This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File:                     KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier:          2EuMNrndBfGMFY1yZ/wcvsyAj+PxefSDrEYH5e2cinw=
Subject key identifier:   03:81:54:30:BD:73:F5:69:43:88:99:45:04:63:DB:A9:BD:C6:58:43
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer:       /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial:       0AD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number:          0AC7
Signing time:             Sun 08 Feb 2026 19:11:41 +0000
Manifest this update:     Sun 08 Feb 2026 19:11:41 +0000
Manifest next update:     Sun 15 Feb 2026 19:11:41 +0000
Files and hashes:         1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: x3RmlnK63fqj62T9rKq9pv+aTTCQL2EEecu8HRee5zs=)
                          2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: 3OpBGXXCJTXlZTJu94VcICtCah5ixfAdvhW279UITTY=)
                          3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: OYgq0o9dgNrqTYjdakq5qNzK/yt9wMabsIU2jLZbz/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
                          rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
        Validity
            Not Before: Feb  8 19:11:41 2026 GMT
            Not After : Feb 15 19:11:41 2026 GMT
        Subject: CN=6988dfed-fcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:44:b9:d3:e4:ff:2d:66:ef:45:0e:ff:5d:
                    a9:e7:73:55:e4:8b:88:77:77:32:d4:b8:8a:4a:61:
                    dd:f8:e9:b9:49:b9:2d:24:95:6a:6b:d6:7a:08:a4:
                    97:ca:c2:7a:c0:a0:10:39:49:33:ca:4b:fe:1e:ab:
                    24:76:b8:af:4a:ed:45:02:c5:8a:c9:bb:ec:36:b5:
                    dc:cb:0a:db:82:5c:72:26:fa:67:86:75:d8:a4:31:
                    94:00:94:09:35:4b:47:54:81:fe:9c:65:64:dd:c7:
                    72:48:13:65:47:c2:c4:5f:9a:e2:2c:9a:e3:fb:82:
                    f2:a5:66:38:a5:37:a3:6e:79:0f:b8:44:b3:58:63:
                    2e:bc:a6:0b:5e:8a:27:21:c4:51:40:6b:9c:ec:cb:
                    65:f4:ca:ea:4c:8d:97:ae:65:f7:54:42:9d:11:84:
                    83:81:3c:f7:10:f3:9a:03:9c:fa:dc:b6:57:46:3c:
                    57:e0:11:ef:80:8a:e5:9a:42:e3:36:0a:bb:32:e6:
                    71:dc:cc:33:33:35:0d:8f:ba:7f:d9:ec:ee:8b:8c:
                    2e:45:9f:31:4d:c4:cd:77:d9:ca:ab:99:b3:e9:b3:
                    4b:c9:f9:f8:cd:49:aa:fe:98:70:a7:05:82:a0:22:
                    c9:86:7e:a7:20:5f:5a:9b:3b:6c:de:ba:ff:af:44:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:81:54:30:BD:73:F5:69:43:88:99:45:04:63:DB:A9:BD:C6:58:43
            X509v3 Authority Key Identifier:
                keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:d0:7b:c8:a7:02:ce:22:a9:f3:99:a1:3e:54:4d:b5:6e:
         e0:0b:41:e3:97:9a:3b:d6:4e:71:df:ca:2a:c7:55:49:9c:04:
         e6:79:5c:71:95:01:d4:02:ff:b1:1f:5c:ae:34:f9:ed:00:50:
         da:94:64:b8:6e:28:88:af:b0:5c:fa:45:8e:91:6d:2a:24:a6:
         f4:fa:ff:a4:d5:1a:81:0c:ea:0a:ba:c9:5f:04:e6:99:73:b9:
         1e:f0:da:10:a6:82:d6:c4:f0:0e:28:fd:2c:51:59:c7:48:ce:
         c4:77:9a:86:b6:c0:9e:40:75:5c:57:a5:fd:f4:92:2e:2f:72:
         7d:ee:70:c1:0e:f7:30:d5:98:ee:95:82:f4:28:52:9b:ac:bf:
         9b:e1:0f:52:7b:d6:7f:08:3d:0e:a5:30:cc:68:df:02:e9:63:
         74:7b:ec:70:95:6f:25:bc:ef:e0:3d:e8:88:d4:03:cd:88:5e:
         2a:91:35:99:c6:ae:a5:aa:38:c2:2c:dd:96:f8:5e:2f:64:f7:
         75:69:f0:e7:1f:f1:b5:64:8a:b8:ad:55:25:3d:4a:a3:2c:5e:
         12:79:39:eb:2c:44:2e:ba:ef:91:07:39:85:5c:a1:df:61:5d:
         07:fd:f5:58:e1:9a:57:10:86:fd:7e:f5:9e:00:a5:a4:b5:c1:
         1b:18:a0:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC
RTVBQzBENkIwHhcNMjYwMjA4MTkxMTQxWhcNMjYwMjE1MTkxMTQxWjAYMRYwFAYD
VQQDDA02OTg4ZGZlZC1mY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2V5EudPk/y1m70UO/12p53NV5IuId3cy1LiKSmHd+Om5SbktJJVqa9Z6CKSX
ysJ6wKAQOUkzykv+HqskdrivSu1FAsWKybvsNrXcywrbglxyJvpnhnXYpDGUAJQJ
NUtHVIH+nGVk3cdySBNlR8LEX5riLJrj+4LypWY4pTejbnkPuESzWGMuvKYLXoon
IcRRQGuc7Mtl9MrqTI2XrmX3VEKdEYSDgTz3EPOaA5z63LZXRjxX4BHvgIrlmkLj
Ngq7MuZx3MwzMzUNj7p/2ezui4wuRZ8xTcTNd9nKq5mz6bNLyfn4zUmq/phwpwWC
oCLJhn6nIF9amzts3rr/r0Q3LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOBVDC9
c/VpQ4iZRQRj26m9xlhDMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC
MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH
R1YzX3ladFNNMkstV3NEV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeJtB7yKcCziKp85mhPlRNtW7gC0Hjl5o71k5x38oqx1VJnATmeVxx
lQHUAv+xH1yuNPntAFDalGS4biiIr7Bc+kWOkW0qJKb0+v+k1RqBDOoKuslfBOaZ
c7ke8NoQpoLWxPAOKP0sUVnHSM7Ed5qGtsCeQHVcV6X99JIuL3J97nDBDvcw1Zju
lYL0KFKbrL+b4Q9Se9Z/CD0OpTDMaN8C6WN0e+xwlW8lvO/gPeiI1APNiF4qkTWZ
xq6lqjjCLN2W+F4vZPd1afDnH/G1ZIq4rVUlPUqjLF4SeTnrLEQuuu+RBzmFXKHf
YV0H/fVY4ZpXEIb9fvWeAKWktcEbGKDM
-----END CERTIFICATE-----
Generated at Sun Feb 8 22:29:50 2026 by rpki-client