This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
File:                     JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft (raw, json)
Hash identifier:          HV1nH3cwFr7XTUYXdLvIMebdZaaqZf7FQzL80x+uqnk=
Subject key identifier:   B8:FB:FC:28:38:39:44:2D:44:97:13:41:1A:C3:11:BB:B4:0A:3C:77
Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44
Certificate issuer:       /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
Certificate serial:       0D5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
Manifest number:          0D35
Signing time:             Tue 10 Feb 2026 17:50:46 +0000
Manifest this update:     Tue 10 Feb 2026 17:50:46 +0000
Manifest next update:     Tue 17 Feb 2026 17:50:46 +0000
Files and hashes:         1: JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl (hash: Zf3CvIOO9zwhwY9pF6lBgV6bf6U1M95SxGiqKIJ6GEs=)
                          2: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (hash: jBSnSKDyQCtVWfsyGtcjnh9YtjAt7C7TNdPa3/Rw/xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 17:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44
        Validity
            Not Before: Feb 10 17:50:46 2026 GMT
            Not After : Feb 17 17:50:46 2026 GMT
        Subject: CN=698b6ff6-7c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:5b:36:a5:97:d9:38:62:03:c0:15:8d:c8:
                    6d:a0:19:2b:d7:17:c5:23:09:73:77:67:e5:1c:14:
                    b5:fb:62:1b:cb:78:ff:a3:84:e3:8a:04:53:43:15:
                    40:24:20:21:83:22:42:e1:8c:86:a8:a1:0e:eb:83:
                    89:b2:cc:fa:68:ef:b9:8e:3a:4a:29:c7:6b:91:d8:
                    83:9b:32:ef:60:00:04:96:51:37:80:ef:23:e3:e0:
                    4c:0c:ab:5e:fa:e5:85:fd:e9:4b:92:e2:e1:b1:e8:
                    8a:84:9c:22:94:56:ab:9f:7e:13:8e:07:7e:e8:3a:
                    ce:1f:72:de:2a:fc:bd:e4:8c:f3:9e:75:ae:7b:b9:
                    8e:4b:63:f1:2c:77:d9:a5:b0:ee:8d:7b:27:58:08:
                    b9:20:91:e2:16:d7:2d:a2:fb:7e:cf:47:9f:d8:44:
                    e6:de:14:b9:5f:ca:9d:42:38:de:14:d3:bf:94:ca:
                    ff:2e:c4:d5:ae:5b:a8:fa:58:1a:f6:f8:d2:84:c1:
                    d2:e9:b4:b1:8c:c4:50:b0:59:c9:05:56:b5:70:50:
                    be:94:06:ca:fd:f4:28:58:84:c1:88:94:2f:51:f3:
                    76:f9:14:e4:29:7d:a9:3f:4e:33:f2:c2:f1:3d:51:
                    80:05:99:18:26:71:b1:a0:42:65:60:32:9e:35:40:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:FC:28:38:39:44:2D:44:97:13:41:1A:C3:11:BB:B4:0A:3C:77
            X509v3 Authority Key Identifier:
                keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:0d:f7:51:c4:fe:f6:4b:97:92:78:30:6f:7c:e6:a9:f4:
         af:4a:fe:a8:06:ae:82:18:f5:ec:dc:cc:84:7f:19:d5:59:3b:
         7e:5c:c9:bb:ef:cb:cc:14:2c:df:9a:5d:bc:97:00:b6:94:97:
         11:6a:5a:7c:7b:ba:96:ce:79:25:af:08:5a:3b:2b:3f:1d:47:
         0b:92:ba:8c:e0:40:7b:6d:cc:9b:84:c0:4a:5f:c2:6f:6a:95:
         30:01:54:3a:d4:68:17:26:b8:c9:e2:62:7e:dc:61:57:f6:a0:
         88:51:77:e9:81:1f:d6:e7:c4:b0:b1:d6:3d:33:0c:c3:79:88:
         04:6c:d5:b3:fb:9a:6c:e6:1e:ae:84:80:61:b1:d5:e1:a7:0b:
         09:e1:fc:d3:f4:2d:56:22:bd:40:b0:84:a2:38:f6:39:73:4b:
         7a:85:01:5e:25:80:20:91:c2:e8:85:c8:ef:92:99:5d:9e:4d:
         39:d4:26:be:10:3d:14:d5:10:5a:22:f3:9b:ab:68:f5:57:00:
         85:81:73:b4:db:f4:e7:73:c1:77:92:da:02:4e:51:f5:67:3d:
         1e:0e:3f:4e:4f:bf:55:61:6a:a6:0b:ef:8a:d9:36:59:a5:a6:
         47:20:01:79:8a:25:c9:3e:a7:47:2a:92:8e:73:21:60:82:d3:
         f4:34:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 06:40:09 2026 by rpki-client