9:B5:3C:7D:CA:E3:47:0B:E2
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:58:aa:73:c4:b6:52:8d:72:2e:bc:23:bf:1d:8f:0e:ce:
         b2:3f:4b:f8:30:dd:a1:2b:7d:54:ce:2a:06:cb:f4:26:08:73:
         02:3b:61:ab:56:26:06:48:ed:45:6a:e6:98:c6:6c:a4:35:92:
         3c:e6:8d:c9:05:0e:23:8c:9c:26:26:1d:b0:4a:e5:45:64:b9:
         c5:78:ff:f9:4f:ac:39:f2:55:33:04:1f:cf:70:99:d7:91:3f:
         47:9a:32:00:70:75:75:45:53:7e:54:ca:cb:57:5a:ec:94:07:
         1a:0c:18:31:e9:f1:6d:9c:e1:70:9a:b7:7a:fa:19:71:95:c8:
         a9:50:07:2d:f9:c1:aa:22:59:f4:5a:83:a1:e1:c2:22:e0:dd:
         36:a8:39:09:a9:87:ae:35:5b:1e:6c:c3:d9:ac:78:af:4a:70:
         ca:6b:b0:f6:af:22:bc:97:31:e0:38:0d:2f:74:fd:87:78:e8:
         80:d1:e3:ed:73:70:4c:d4:3e:7d:d9:b2:f1:59:bf:4f:7e:78:
         ed:0a:2d:06:60:06:1b:70:c3:68:72:33:18:7a:58:64:4e:3d:
         68:c9:a7:61:fe:91:26:16:32:ee:19:eb:d7:66:75:e3:8d:7b:
         7c:4e:20:2a:3c:2c:9b:52:97:1e:6b:24:4d:27:d3:61:67:97:
         96:f5:4c:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjYwMjAyMjAyOTA1WhcNMjYwMjA5MjAyOTA1WjAYMRYwFAYD
VQQDDA02OTgxMDkxMS1mMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUcoi8kSL4BxXJIWcj+vnc+9S5nnKRODUtFnVFrUpIJZbQ9ypKYGK1DxexEG
MQQzEoHEv7RBvBGEL21ijwNNz0B7f6gefwL1k4Cf7Ifbti1uKYGsLrql129FDU85
zmVEGCfwt9F8sv9lR+ux7EvVYZJ5MJy9lZl/MI9j0xETkODOnX3F/YZczoyIz+pJ
hOBDSQwMznJWVwXnFnTFk/wVArhOq1VreTz1z2uLtcRvMelaTFRFcWsAZu7Xjs4F
AN5+9emHYNZRIU+F1pOB1RbLI8nz5nw8k0YDm5vxEoVeT06M+1lmZEyoQrvlKduA
yPSjVyVyGaWhfHOPoO+9MjyCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8pVO2+
N/dh0OUvybU8fcrjRwviMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAk61iqc8S2Uo1yLrwjvx2PDs6yP0v4MN2hK31UzioGy/QmCHMCO2Gr
ViYGSO1FauaYxmykNZI85o3JBQ4jjJwmJh2wSuVFZLnFeP/5T6w58lUzBB/PcJnX
kT9HmjIAcHV1RVN+VMrLV1rslAcaDBgx6fFtnOFwmrd6+hlxlcipUAct+cGqIln0
WoOh4cIi4N02qDkJqYeuNVsebMPZrHivSnDKa7D2ryK8lzHgOA0vdP2HeOiA0ePt
c3BM1D592bLxWb9PfnjtCi0GYAYbcMNocjMYelhkTj1oyadh/pEmFjLuGevXZnXj
jXt8TiAqPCybUpceayRNJ9NhZ5eW9UyA
-----END CERTIFICATE-----
Generated at Tue Feb 3 02:13:27 2026 by rpki-client