This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          B1aYAkP3i6apDTfvJ7vRLU0iGLclHcCEiMi9UnoyCAs=
Subject key identifier:   A3:19:5F:EA:EB:1B:80:00:14:AB:E9:A3:5C:3B:52:C7:B4:63:C5:3B
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          07A4
Signing time:             Sun 08 Feb 2026 21:08:41 +0000
Manifest this update:     Sun 08 Feb 2026 21:08:40 +0000
Manifest next update:     Sun 15 Feb 2026 21:08:40 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: 7MsmVyurwoPh2h1egZHoGWrxDIu+fa1cR2isPQE+qoA=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: 6Z7fqbPSs+Ml8QXXKGeIZgjWtWxNfN8N/e0vyGnhKx8=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 9iqcL2FIY8N8pXVdWDivMO7ELxF/u7CgCvSOlgjQSV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 21:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Feb  8 21:08:40 2026 GMT
            Not After : Feb 15 21:08:40 2026 GMT
        Subject: CN=6988fb58-951c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:a9:bf:62:47:f1:46:0d:ab:7d:64:a3:dd:
                    41:30:d7:7c:d2:24:59:9c:9e:18:b4:16:da:83:5f:
                    5b:8b:07:83:14:d9:e9:2a:17:d9:76:cc:56:ba:f3:
                    c0:9c:ce:22:56:54:2e:01:36:29:5c:21:a9:5f:5c:
                    9c:88:c9:64:5b:3e:bf:7e:d8:bc:08:fd:2f:76:1b:
                    c6:62:c5:52:f4:4f:f0:22:a3:18:73:44:0b:ad:a1:
                    ff:91:c4:a5:a8:83:f9:db:da:66:20:fe:d6:c3:39:
                    be:ca:e7:04:7a:04:fa:3e:f4:02:9d:f8:cf:5e:24:
                    e3:20:25:d4:35:2c:93:ce:36:8b:83:7e:03:fe:43:
                    82:2a:36:95:4a:9a:d5:82:95:e2:57:a0:97:bc:82:
                    93:58:e2:3b:0f:5e:a1:be:ae:a6:66:33:02:a4:35:
                    22:8a:22:b0:89:cf:30:c4:89:00:04:2f:c4:3b:94:
                    4a:9a:7e:fa:88:cd:cb:90:56:5c:c9:87:61:d7:f1:
                    ad:0d:5d:3b:ef:b7:ae:0f:3f:46:45:d6:bc:6c:fe:
                    5b:3e:54:83:be:39:b0:f9:97:8e:72:89:41:6e:9a:
                    c1:e4:8b:14:88:02:4b:69:9e:11:98:56:bd:f1:c0:
                    19:e2:9a:4e:9d:a1:44:a3:28:de:c2:cf:be:24:45:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:19:5F:EA:EB:1B:80:00:14:AB:E9:A3:5C:3B:52:C7:B4:63:C5:3B
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:98:e9:b5:a6:23:c3:3f:fa:af:b3:41:b6:e6:02:40:05:27:
         5c:e7:5f:51:f5:e0:77:2a:50:2b:6e:56:09:5f:cd:fd:c6:5b:
         c4:2c:45:ac:90:24:21:91:a8:a3:a1:f5:7e:90:ad:a5:3e:42:
         ce:23:8c:5c:81:0f:0b:e7:3d:94:9f:66:6e:3d:93:86:74:65:
         70:87:d6:73:2f:57:b9:b8:f8:62:c0:3d:7d:7f:4d:72:e5:13:
         9e:1b:08:bd:1e:ba:ff:89:f8:d6:c3:d3:bb:92:3f:83:c2:7c:
         21:a4:14:ce:cf:f1:79:0b:33:18:ae:89:31:53:aa:a0:85:fa:
         c7:e3:c3:d3:fa:bb:5a:77:fb:fb:15:26:44:f5:38:96:3e:ab:
         cf:72:e9:61:c6:ee:42:68:95:a0:45:d4:e7:5d:fd:8d:99:75:
         77:37:cd:32:8a:82:ad:f5:b9:e5:d0:60:cf:d3:24:f2:f8:2a:
         21:a6:b0:0b:48:ac:01:a3:a9:f2:44:90:79:fa:1a:ec:da:0f:
         48:47:59:50:7b:00:a5:13:ca:55:b4:78:79:03:e8:6c:4d:7b:
         33:1b:37:ec:2b:0d:a1:c7:db:28:fe:ea:4d:24:7f:63:eb:65:
         69:5f:da:5a:59:e4:a2:a7:2a:17:3b:9e:53:2c:d4:72:75:b6:
         17:4e:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:55 2026 by rpki-client