This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          71f2ElJWeJtF4kJZJiK5nD8UgKaghnotcdu+UjyTy+0=
Subject key identifier:   68:CB:2A:35:32:C5:96:28:69:BF:89:48:E7:5C:C9:A7:19:80:53:86
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          0A39
Signing time:             Sun 08 Feb 2026 19:25:37 +0000
Manifest this update:     Sun 08 Feb 2026 19:25:37 +0000
Manifest next update:     Sun 15 Feb 2026 19:25:37 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: KIZl9nm+I7VrxU9kKdhHPpoVkW5pE1RMRRmbA/pNw8I=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Feb  8 19:25:37 2026 GMT
            Not After : Feb 15 19:25:37 2026 GMT
        Subject: CN=6988e331-6154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:a2:cf:70:1f:66:b9:b5:3a:f5:0b:13:12:
                    bc:91:3c:63:51:1d:db:ba:09:e6:ca:e6:7d:b8:f8:
                    7c:07:3f:4a:2c:29:09:61:10:e9:06:a1:a1:fd:0f:
                    63:3f:8c:eb:4a:ef:40:e1:f5:16:1e:80:b7:09:d1:
                    2a:46:05:43:7f:90:56:23:19:68:70:96:17:87:ad:
                    0b:d5:a4:55:e1:1c:df:3d:f3:4d:4f:61:22:14:f8:
                    ac:14:36:59:95:c5:c7:e6:36:3c:5f:21:6f:7e:c5:
                    5e:27:15:e3:c5:75:4c:aa:30:8d:48:14:99:de:71:
                    e6:a2:3b:a3:2f:9e:48:02:39:af:23:8b:b9:80:ca:
                    d8:00:29:f8:43:d2:c8:3a:44:fb:b6:9b:93:07:25:
                    5f:a3:3b:34:0e:56:31:55:9a:dd:d3:ad:0a:ac:f5:
                    08:96:d2:37:24:cb:e0:0d:91:53:b5:12:12:0f:99:
                    3d:db:d4:2f:20:79:c6:f1:1a:7c:38:34:77:50:3c:
                    d7:7b:a1:0e:13:96:e9:6c:af:74:30:1c:cb:ef:71:
                    c0:81:c4:04:fd:f2:bd:06:ef:47:f1:a5:a3:1d:47:
                    56:12:66:64:96:21:01:83:72:0f:33:9e:b6:03:b4:
                    38:f1:b2:8e:6e:44:1f:2d:65:c0:51:c5:b8:b9:3f:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:2A:35:32:C5:96:28:69:BF:89:48:E7:5C:C9:A7:19:80:53:86
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:46:d2:ea:5e:97:e0:e3:8d:9d:a3:ce:80:16:5f:ed:3b:
         2e:86:75:18:db:8f:97:80:16:f7:e8:5f:b2:5e:94:91:18:10:
         48:2e:87:56:18:7a:fb:40:20:e9:2a:5b:af:44:ad:da:cc:c4:
         10:0c:2e:14:7a:18:61:c6:7e:ae:ca:56:4d:de:40:4e:b1:54:
         59:19:d5:c6:1f:68:fa:59:9e:ec:59:44:36:cc:b1:28:56:46:
         d7:2c:be:2f:30:3a:29:fd:ed:fd:8a:72:a5:68:45:57:18:24:
         09:2d:9b:9d:a4:db:17:ab:a7:45:07:5d:17:cf:ed:f5:bc:a9:
         8c:fa:32:ac:31:f0:38:2e:eb:c3:39:4e:93:b6:c9:27:fb:65:
         9c:6d:72:cb:c1:7f:ee:c5:de:e4:ba:a3:53:f7:6d:55:61:03:
         c4:0f:95:b6:58:a8:87:0b:5b:51:02:6e:1d:ce:92:2c:3d:1e:
         0e:c3:7a:7f:23:54:79:d1:93:7a:a2:b3:4b:e6:53:1e:23:b4:
         97:ec:e1:94:29:3e:8c:19:47:4f:fe:16:96:a5:a3:04:47:1e:
         be:95:80:87:cd:84:8f:29:18:2f:91:a9:78:c3:86:68:a2:a8:
         ad:5b:a2:50:9f:08:35:fc:84:12:75:a5:e5:6e:77:d0:07:46:
         08:c0:ec:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0ODgxMTAvBgNVBAUTKDYwNzZDNTEzOUQ0Q0NGREVCQ0E0NEExNEJEQjczMTY4
ODhGQTYzNDQwHhcNMjYwMjA4MTkyNTM3WhcNMjYwMjE1MTkyNTM3WjAYMRYwFAYD
VQQDDA02OTg4ZTMzMS02MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8Oiz3AfZrm1OvULExK8kTxjUR3bugnmyuZ9uPh8Bz9KLCkJYRDpBqGh/Q9j
P4zrSu9A4fUWHoC3CdEqRgVDf5BWIxlocJYXh60L1aRV4RzfPfNNT2EiFPisFDZZ
lcXH5jY8XyFvfsVeJxXjxXVMqjCNSBSZ3nHmojujL55IAjmvI4u5gMrYACn4Q9LI
OkT7tpuTByVfozs0DlYxVZrd060KrPUIltI3JMvgDZFTtRISD5k929QvIHnG8Rp8
ODR3UDzXe6EOE5bpbK90MBzL73HAgcQE/fK9Bu9H8aWjHUdWEmZkliEBg3IPM562
A7Q48bKObkQfLWXAUcW4uT+ZDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjLKjUy
xZYoab+JSOdcyacZgFOGMB8GA1UdIwQYMBaAFGB2xROdTM/evKRKFL23MWiI+mNE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ4OC81RDI2ODM0QTgz
OEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5NjhwRW9VdmJjeGFJajZZ
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYkZFNTFNejk2OHBFb1V2YmN4YUlqNlkwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODQ4OC81RDI2ODM0QTgzOEYxMUVBQjcwMzE4NjJDNEY5QUUwMi9ZSGJGRTUxTXo5
NjhwRW9VdmJjeGFJajZZMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAraUbS6l6X4OONnaPOgBZf7TsuhnUY24+XgBb36F+yXpSRGBBILodW
GHr7QCDpKluvRK3azMQQDC4Uehhhxn6uylZN3kBOsVRZGdXGH2j6WZ7sWUQ2zLEo
VkbXLL4vMDop/e39inKlaEVXGCQJLZudpNsXq6dFB10Xz+31vKmM+jKsMfA4LuvD
OU6Ttskn+2WcbXLLwX/uxd7kuqNT921VYQPED5W2WKiHC1tRAm4dzpIsPR4Ow3p/
I1R50ZN6orNL5lMeI7SX7OGUKT6MGUdP/haWpaMERx6+lYCHzYSPKRgvkal4w4Zo
oqitW6JQnwg1/IQSdaXlbnfQB0YIwOzK
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:15:08 2026 by rpki-client