This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
File:                     G9xHZ6bV6-C--lyhI1MI915IiRo.mft (raw, json)
Hash identifier:          CsdvBXSkJjiZd27nSDtfOcg9wdTKuY/CNhbZuN0r9+A=
Subject key identifier:   91:2F:D3:44:38:FE:3E:D9:14:73:88:D4:CE:34:65:9A:46:23:41:18
Authority key identifier: 1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A
Certificate issuer:       /CN=A9149C2D/serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
Certificate serial:       1C2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
Manifest number:          1C1A
Signing time:             Thu 12 Feb 2026 16:03:33 +0000
Manifest this update:     Thu 12 Feb 2026 16:03:33 +0000
Manifest next update:     Thu 19 Feb 2026 16:03:33 +0000
Files and hashes:         1: G9xHZ6bV6-C--lyhI1MI915IiRo.crl (hash: OJdiiTshWRzELP/cJ3Bu3u59zgdUczY3wIEmgU64Hw8=)
                          2: A607F8965F4611EE80BD8D2DC4F9AE02.roa (hash: ZLkmQTX2ukDjNjn8W5ENtkFmk1At3yyLRmstiPrB0YU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl
                          rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Feb 2026 15:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7213 (0x1c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C2D, serialNumber=1BDC4767A6D5EBE0BEFA5CA1235308F75E48891A
        Validity
            Not Before: Feb 12 16:03:33 2026 GMT
            Not After : Feb 19 16:03:33 2026 GMT
        Subject: CN=698df9d5-a508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:bb:50:20:a1:c4:f9:74:ea:7f:58:f4:c6:
                    b9:9b:dc:a2:73:6f:b5:de:e0:25:0b:91:46:f2:a5:
                    af:32:4d:04:06:d9:9d:af:b9:6b:88:9d:45:a2:ef:
                    0f:ac:f9:ee:5f:d2:8a:5d:80:4d:b0:2b:18:bf:0b:
                    bd:d1:9e:7b:73:73:5a:34:0d:f1:14:3b:6e:a6:b8:
                    e7:be:6a:41:c2:eb:0a:8a:75:09:27:1c:5c:55:a8:
                    01:34:7c:67:d5:88:a5:15:6f:88:c3:f7:51:44:bd:
                    73:ff:a7:2c:e3:aa:30:91:9e:38:88:70:3d:ae:8b:
                    4a:c8:4c:a1:67:95:41:24:ce:f7:b2:0e:3b:27:c3:
                    08:d2:3e:18:b9:f3:2d:c5:c0:39:75:64:8c:60:ec:
                    fb:58:7e:fd:12:3e:99:4c:41:23:22:47:02:a4:47:
                    ac:2d:e8:9d:ae:e2:5f:ae:e1:5f:b9:8b:b1:bb:59:
                    bd:3d:c4:c6:7f:53:95:7f:df:0e:c5:e1:07:f8:19:
                    de:7d:d0:37:f6:22:ff:5f:85:c7:ae:21:fd:0a:6f:
                    ba:2f:36:f5:d5:67:10:aa:0c:07:bc:5b:da:c1:e7:
                    11:54:d3:89:0d:da:44:30:27:d4:3e:85:a4:35:e1:
                    5f:3e:80:88:68:ef:7a:7d:c7:de:02:d3:6f:86:37:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:D3:44:38:FE:3E:D9:14:73:88:D4:CE:34:65:9A:46:23:41:18
            X509v3 Authority Key Identifier:
                keyid:1B:DC:47:67:A6:D5:EB:E0:BE:FA:5C:A1:23:53:08:F7:5E:48:89:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9xHZ6bV6-C--lyhI1MI915IiRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C2D/4D5A7880087311E79C839B09C4F9AE02/G9xHZ6bV6-C--lyhI1MI915IiRo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:9c:f9:b2:d3:6b:42:5b:bc:ee:bd:fe:bb:01:92:a3:65:
         6f:6c:d9:7c:3d:94:c2:49:23:77:ec:e5:bb:9d:e4:b5:d2:3d:
         d9:ae:40:e2:70:a3:9d:07:7c:1c:8c:4c:d6:f3:b4:dc:fa:0f:
         85:b0:93:5e:f0:8e:3f:cb:cc:a8:26:af:78:3e:a3:1e:74:62:
         8d:26:f3:57:26:6b:45:fd:b5:e1:5c:45:d6:e4:93:c9:b6:85:
         af:01:f1:7b:57:25:2d:50:42:29:93:26:a9:c9:17:88:6d:d9:
         d6:de:d7:96:33:ac:53:fa:a4:d9:31:40:45:a0:ca:a5:0f:57:
         bd:76:e5:81:ab:e0:96:5a:50:82:95:8d:5d:a8:ed:ba:f8:10:
         ef:6d:e2:c1:c9:0e:7d:f0:60:d6:b0:eb:90:bd:45:b6:86:50:
         f0:cd:3d:05:0e:d4:f0:ea:26:66:bc:ec:1d:83:fa:b9:d6:76:
         88:1c:a2:e4:12:ce:3b:a8:c3:c2:dd:a4:61:15:c5:c2:a4:a1:
         a6:fe:8e:dd:50:63:b8:9e:a7:a1:60:82:58:da:56:01:b6:d0:
         60:c3:cc:16:07:06:50:43:fb:1b:04:6e:ca:c7:16:a2:d3:d2:
         e0:87:14:56:9d:f0:96:76:1c:65:94:d2:fa:06:8b:1e:22:66:
         9c:2d:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 20:16:22 2026 by rpki-client