This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
File:                     P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json)
Hash identifier:          BmobP4PsfRNnhXcgypr/N3FsFGqfqvxjASlcTGMtVbg=
Subject key identifier:   BA:30:4B:CA:24:FD:80:02:5E:D6:82:98:00:7F:E1:D4:5D:63:AF:31
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2B9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
Manifest number:          2B64
Signing time:             Mon 02 Feb 2026 15:31:20 +0000
Manifest this update:     Mon 02 Feb 2026 15:31:19 +0000
Manifest next update:     Mon 09 Feb 2026 15:31:19 +0000
Files and hashes:         1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: WZZ1fOzb6+4uT6lg7jbWadEsERTnS2F5+H9fUbQdwLs=)
                          2: E8573BE8F1C111F098487417396F56BC.roa (hash: qGeh6QL0o4WvOG3fg/wBG8/tXnaeNS7d3iyz0QkEV4E=)
                          3: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: fYOyO0YMWUOxVdF0N0uoVfDbNQC2opdX5iKH0P2z63Q=)
                          4: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: ZzjJ0fYeabSd1C/BC1U5UndDu9GN0zOregXqheWTfhM=)
                          5: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: vCyoBnhR3DIAJb9Y4r3GNDFo2RlfPGlQkgBB7NxfB/s=)
                          6: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: 4v1pcgLcpH0cs1u2cZwujLM8z8Jad8X3rbuBbKPqsLU=)
                          7: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: GUkxmfhQjkzWtcoFY/nFGmI+kTJXl/FtuE+i7SxBElE=)
                          8: A2842DA6E07D11F0A337A81D3B6F56BC.roa (hash: /NSn23GKZ4WI/0vwXgM15d1bZ9YjNXmwCH/XWGMxn98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 15:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11164 (0x2b9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Feb  2 15:31:19 2026 GMT
            Not After : Feb  9 15:31:19 2026 GMT
        Subject: CN=6980c347-255e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:ee:c0:c4:4c:34:cf:63:7f:0b:80:24:3f:
                    96:46:24:61:55:dc:38:21:10:e5:55:96:8d:c2:5e:
                    e7:e6:bf:c4:23:7c:ca:17:3d:7c:56:b1:4b:4d:57:
                    a8:c0:d8:43:9b:ee:69:c3:05:c7:e4:b7:7f:c2:58:
                    4e:d0:7c:30:a6:86:3c:51:5e:bb:3f:fd:e6:75:03:
                    5b:8c:7c:d7:e9:a7:b1:f4:9f:f7:be:35:10:01:61:
                    96:5d:ff:05:31:bc:ae:4e:94:e3:2d:46:c9:28:21:
                    7f:ff:0d:53:25:7e:a5:48:cc:6d:b7:fa:27:bc:85:
                    1d:8a:cf:3e:93:cd:69:39:87:a3:b2:8f:24:5c:97:
                    e4:91:3e:2f:2e:dc:86:15:67:0b:ef:2a:36:e3:2f:
                    85:64:55:3b:a6:85:42:12:4b:85:92:19:80:d2:77:
                    df:9b:04:c4:e3:de:49:71:a7:53:86:6a:e7:dd:0b:
                    17:e0:1b:1e:7c:66:7f:31:8e:96:62:7c:fa:e0:e0:
                    fd:af:b9:47:e3:4a:1d:aa:95:86:42:2c:9d:5e:7b:
                    71:70:a7:dd:8e:93:ed:a4:04:6a:65:69:8e:55:58:
                    5c:a2:dc:07:06:b0:e9:12:31:30:75:6e:ae:73:c1:
                    c6:14:b2:ff:68:40:40:5d:05:18:2d:d2:66:60:14:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:4B:CA:24:FD:80:02:5E:D6:82:98:00:7F:E1:D4:5D:63:AF:31
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:93:34:c5:1b:8e:75:de:46:7c:2b:7a:9d:13:db:57:7d:
         fd:43:76:14:60:f0:c8:74:1b:8a:b0:b9:77:97:2c:af:86:42:
         be:a1:52:0d:44:b6:b2:04:27:df:c5:ad:b9:5d:d8:b7:a9:d0:
         df:83:77:1c:5b:0c:1b:d9:6d:d5:4e:17:76:f2:67:19:69:e8:
         d7:81:4a:6d:20:47:a6:fd:63:66:3d:e7:5b:2b:24:8a:a1:f4:
         12:c2:51:87:3c:36:66:78:d3:fb:4e:1f:e1:b0:6f:3b:c9:c4:
         50:8d:79:c1:76:4d:03:21:d6:68:76:20:e5:a9:a3:31:c9:23:
         c6:f5:43:99:43:47:9b:d7:cb:02:97:5e:b9:cd:97:28:4e:e3:
         66:ac:5a:3a:3d:60:80:21:42:f9:03:cf:60:31:1d:45:01:60:
         86:f7:e3:fc:f7:eb:1c:9c:95:03:97:db:7d:c4:b7:78:54:94:
         d3:93:85:85:21:85:bb:1e:63:01:99:bd:e6:73:a7:2b:91:e7:
         87:ad:e3:14:53:5a:14:02:40:f6:02:d0:4f:dc:4d:42:33:41:
         03:ee:05:30:4d:99:45:aa:74:1f:d1:4a:25:80:22:3a:bd:e5:
         5f:7d:3d:cd:46:2a:dc:ba:3a:7c:2d:89:05:c3:3d:05:a5:91:
         82:b5:24:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICK5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjYwMjAyMTUzMTE5WhcNMjYwMjA5MTUzMTE5WjAYMRYwFAYD
VQQDDA02OTgwYzM0Ny0yNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIjuwMRMNM9jfwuAJD+WRiRhVdw4IRDlVZaNwl7n5r/EI3zKFz18VrFLTVeo
wNhDm+5pwwXH5Ld/wlhO0HwwpoY8UV67P/3mdQNbjHzX6aex9J/3vjUQAWGWXf8F
MbyuTpTjLUbJKCF//w1TJX6lSMxtt/onvIUdis8+k81pOYejso8kXJfkkT4vLtyG
FWcL7yo24y+FZFU7poVCEkuFkhmA0nffmwTE495JcadThmrn3QsX4BsefGZ/MY6W
Ynz64OD9r7lH40odqpWGQiydXntxcKfdjpPtpARqZWmOVVhcotwHBrDpEjEwdW6u
c8HGFLL/aEBAXQUYLdJmYBQO4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLowS8ok
/YACXtaCmAB/4dRdY68xMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ
M09XUTk4U0pCM2xoLUNxVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+bpM0xRuOdd5GfCt6nRPbV339Q3YUYPDIdBuKsLl3lyyvhkK+oVIN
RLayBCffxa25Xdi3qdDfg3ccWwwb2W3VThd28mcZaejXgUptIEem/WNmPedbKySK
ofQSwlGHPDZmeNP7Th/hsG87ycRQjXnBdk0DIdZodiDlqaMxySPG9UOZQ0eb18sC
l165zZcoTuNmrFo6PWCAIUL5A89gMR1FAWCG9+P89+scnJUDl9t9xLd4VJTTk4WF
IYW7HmMBmb3mc6crkeeHreMUU1oUAkD2AtBP3E1CM0ED7gUwTZlFqnQf0UolgCI6
veVffT3NRircujp8LYkFwz0FpZGCtSSG
-----END CERTIFICATE-----
Generated at Mon Feb 2 20:53:35 2026 by rpki-client