This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
File:                     Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json)
Hash identifier:          YccPSSWiAziOB92kyzuII8JDQcj4I61l+MUJSH/4kAQ=
Subject key identifier:   97:78:B8:72:24:81:AC:42:31:20:7C:AF:1E:A0:41:68:CA:04:DD:F0
Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4
Certificate issuer:       /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
Certificate serial:       1BE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
Manifest number:          1BA0
Signing time:             Sun 08 Feb 2026 16:07:15 +0000
Manifest this update:     Sun 08 Feb 2026 16:07:14 +0000
Manifest next update:     Sun 15 Feb 2026 16:07:14 +0000
Files and hashes:         1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: LcXXTC51cuPGafM213qPBFG7X1TQRm3Fwhgghgy3c1Q=)
                          2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: BhVGdoTEOymIA8YwYSYXIusFUR9i4u6WTAaCMTaRZV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl
                          rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 16:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7140 (0x1be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4
        Validity
            Not Before: Feb  8 16:07:14 2026 GMT
            Not After : Feb 15 16:07:14 2026 GMT
        Subject: CN=6988b4b3-2bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:de:63:49:3b:fc:27:39:fb:f4:01:fa:0e:
                    1e:05:9b:da:2c:6b:1d:36:0f:f1:b3:6c:dc:34:99:
                    5c:e3:48:f9:a9:f2:01:33:7c:9c:bf:7d:c8:6e:f4:
                    63:5d:68:2f:56:24:52:ee:cf:46:c3:11:55:06:5d:
                    0c:04:36:89:10:78:d4:73:1a:cb:8c:f3:bb:5c:82:
                    9e:37:24:b7:94:9b:ce:f8:d2:e0:47:e4:76:67:12:
                    88:2c:94:0d:6c:f1:98:fc:f2:71:ee:aa:40:e3:f1:
                    14:54:78:b5:4d:69:60:88:cd:13:d3:70:93:74:1a:
                    81:3b:64:05:76:d4:3f:a4:1b:5b:a3:85:e1:26:91:
                    ad:89:07:25:86:de:96:47:b0:a3:f1:4a:f1:e3:df:
                    84:22:7c:a2:5f:84:0d:b6:b3:97:33:49:4b:c6:cc:
                    6b:86:08:f9:14:ad:9f:e8:04:01:13:43:0c:d2:31:
                    f9:8f:89:01:e0:5f:98:6d:7b:e3:3a:ea:c6:50:81:
                    9a:18:a2:27:39:7c:33:b8:0f:f4:61:d4:7a:77:fc:
                    d4:a4:40:4e:36:59:6a:3b:af:ab:57:e9:3a:f2:e3:
                    ca:cb:d7:c2:3d:9b:5b:b4:9a:e9:77:65:6f:67:fe:
                    bc:0a:34:87:84:9f:ca:3e:3b:a8:07:08:31:83:1d:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:B8:72:24:81:AC:42:31:20:7C:AF:1E:A0:41:68:CA:04:DD:F0
            X509v3 Authority Key Identifier:
                keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:27:6b:fb:da:b3:df:a9:4f:55:1a:f0:0c:6c:ec:34:56:
         96:7c:5a:f7:34:67:bd:c1:8d:a5:dc:97:45:15:15:85:35:97:
         29:04:07:f2:c7:db:f6:87:cb:a8:39:13:34:12:4e:6f:c1:bd:
         da:a3:dc:5c:94:ea:5c:4a:df:3f:e7:3f:46:36:d7:57:33:a1:
         55:68:36:3f:ad:84:b4:57:6a:59:76:50:5f:76:e3:fb:c4:4d:
         41:8b:c1:d7:1c:95:87:1d:38:5f:8f:2f:f9:2d:c0:64:12:5c:
         1c:cb:31:8a:c1:b4:f5:7a:7b:fb:cb:a3:d1:a9:ca:ba:83:fe:
         00:63:65:3c:ef:8b:54:10:4c:98:86:8e:04:6c:fb:2b:b7:91:
         14:a7:28:c0:00:d3:e6:59:60:67:39:c9:6d:bf:48:13:62:67:
         b5:f4:b6:fc:17:69:b4:39:c3:52:23:15:23:46:98:75:0e:17:
         5d:54:a7:35:c8:13:de:2c:c8:22:bb:9f:ee:1e:9c:3e:ed:8e:
         33:4a:33:c2:76:a4:c1:ff:83:c6:30:47:3b:19:36:75:f6:57:
         1c:dd:43:59:1e:b6:68:10:97:7e:6b:0b:c8:6d:a8:a7:8b:a3:
         39:51:85:84:e2:8c:c8:76:43:87:f0:4b:ce:9e:1c:ef:4e:5d:
         99:c9:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:43 2026 by rpki-client