This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File:                     kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier:          tuXM0qgwHQRHOqRBQPsTbrNrNhtVjufmSM14HxRQ7ak=
Subject key identifier:   5A:1B:95:A9:35:82:A9:36:BC:62:4B:2B:4C:43:00:47:6E:E8:9D:2B
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number:          0258
Signing time:             Mon 09 Feb 2026 01:28:33 +0000
Manifest this update:     Mon 09 Feb 2026 01:28:32 +0000
Manifest next update:     Mon 16 Feb 2026 01:28:32 +0000
Files and hashes:         1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: XhjDO2OyKofzA2s3PsUZHpSScAUNyo1AwoL0TCRyv1M=)
                          2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=)
                          3: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=)
                          4: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=)
                          5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 01:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Feb  9 01:28:32 2026 GMT
            Not After : Feb 16 01:28:32 2026 GMT
        Subject: CN=69893841-3308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:f2:46:32:15:0b:92:1d:c4:88:a3:bf:36:
                    98:8a:ca:c2:b6:92:36:30:39:1c:79:2c:f3:3f:25:
                    ea:bf:36:b7:4a:cc:81:0f:b5:7b:5e:25:b6:9e:4b:
                    f1:1f:ab:91:1e:6b:63:8c:fd:96:76:f3:0d:e3:c3:
                    2e:5c:2c:e7:95:3c:7d:5e:31:89:03:a2:31:40:19:
                    57:15:a8:5e:c9:92:1d:b9:5a:f8:4f:71:f5:31:14:
                    c4:91:88:9d:e8:69:15:5b:ca:80:bc:20:cd:0a:d7:
                    5a:40:0c:59:66:04:eb:cd:f4:85:ea:79:3b:22:ff:
                    c6:a7:83:cb:65:68:ab:34:d4:dd:05:e8:e7:5e:b2:
                    f3:7e:f7:5d:06:11:3c:dd:cd:ea:66:6a:24:cf:8b:
                    c5:c6:94:ba:12:f8:15:e5:b0:e2:15:e4:e5:a2:17:
                    2e:95:47:1e:57:23:80:64:1c:01:36:58:f3:2e:b4:
                    7e:ed:f3:7c:af:95:1a:63:fb:19:10:63:6e:81:95:
                    2c:86:7d:19:af:05:75:e8:8b:d9:26:f7:59:8c:c5:
                    42:ea:4b:d8:1c:89:94:3b:2c:af:70:6a:db:56:2f:
                    31:00:16:26:c3:c0:ec:de:3d:f5:5e:89:74:75:6b:
                    ca:e4:46:31:a1:4b:3b:ee:f4:57:da:83:2a:c2:45:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:95:A9:35:82:A9:36:BC:62:4B:2B:4C:43:00:47:6E:E8:9D:2B
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:06:71:da:5b:10:12:20:a6:2d:37:e3:c9:15:8b:dd:65:
         84:0d:38:11:a9:96:7c:69:e8:f0:e2:27:e6:33:45:0a:c6:56:
         a3:a7:1a:af:b0:3a:4a:d1:8f:0f:84:a2:eb:44:2d:a8:f2:f3:
         df:66:09:af:17:bd:6a:96:68:dd:fd:ad:e0:50:b7:77:ef:9e:
         c8:f0:d2:7d:e5:33:68:e4:02:9d:e0:c8:84:7f:b3:67:c2:ad:
         78:74:f8:ee:c9:ef:b8:64:b8:81:7f:e7:99:55:1d:93:11:61:
         64:6d:ba:96:0e:68:5c:44:e6:02:7a:0a:28:a6:5a:dd:b5:fc:
         a6:fd:87:f2:1a:50:6e:2b:d6:f4:1e:e7:cd:28:d7:88:32:b9:
         06:f8:c4:f6:d7:f5:d5:8e:b9:ee:83:c0:c2:50:0e:15:6f:aa:
         36:9b:03:f8:6c:9e:51:21:de:cf:48:e2:ad:13:1d:38:b0:ca:
         57:e3:57:66:dc:9b:9c:84:3a:c2:d9:9a:be:5e:33:ad:ce:e5:
         b3:56:86:77:dc:f3:63:28:d8:73:3d:06:83:39:9b:4d:8d:12:
         85:8d:57:20:a4:99:01:8b:ef:64:27:00:9d:31:4f:52:b4:6a:
         42:70:d2:61:b2:5e:9a:20:5a:52:3b:6e:39:83:56:ba:17:21:
         69:07:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:34:03 2026 by rpki-client