This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
File:                     2p0fnE_Zonx12sp94imVaDgMCFk.mft (raw, json)
Hash identifier:          368J5i0PUtlFd7ziWYXDotcLTg2HJVQR4hijWZnHvHg=
Subject key identifier:   C8:13:48:FC:0F:88:81:48:6A:A9:26:AA:60:9E:43:C1:48:C5:76:C3
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Certificate issuer:       /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial:       0A57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
Manifest number:          0A42
Signing time:             Sun 08 Feb 2026 19:25:29 +0000
Manifest this update:     Sun 08 Feb 2026 19:25:28 +0000
Manifest next update:     Sun 15 Feb 2026 19:25:28 +0000
Files and hashes:         1: 2p0fnE_Zonx12sp94imVaDgMCFk.crl (hash: HSPhom0XnfjS+ArNQoYV5bmLxqWzDkZh1sRjoDQJqXA=)
                          2: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (hash: BSWCZvWsxuFeFiHzVgk34XawqpNGgGaEjCo245fx0K8=)
                          3: 6322249E033E11EDA7401850C4F9AE02.roa (hash: 9QQyKt+E/JcYKsBHtBvz9pVnNqBPSWtrM9W4Vr2YKyY=)
                          4: 55892E84839011EAB5B82263C4F9AE02.roa (hash: xEiN6K4EW+nKd7QWTCkRP8NOXy6rmtQFux7SNMIIIHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647 (0xa57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
        Validity
            Not Before: Feb  8 19:25:28 2026 GMT
            Not After : Feb 15 19:25:28 2026 GMT
        Subject: CN=6988e329-58d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:c6:4d:b6:d3:34:f6:2b:0e:3c:e9:4a:fc:
                    9a:89:71:55:78:97:8e:9c:f5:6c:e6:d0:b8:f6:d1:
                    67:4d:30:b4:86:b5:5c:a4:b7:3f:23:8d:82:4f:74:
                    3d:b1:10:61:bb:97:9b:6f:8c:32:8a:aa:d6:90:36:
                    e7:1e:c3:ff:6d:87:fd:08:8e:ee:16:a9:03:2e:ba:
                    ea:eb:1b:13:69:a4:4c:7c:1d:94:e9:13:38:76:f5:
                    69:f0:ec:d6:34:db:50:03:71:8b:41:4e:05:9f:42:
                    c2:89:07:d1:b9:5d:dd:0e:a3:55:ab:09:a9:3d:d5:
                    00:5a:9c:79:c4:11:4d:db:eb:83:68:30:30:81:12:
                    79:f1:13:b5:89:19:38:0d:12:44:59:d5:02:2c:85:
                    ef:dc:21:aa:6c:14:8e:ea:8f:6c:38:b1:de:4d:69:
                    05:d4:a9:9f:6d:78:b9:8f:c7:e5:89:d9:d8:50:f6:
                    96:38:48:6c:9b:b0:aa:cf:40:05:37:96:4f:10:74:
                    5d:62:aa:54:da:ce:a0:86:f6:5e:85:b2:30:ac:26:
                    ac:26:81:99:e1:57:52:f6:a9:d6:39:ff:d1:5a:ea:
                    f8:a8:f5:23:bd:e5:93:ea:67:e4:c7:1b:8f:93:69:
                    27:e1:c1:1c:b8:74:d5:d9:3e:a8:07:41:52:88:97:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:13:48:FC:0F:88:81:48:6A:A9:26:AA:60:9E:43:C1:48:C5:76:C3
            X509v3 Authority Key Identifier:
                keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:5f:0c:60:88:e9:d1:1d:14:a6:e4:d9:7f:39:0d:9b:42:
         05:6d:f9:28:73:70:df:24:0e:96:33:d6:09:89:99:e7:f8:c6:
         2a:fb:6b:8a:6b:df:7b:4b:b0:08:c2:8d:9a:38:40:47:c1:57:
         59:17:30:c2:5d:39:5a:d3:fb:de:6d:d2:1c:67:7a:d4:07:ca:
         d6:5e:a3:2c:93:7f:e8:a1:3a:e0:86:cd:07:7e:34:30:9d:f8:
         26:a2:d0:64:d9:a3:1d:32:aa:2e:f6:e7:6e:bd:12:f1:6a:c0:
         6f:8d:ef:61:0b:78:77:75:bd:6f:2e:0f:86:11:90:76:7d:db:
         ed:c1:fc:f3:46:7a:08:b2:0e:1b:73:3a:22:55:75:ef:d5:ae:
         a7:0b:80:5b:fc:2f:4e:52:31:cb:52:d1:fa:67:46:1e:4b:d9:
         d0:bd:2d:a6:1d:e4:3e:9e:8c:51:98:bb:42:4d:04:55:6a:d3:
         4f:6e:00:57:74:37:69:73:4d:3b:e8:f2:e9:5b:c9:fe:67:e2:
         ab:3e:33:04:20:96:cf:18:91:3a:fb:5e:fc:83:22:65:61:68:
         1f:07:a9:47:28:8c:2b:b6:79:8d:d0:96:d2:0d:67:08:cb:23:
         cc:78:b1:cc:55:68:90:68:cb:8c:8e:be:74:08:45:f9:02:24:
         43:1e:87:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4
MzgwQzA4NTkwHhcNMjYwMjA4MTkyNTI4WhcNMjYwMjE1MTkyNTI4WjAYMRYwFAYD
VQQDDA02OTg4ZTMyOS01OGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYbGTbbTNPYrDjzpSvyaiXFVeJeOnPVs5tC49tFnTTC0hrVcpLc/I42CT3Q9
sRBhu5ebb4wyiqrWkDbnHsP/bYf9CI7uFqkDLrrq6xsTaaRMfB2U6RM4dvVp8OzW
NNtQA3GLQU4Fn0LCiQfRuV3dDqNVqwmpPdUAWpx5xBFN2+uDaDAwgRJ58RO1iRk4
DRJEWdUCLIXv3CGqbBSO6o9sOLHeTWkF1KmfbXi5j8flidnYUPaWOEhsm7Cqz0AF
N5ZPEHRdYqpU2s6ghvZehbIwrCasJoGZ4VdS9qnWOf/RWur4qPUjveWT6mfkxxuP
k2kn4cEcuHTV2T6oB0FSiJcxxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgTSPwP
iIFIaqkmqmCeQ8FIxXbDMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz
OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUJBOS9ERjdBN0YxNDgzOEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9u
eDEyc3A5NGltVmFEZ01DRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgD18MYIjp0R0UpuTZfzkNm0IFbfkoc3DfJA6WM9YJiZnn+MYq+2uK
a997S7AIwo2aOEBHwVdZFzDCXTla0/vebdIcZ3rUB8rWXqMsk3/ooTrghs0HfjQw
nfgmotBk2aMdMqou9uduvRLxasBvje9hC3h3db1vLg+GEZB2fdvtwfzzRnoIsg4b
czoiVXXv1a6nC4Bb/C9OUjHLUtH6Z0YeS9nQvS2mHeQ+noxRmLtCTQRVatNPbgBX
dDdpc0076PLpW8n+Z+KrPjMEIJbPGJE6+178gyJlYWgfB6lHKIwrtnmN0JbSDWcI
yyPMeLHMVWiQaMuMjr50CEX5AiRDHoc0
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:16 2026 by rpki-client