This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          EEKlhtT45dAydy6XtIxCPqc6ATTh705JjWpePc9GG94=
Subject key identifier:   5F:A7:27:74:E1:C1:12:C5:84:99:F4:63:BC:C0:70:E4:9B:39:62:0F
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          0188
Signing time:             Tue 03 Feb 2026 03:24:28 +0000
Manifest this update:     Tue 03 Feb 2026 03:24:28 +0000
Manifest next update:     Tue 10 Feb 2026 03:24:28 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: /BvMaIyPdt8WGmBowyVZJlnb85IRJ3NkB+QO6gtndpo=)
                          2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: y81/Bm4goLn9P37Big7/CzEV9a1Uz1uENuSDaA4pS5U=)
                          3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: MOWmFDpIkvE9ZXw3XjwL/Gz8uOZnXK7NosAmPb+jAAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Feb 2026 03:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Feb  3 03:24:28 2026 GMT
            Not After : Feb 10 03:24:28 2026 GMT
        Subject: CN=69816a6c-847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:2c:d8:c6:1e:b0:b1:1d:f4:7d:e6:b6:f3:
                    15:be:19:d6:6d:80:8e:11:5d:31:eb:9c:27:5f:bc:
                    94:c4:c5:20:f0:d7:16:0a:76:ce:fc:e5:38:41:34:
                    79:13:db:72:59:c4:2f:1d:c2:02:bb:87:51:04:79:
                    10:2f:f8:63:64:04:1c:e7:92:5a:00:c1:de:1f:75:
                    31:b9:fa:31:40:f5:75:28:a8:dc:bb:0e:30:e9:f8:
                    b0:31:2c:d3:bf:d0:59:bc:f7:31:27:f4:7b:59:5c:
                    25:8a:8a:51:d7:2d:12:e4:c0:93:60:37:e1:dd:de:
                    22:fb:3a:b5:68:1b:ca:e1:53:f4:64:49:f3:e9:19:
                    df:ba:8d:ec:a7:cf:d4:07:44:f6:f9:1f:8f:e7:34:
                    ba:0e:b2:4d:ae:e8:9d:47:0d:99:6b:24:c4:d0:26:
                    d9:52:76:05:d5:c3:11:1b:38:de:0d:db:ed:76:00:
                    f4:b4:e4:57:f8:f2:1b:2c:60:c3:d2:13:c4:eb:54:
                    2f:e7:6b:17:4a:69:d6:84:fb:d9:7f:29:f3:0c:4e:
                    7a:2f:37:84:e7:26:bb:05:2a:8e:4a:ab:36:c8:88:
                    d9:2e:a3:07:59:94:47:fb:e3:e2:5c:7d:12:38:b4:
                    14:0f:af:fb:1e:66:c9:30:b7:2d:d0:04:1f:79:3a:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:27:74:E1:C1:12:C5:84:99:F4:63:BC:C0:70:E4:9B:39:62:0F
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:a9:21:de:91:61:0a:f9:bf:1a:0d:9a:fc:25:7a:ba:04:
         ca:33:ae:51:38:f3:74:49:1f:17:2c:c7:17:4a:e3:9d:a6:6f:
         bb:75:ac:2d:e1:8d:bb:cc:5a:4e:77:2c:8c:88:2c:3c:d6:de:
         69:21:b2:59:c0:e7:76:7f:36:62:88:eb:60:eb:15:0d:e1:b4:
         cc:b9:6c:f3:87:66:e2:4d:c6:b4:f1:f0:dc:45:83:87:6d:2f:
         11:b1:3f:82:a9:87:d5:77:f6:af:aa:fb:9e:ec:43:49:09:82:
         77:53:60:ec:3e:7d:4b:4b:a1:50:31:ca:fe:1c:33:ec:59:03:
         17:b6:a1:eb:98:77:7b:ae:17:09:80:55:db:85:2e:b0:d9:7a:
         5a:c8:60:3b:87:64:51:95:cc:15:33:41:ba:48:64:da:7a:2f:
         ff:55:6e:28:cd:c7:8b:41:d9:5a:69:ef:14:ea:4f:de:f8:76:
         86:27:d3:12:26:30:a8:3d:bb:d2:4e:85:bd:b7:53:a3:03:27:
         d0:08:96:67:0e:29:67:82:d0:f5:b4:71:49:60:f8:0c:96:4e:
         37:e0:5c:38:f7:9d:6d:38:a2:f2:7f:ba:82:37:12:2c:0b:92:
         9d:9f:fd:74:56:31:6b:0c:0c:12:74:0f:80:b2:f8:25:cb:58:
         09:71:67:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjYwMjAzMDMyNDI4WhcNMjYwMjEwMDMyNDI4WjAYMRYwFAYD
VQQDDA02OTgxNmE2Yy04NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nYs2MYesLEd9H3mtvMVvhnWbYCOEV0x65wnX7yUxMUg8NcWCnbO/OU4QTR5
E9tyWcQvHcICu4dRBHkQL/hjZAQc55JaAMHeH3UxufoxQPV1KKjcuw4w6fiwMSzT
v9BZvPcxJ/R7WVwliopR1y0S5MCTYDfh3d4i+zq1aBvK4VP0ZEnz6Rnfuo3sp8/U
B0T2+R+P5zS6DrJNruidRw2ZayTE0CbZUnYF1cMRGzjeDdvtdgD0tORX+PIbLGDD
0hPE61Qv52sXSmnWhPvZfynzDE56LzeE5ya7BSqOSqs2yIjZLqMHWZRH++PiXH0S
OLQUD6/7HmbJMLct0AQfeTrthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+nJ3Th
wRLFhJn0Y7zAcOSbOWIPMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3
RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/cakh3pFhCvm/Gg2a/CV6ugTKM65ROPN0SR8XLMcXSuOdpm+7dawt
4Y27zFpOdyyMiCw81t5pIbJZwOd2fzZiiOtg6xUN4bTMuWzzh2biTca08fDcRYOH
bS8RsT+CqYfVd/avqvue7ENJCYJ3U2DsPn1LS6FQMcr+HDPsWQMXtqHrmHd7rhcJ
gFXbhS6w2XpayGA7h2RRlcwVM0G6SGTaei//VW4ozceLQdlaae8U6k/e+HaGJ9MS
JjCoPbvSToW9t1OjAyfQCJZnDilngtD1tHFJYPgMlk434Fw4951tOKLyf7qCNxIs
C5Kdn/10VjFrDAwSdA+Asvgly1gJcWcj
-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:08 2026 by rpki-client