This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          Rbu+8CEO43rzqZWdh4HCjJPpi5VzsgpUwBeRR2RQB4E=
Subject key identifier:   85:0E:16:90:F5:9A:CA:B8:45:22:A3:CF:F8:BC:24:2D:2F:5C:85:7E
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       0726
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          0702
Signing time:             Thu 05 Feb 2026 03:01:54 +0000
Manifest this update:     Thu 05 Feb 2026 03:01:54 +0000
Manifest next update:     Thu 12 Feb 2026 03:01:54 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: wnMPiLTbxGJUfv9HY/LoIm0C7eRveo58QhNCyj6n5ek=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 03:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Feb  5 03:01:54 2026 GMT
            Not After : Feb 12 03:01:54 2026 GMT
        Subject: CN=69840822-c298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:cc:9a:ef:d5:d3:9c:a8:59:c8:0e:1d:8e:
                    d8:f7:f2:4e:fa:a8:26:54:35:51:46:f2:64:ab:02:
                    f1:63:5f:4e:6e:84:f8:7f:80:dc:27:1e:fb:3c:a4:
                    04:ea:d5:09:4f:34:11:9c:7d:68:cd:dd:8f:27:5c:
                    0c:16:f8:c7:62:34:de:ab:a6:1a:26:27:8f:40:a3:
                    48:5d:df:a6:f5:bd:2d:0f:92:32:27:6a:35:a3:b1:
                    96:59:14:c2:75:37:30:54:81:9f:cb:bb:4c:40:b9:
                    a5:f6:c4:19:87:09:a2:82:6d:53:ac:5b:e5:b7:9f:
                    b3:1f:2e:19:cb:48:d5:e2:cf:c9:6a:2b:99:b7:19:
                    19:ed:58:9f:44:cb:cb:28:56:57:03:b4:43:b0:a6:
                    2d:41:d5:98:05:18:a4:ce:94:7f:70:12:41:98:48:
                    35:33:95:e9:25:f0:b7:72:ea:13:99:96:b2:6d:7c:
                    cc:5d:71:c9:28:b5:27:2b:9c:bc:37:66:85:cd:9e:
                    70:95:66:e6:8c:9f:68:1d:80:8e:69:b2:54:e1:4b:
                    aa:dc:bd:a4:45:50:f0:60:a9:0a:2f:1a:42:7f:df:
                    fd:03:fc:f9:39:2f:74:96:e1:6d:9a:1f:6d:61:d7:
                    70:c0:f8:34:2f:f4:9a:d0:41:3d:11:20:78:f7:25:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0E:16:90:F5:9A:CA:B8:45:22:A3:CF:F8:BC:24:2D:2F:5C:85:7E
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:92:58:0f:37:65:e1:be:0a:8d:0e:09:04:23:fb:99:1a:54:
         06:cc:df:36:2e:66:b8:a8:5b:8e:77:67:7c:e0:25:2b:c8:7c:
         de:cd:e5:1e:f2:6f:3b:48:ef:bb:bd:97:94:63:8d:2d:30:8d:
         71:f0:30:32:80:be:6c:2c:58:cc:8c:2e:05:01:1b:cf:a8:22:
         65:94:18:b6:11:00:eb:c3:60:9c:e9:26:51:68:83:3a:76:d4:
         cc:dc:f9:e1:ba:97:83:60:b7:b0:16:eb:2c:c1:c8:c9:86:41:
         a4:8a:e8:b5:f3:d6:82:6b:ea:52:39:a5:9c:6e:02:73:df:91:
         6e:f4:2e:3a:40:fb:4e:19:f4:3a:1e:a4:df:1a:25:ac:cc:9d:
         dc:a5:39:e2:71:3c:0f:fd:f5:28:ea:ab:a7:af:c7:04:c4:0e:
         1b:6f:1f:24:b5:16:02:b0:f6:f4:c6:87:2a:c4:2a:6f:38:44:
         41:ce:4f:5f:95:9c:05:70:aa:1f:fd:e1:80:19:49:40:ff:50:
         5e:ab:60:7e:cb:41:15:22:00:d3:d7:67:a7:8a:38:0d:72:90:
         2b:2e:21:19:f0:7e:01:e1:42:94:1a:ec:7f:79:ef:4e:96:1c:
         c2:7f:fe:bd:dc:12:9d:cf:1c:88:65:44:a0:b5:f7:bf:6a:dc:
         21:82:a2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 08:52:22 2026 by rpki-client