This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
File:                     -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json)
Hash identifier:          DggiYEmElKFwH2ZEPhHig6HU5S3M5JRxnWNtQxEYFgg=
Subject key identifier:   0D:98:09:41:48:98:CC:7A:21:BB:E4:41:62:97:7D:DC:3E:24:32:7F
Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B
Certificate issuer:       /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
Certificate serial:       0FE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
Manifest number:          0FD7
Signing time:             Tue 10 Feb 2026 17:16:53 +0000
Manifest this update:     Tue 10 Feb 2026 17:16:53 +0000
Manifest next update:     Tue 17 Feb 2026 17:16:53 +0000
Files and hashes:         1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: tKGxDgPSRyiSb9b6qxnhUZgCYh3vEwdDLTLLyCjFse8=)
                          2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: EAEo2CWZrqKlxbxQ35euXD3MOHKDbeB7itc8qDQhAZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl
                          rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 17:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4073 (0xfe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B
        Validity
            Not Before: Feb 10 17:16:53 2026 GMT
            Not After : Feb 17 17:16:53 2026 GMT
        Subject: CN=698b6805-46f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:25:03:17:bd:b8:da:c7:dd:61:e4:a9:d6:
                    46:18:66:65:99:ba:cb:b9:83:2d:25:5a:a4:fc:9d:
                    a8:c3:c8:97:8f:c7:96:f5:83:de:0c:0a:d6:73:55:
                    ae:c6:7f:40:22:99:e0:d6:73:bf:89:78:a4:b1:17:
                    b3:5d:ae:4a:dc:1e:dd:6e:dc:d6:a7:7d:38:19:61:
                    99:75:af:05:06:28:c5:43:a4:a5:19:cd:d5:7f:bd:
                    a6:d0:17:db:9d:5b:54:5f:44:a0:47:7f:09:bd:44:
                    eb:92:61:dd:e1:c5:dc:0d:4f:22:65:92:49:e1:30:
                    39:21:f5:a0:cc:42:41:ab:93:54:c0:52:4c:2a:10:
                    b2:e4:4c:86:e9:a1:e6:41:d3:68:e9:4c:6b:56:9e:
                    8b:bb:26:d4:a9:19:5e:fd:24:de:04:35:c4:d9:75:
                    d9:b2:fd:a3:8a:35:11:05:df:6a:0e:50:20:74:e8:
                    fc:46:08:94:e2:7c:c7:0c:25:ef:76:7e:b6:ed:d5:
                    e3:30:12:f6:1a:92:f0:dd:ae:1a:1b:e9:96:49:f3:
                    2e:58:98:76:b7:1c:4b:00:7c:1a:d2:19:a4:c2:eb:
                    37:0a:cd:0d:70:f0:a6:3f:8e:d2:35:b2:ed:e7:3e:
                    4d:f0:07:11:a3:74:3e:e9:ed:ef:d3:b6:31:52:de:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:09:41:48:98:CC:7A:21:BB:E4:41:62:97:7D:DC:3E:24:32:7F
            X509v3 Authority Key Identifier:
                keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:72:4b:7c:45:76:74:87:81:b6:99:8b:6f:8f:be:23:ac:
         96:d1:37:ae:24:81:88:f3:08:26:20:f8:be:68:84:20:f0:5f:
         70:f6:d3:6c:0a:35:56:7f:09:da:94:55:50:fc:91:8e:73:4a:
         e5:fb:13:74:2b:11:e3:0f:5b:0a:8c:68:4b:4b:d3:42:22:cc:
         1c:4c:fe:f5:e7:87:fa:81:b4:43:32:7d:a7:92:54:42:41:ca:
         c1:37:4e:2a:2b:d5:87:a6:50:85:0d:8a:b7:70:33:22:45:a4:
         5b:76:35:3d:94:80:63:6f:91:80:10:af:48:81:d8:58:88:50:
         73:bb:4b:c7:36:6b:68:d2:43:6e:8c:d4:e3:0d:32:05:87:b7:
         91:4e:cd:c7:ec:d0:09:6f:48:90:d2:0f:10:64:ea:d3:a9:6f:
         3e:b7:0a:2e:81:b9:76:3b:be:77:cb:62:1a:3f:ae:66:47:4c:
         c0:01:81:76:2c:73:33:2a:44:bd:2b:53:c1:60:c5:d2:4b:6f:
         18:32:95:17:68:09:26:d1:42:c8:91:a8:66:64:d9:d9:2c:e2:
         d6:58:d2:ac:17:61:31:2d:11:2f:a4:67:4b:72:25:12:5b:c4:
         e3:0d:39:b0:26:7b:c8:53:10:18:42:a2:b5:6e:6f:44:f0:d5:
         be:2d:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 12:20:54 2026 by rpki-client