This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
File:                     JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft (raw, json)
Hash identifier:          P0xKfqDzr/VU+rJMhC2BbAIkfyJch5k3A5EaPAtjaO0=
Subject key identifier:   F9:90:B3:BF:73:A8:1B:F2:74:88:58:DE:4B:68:0A:70:3C:8A:24:98
Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09
Certificate issuer:       /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
Manifest number:          A7
Signing time:             Mon 09 Feb 2026 06:24:10 +0000
Manifest this update:     Mon 09 Feb 2026 06:24:10 +0000
Manifest next update:     Mon 16 Feb 2026 06:24:10 +0000
Files and hashes:         1: JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl (hash: UaGixy/0ZWyvSWzv6E0qTd82IwQSukxJ8zCwTyf3Kbk=)
                          2: D9D9E8C0191511F092B86383C4F9AE02.roa (hash: gLLXVBbnqOuYpmPZP1sg2HQN+ZDT78K787nO1Ano868=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl
                          rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 06:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09
        Validity
            Not Before: Feb  9 06:24:10 2026 GMT
            Not After : Feb 16 06:24:10 2026 GMT
        Subject: CN=69897d8a-8fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:1f:17:53:85:da:06:ba:22:85:86:ed:5d:
                    1b:3a:87:4f:31:98:3f:62:38:08:d0:82:a0:68:ad:
                    18:1d:d2:b6:be:18:c6:08:5b:dc:b4:3a:ba:68:d6:
                    c1:79:5c:de:b2:2c:b4:71:87:ef:e2:d6:d6:b1:70:
                    e7:99:f7:aa:26:08:de:6f:0a:2c:0a:f1:3b:39:06:
                    dd:f1:13:6e:22:e7:54:7e:03:62:0b:a5:68:58:23:
                    36:a5:7c:c9:5f:c0:7d:95:fd:c2:c4:21:a2:99:8f:
                    de:83:a4:52:e4:37:c9:7c:9e:0b:5a:ba:95:52:a2:
                    80:c2:2c:30:8d:57:26:24:c4:d7:98:25:fe:5e:af:
                    0c:32:f8:8e:8a:0f:89:06:d8:72:7e:98:a5:5f:d3:
                    83:96:2d:a2:0b:95:6a:38:e3:4e:cd:7f:87:c5:15:
                    b5:01:a6:90:b5:3a:8f:26:a5:1e:41:70:53:2b:6f:
                    ac:d6:bd:ad:47:ed:bc:f5:07:68:42:d8:53:7e:3a:
                    d0:47:0e:14:bc:e9:f1:1e:d4:7b:f9:63:31:6c:86:
                    cd:af:78:8c:08:67:ce:75:5f:db:10:2b:a7:96:5f:
                    24:dc:83:15:74:a4:e9:05:e7:59:35:4d:9d:06:c7:
                    4f:d2:b0:ac:b8:24:a6:6e:f3:8a:0e:46:f9:b4:d2:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:90:B3:BF:73:A8:1B:F2:74:88:58:DE:4B:68:0A:70:3C:8A:24:98
            X509v3 Authority Key Identifier:
                keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:92:da:a9:f4:65:a2:4e:bd:e1:77:36:de:70:d7:9e:be:
         7d:93:76:7d:14:dc:a0:9b:d3:45:dc:8d:0c:3e:da:9a:9c:bf:
         3c:5c:27:6f:d6:fe:98:01:97:e2:06:3a:37:d8:f3:bd:f1:17:
         85:00:ea:60:3b:ab:6b:09:e7:17:31:0c:cd:35:e0:49:7f:82:
         ca:9c:7f:29:85:c8:10:6d:a8:4f:8c:6d:58:b4:f9:fd:78:37:
         b8:36:4d:60:a3:db:38:c9:c1:b1:b1:d9:94:15:01:04:f0:5e:
         1d:f0:ae:8a:a5:72:6e:06:27:43:18:86:6e:e1:ce:2d:3e:c4:
         08:ad:6e:a0:1f:dc:a3:b5:b3:3f:f2:7a:b0:17:3f:f6:b8:4c:
         43:1d:ef:bf:97:07:7f:0a:7c:49:a6:3f:68:84:f2:ab:46:d8:
         03:3c:d5:f2:ef:a7:cd:88:01:b7:ac:34:81:29:ec:9d:0f:8b:
         6b:0a:a0:c9:19:2a:4e:b6:2a:69:5a:ce:9b:78:31:d7:0e:78:
         5a:e8:58:fc:9d:29:77:f2:58:06:8e:ec:20:04:2c:34:b7:4b:
         f3:02:db:14:d8:b2:96:81:86:93:d3:63:c0:1e:b0:ea:b4:53:
         1d:4f:3a:f1:a1:dd:07:29:68:88:2d:6e:fa:db:c3:e7:99:51:
         04:8e:7e:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1
RjUzQzVEMDkwHhcNMjYwMjA5MDYyNDEwWhcNMjYwMjE2MDYyNDEwWjAYMRYwFAYD
VQQDDA02OTg5N2Q4YS04ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdIfF1OF2ga6IoWG7V0bOodPMZg/YjgI0IKgaK0YHdK2vhjGCFvctDq6aNbB
eVzesiy0cYfv4tbWsXDnmfeqJgjebwosCvE7OQbd8RNuIudUfgNiC6VoWCM2pXzJ
X8B9lf3CxCGimY/eg6RS5DfJfJ4LWrqVUqKAwiwwjVcmJMTXmCX+Xq8MMviOig+J
BthyfpilX9ODli2iC5VqOONOzX+HxRW1AaaQtTqPJqUeQXBTK2+s1r2tR+289Qdo
QthTfjrQRw4UvOnxHtR7+WMxbIbNr3iMCGfOdV/bECunll8k3IMVdKTpBedZNU2d
BsdP0rCsuCSmbvOKDkb5tNLX6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmQs79z
qBvydIhY3ktoCnA8iiSYMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC
RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjBDQy9CREQ0QUYzQzBCRDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3
TEhyRDBwQVQ2UTFmVThYUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBe+ZLaqfRlok694Xc23nDXnr59k3Z9FNygm9NF3I0MPtqanL88XCdv
1v6YAZfiBjo32PO98ReFAOpgO6trCecXMQzNNeBJf4LKnH8phcgQbahPjG1YtPn9
eDe4Nk1go9s4ycGxsdmUFQEE8F4d8K6KpXJuBidDGIZu4c4tPsQIrW6gH9yjtbM/
8nqwFz/2uExDHe+/lwd/CnxJpj9ohPKrRtgDPNXy76fNiAG3rDSBKeydD4trCqDJ
GSpOtippWs6beDHXDnha6Fj8nSl38lgGjuwgBCw0t0vzAtsU2LKWgYaT02PAHrDq
tFMdTzrxod0HKWiILW7628PnmVEEjn7M
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:16:35 2026 by rpki-client