This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File:                     1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier:          zViKB4rq8SQbiRvEWCAEr1Sso9RalivTb5VYfAzNK2I=
Subject key identifier:   50:B1:B8:A0:7C:CE:2E:27:69:6C:8A:F4:C8:41:86:C7:1D:50:62:48
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       04FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number:          04F5
Signing time:             Sun 08 Feb 2026 23:20:16 +0000
Manifest this update:     Sun 08 Feb 2026 23:20:15 +0000
Manifest next update:     Sun 15 Feb 2026 23:20:15 +0000
Files and hashes:         1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: pedzA2enoUz2QywOihJFfWjytCVgBNydfC82dzL0jWs=)
                          2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 23:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: Feb  8 23:20:15 2026 GMT
            Not After : Feb 15 23:20:15 2026 GMT
        Subject: CN=69891a30-afe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:f1:a8:ed:3c:66:fb:62:38:c5:86:d2:34:
                    f2:08:04:6c:11:b5:99:b3:ec:cd:6a:e0:55:a4:0b:
                    2b:31:55:34:5d:cf:d3:d4:67:cb:b3:d1:29:8d:9c:
                    bc:10:45:a8:07:a7:80:02:1f:95:dc:6e:0e:76:09:
                    66:34:b0:04:e9:eb:3e:fc:10:6a:0b:a4:29:be:91:
                    fd:60:9b:19:98:9d:9b:7f:cd:12:eb:da:7c:8a:08:
                    c9:e3:16:0b:28:2f:0a:c2:5b:1d:5d:51:5a:b9:cb:
                    a0:e6:8e:66:94:05:b8:89:86:46:f4:9b:e3:32:5c:
                    be:61:3b:0f:0f:74:4b:44:51:17:7b:86:55:dd:7e:
                    0e:86:8c:a9:ee:7e:15:aa:19:62:d9:a5:c8:3a:08:
                    27:40:ec:5b:09:20:6e:82:2e:c4:69:e9:f6:66:6e:
                    ea:b4:b7:c9:27:f1:65:0d:da:c2:2e:0e:90:fc:40:
                    a0:00:de:52:a2:ff:f0:52:5e:01:10:14:80:71:30:
                    48:56:ab:b1:75:f1:f1:15:5e:10:d6:68:39:2c:b4:
                    12:1e:a9:64:fc:99:7e:f9:35:e2:cc:b7:81:b9:41:
                    50:1f:ca:f1:2a:1b:61:87:21:ef:60:3c:92:d2:fb:
                    42:49:9c:0f:9e:f3:21:a7:7a:8b:a5:e9:83:d7:2b:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B1:B8:A0:7C:CE:2E:27:69:6C:8A:F4:C8:41:86:C7:1D:50:62:48
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:8c:a6:f1:fe:ad:91:b9:a3:05:49:48:df:96:dd:e5:fb:
         03:c4:91:1b:d2:4d:58:24:19:72:0d:18:ef:f1:de:48:85:47:
         82:95:62:b1:65:9a:f5:96:a3:65:91:c5:5f:f5:08:5b:1d:ec:
         bc:80:f9:0f:ad:eb:3f:1d:d9:ba:f3:48:0f:05:88:5b:64:d1:
         fc:8c:9f:8f:7f:0e:f0:24:aa:14:94:79:b4:80:ee:d6:43:cb:
         22:0f:82:db:d8:7d:81:c7:93:3e:31:d7:6e:0f:d5:15:ea:ab:
         d6:35:0a:bd:df:44:c8:11:24:eb:f2:cb:79:10:8c:bf:6e:ae:
         16:95:7a:2f:40:a4:24:82:57:4d:20:4b:3e:c2:58:17:44:8f:
         63:97:79:20:ba:11:aa:09:84:7e:73:58:18:a6:69:55:9c:0b:
         60:27:57:c8:f9:19:c3:7a:20:88:da:99:4c:c1:43:f9:b0:e6:
         f5:3b:db:e4:5b:27:db:1e:c4:36:0e:3e:9f:82:87:cf:f2:1b:
         80:b2:37:a1:0e:0f:e2:23:ed:d5:1c:75:2e:bb:22:d8:93:24:
         a2:c4:98:57:cd:9b:22:9b:a1:87:f1:e1:b1:9b:ef:f9:6d:b6:
         10:55:e1:d3:a0:fb:d9:c5:af:f9:f9:4b:c6:4d:24:0a:c4:2b:
         7f:08:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:15:19 2026 by rpki-client