This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
File:                     l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft (raw, json)
Hash identifier:          BwW72JZaDdg2dqthssdz7SGg+2u7Th77svhivUAZfNE=
Subject key identifier:   3C:BF:4F:63:54:64:CB:B5:2B:DC:88:0F:84:5E:25:74:29:57:44:B9
Authority key identifier: 97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44
Certificate issuer:       /CN=A9126A3C/serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
Manifest number:          D4
Signing time:             Mon 09 Feb 2026 05:47:17 +0000
Manifest this update:     Mon 09 Feb 2026 05:47:17 +0000
Manifest next update:     Mon 16 Feb 2026 05:47:17 +0000
Files and hashes:         1: l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl (hash: Sq/C1w1LCWDOS7G5DX2T18ERuxLxGvQFXPpgnK2rkXA=)
                          2: F120EB84C6D911EFA447E849C4F9AE02.roa (hash: MS/Zu87UEjALvdT+vk6uv+tzIJa+eL3Z9kcn5u80iO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl
                          rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 05:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126A3C, serialNumber=97B03DA2FB45F56E3F582163DF7BD95069399944
        Validity
            Not Before: Feb  9 05:47:17 2026 GMT
            Not After : Feb 16 05:47:17 2026 GMT
        Subject: CN=698974e5-6b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:d9:e3:5c:92:26:b1:f9:d8:05:d0:a5:0f:
                    4c:e0:6b:ed:0c:54:83:df:c3:4f:06:73:26:f1:4e:
                    76:4f:f7:3a:e1:9f:f4:b0:55:75:51:50:c8:bf:b6:
                    a6:68:75:22:0a:67:19:7f:dd:7f:df:7b:38:0d:93:
                    46:0a:05:d1:94:b6:7c:5f:a6:56:2e:5d:50:0d:e6:
                    36:13:15:c4:93:88:8a:c0:a5:3f:9f:d1:7c:00:9f:
                    bd:88:7e:be:c1:23:83:1e:0c:bd:c6:02:79:39:5a:
                    ee:68:d5:c9:7d:6e:36:97:97:43:d6:e1:ec:c8:ff:
                    a6:12:9b:be:fe:90:40:b1:de:bd:fd:03:64:44:6b:
                    52:4a:07:2f:7a:64:7f:1e:85:58:8b:28:d7:21:2c:
                    34:19:c1:95:84:87:ba:0e:d3:b3:1b:81:e7:16:e3:
                    23:bf:c0:82:97:1f:e2:51:6f:73:17:ae:61:81:e3:
                    96:ca:ee:4f:61:38:05:b9:25:13:80:ff:c0:96:9e:
                    bc:25:86:40:41:52:23:24:1e:d6:da:47:fa:fb:8a:
                    97:b3:61:47:42:ca:15:58:a4:d8:e6:f3:12:f4:b4:
                    fc:1e:fd:da:cf:6a:b0:0c:01:83:f9:db:fd:bc:42:
                    e9:a3:06:13:cf:12:19:c0:3c:c1:13:91:b6:1f:1b:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BF:4F:63:54:64:CB:B5:2B:DC:88:0F:84:5E:25:74:29:57:44:B9
            X509v3 Authority Key Identifier:
                keyid:97:B0:3D:A2:FB:45:F5:6E:3F:58:21:63:DF:7B:D9:50:69:39:99:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l7A9ovtF9W4_WCFj33vZUGk5mUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126A3C/7390B34AC6A011EF928B7960C4F9AE02/l7A9ovtF9W4_WCFj33vZUGk5mUQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:3a:bc:e2:73:5b:74:d8:c7:85:da:49:d0:53:d4:af:ea:22:
         ac:6e:33:d8:42:6d:87:3b:3b:67:76:36:1e:a1:b7:a9:14:4d:
         5b:18:2e:59:49:2f:3a:81:a6:b6:d4:66:3b:02:62:a4:c0:f6:
         32:d9:98:c0:54:89:63:22:e0:88:c7:d4:b3:d2:d0:e8:ef:a2:
         23:11:ad:76:cb:de:cb:2e:02:74:9d:92:ce:63:31:89:93:8d:
         48:49:06:05:aa:22:2e:60:30:72:37:d2:b8:d1:d3:c4:df:82:
         8d:9c:c6:c5:c9:1f:81:4a:23:9d:40:f8:04:6e:9e:82:93:f8:
         e7:f9:43:0d:7b:0a:2c:fd:4c:d0:6b:e3:be:52:83:1e:0b:58:
         dd:f2:59:61:37:3d:b4:71:de:8c:42:4c:7d:15:1c:42:67:b3:
         9b:f3:57:be:f6:16:ca:05:04:92:d5:1d:4d:85:eb:0d:de:0c:
         50:9b:40:f7:d8:4c:b6:da:05:ac:d1:95:e5:2c:59:8b:4f:35:
         c2:ac:c9:63:82:69:ec:ad:14:c1:09:4a:07:f1:a0:94:96:62:
         a4:43:42:66:51:ee:c1:49:43:db:eb:9e:77:5a:5c:74:b9:e2:
         9f:8f:8e:b8:50:c1:4a:05:1f:02:0b:50:f2:8b:ec:8f:42:92:
         ff:8e:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:28:28 2026 by rpki-client