This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
File:                     zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json)
Hash identifier:          fbrUgJz8XzdJVpbNyBOqozyokXNYkZ+OFCnjvjs+WdI=
Subject key identifier:   D7:1E:2D:B1:BA:FC:BD:E9:FF:46:AE:82:F8:1C:DA:6F:F9:6A:11:B4
Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4
Certificate issuer:       /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
Certificate serial:       1EA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
Manifest number:          1E8B
Signing time:             Fri 06 Feb 2026 15:57:12 +0000
Manifest this update:     Fri 06 Feb 2026 15:57:11 +0000
Manifest next update:     Fri 13 Feb 2026 15:57:11 +0000
Files and hashes:         1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: HYe6NrHXifWucxsIWcvAE5FYKQoM8SR2wTp3s1gPpJA=)
                          2: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: X2p/Qp6ns6nKjiBarMkHBerDTuiMPK0sDvqZ6rcsECs=)
                          3: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: AXKpStdDXM9wxv6G1AUD+699CXFgwwGK6Jd4DJQtq3o=)
                          4: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: 7zFzN5j9h6YzgNeZ8kZ1lY+L5+DYjuZkNzIwbCRSQJo=)
                          5: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: U2z4NGKM3y6RlvN/Vcw8vO0UDWLzoynGIyrvDNvIq28=)
                          6: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: NhB+p7+dqD+nB5j++Sxl/yETjDp4HDYVk+7B5ROENtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Feb 2026 15:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7841 (0x1ea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4
        Validity
            Not Before: Feb  6 15:57:11 2026 GMT
            Not After : Feb 13 15:57:11 2026 GMT
        Subject: CN=69860f57-7ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:86:af:6c:e0:b7:8c:2c:7d:00:7a:d3:a5:
                    ad:e6:7c:70:00:0e:ee:bf:d0:6e:24:60:cf:f0:d4:
                    4e:3a:64:b2:ee:06:28:c8:06:ac:07:bc:bf:bc:11:
                    78:f6:c0:85:8d:b5:9a:d9:48:18:17:b3:78:df:f6:
                    64:30:12:b2:cc:a3:58:fa:a8:7f:23:3a:ad:1f:5c:
                    7c:09:98:f2:39:64:c4:d7:0e:c8:8a:ba:97:8f:05:
                    0f:b5:cd:bf:23:fb:e2:f8:37:66:e9:0e:17:52:cf:
                    82:ff:bf:5a:7c:b9:05:43:cb:a4:4b:28:08:46:0e:
                    12:ac:92:10:64:b7:74:e4:81:d4:cb:5a:37:d1:ce:
                    64:c7:30:ff:9c:8a:26:0a:91:84:50:10:a1:4a:5b:
                    30:ed:8d:4c:44:df:5e:75:4f:48:c4:54:51:01:1a:
                    1b:e3:04:8a:46:5a:a1:18:6b:40:6b:9f:8f:b0:5f:
                    44:73:ab:ad:3c:5f:e3:a7:24:91:97:1c:6b:fa:8a:
                    8f:98:a6:e9:fe:56:06:b9:0f:f9:29:cd:41:ef:f8:
                    00:ab:f2:02:03:d5:e5:c7:99:d5:d2:17:bc:41:32:
                    fd:05:94:a2:eb:6d:c2:99:e4:45:22:80:71:99:4d:
                    a7:2e:39:ee:51:bd:eb:01:50:92:8b:ef:f3:49:ee:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:2D:B1:BA:FC:BD:E9:FF:46:AE:82:F8:1C:DA:6F:F9:6A:11:B4
            X509v3 Authority Key Identifier:
                keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:18:ca:ff:30:b1:16:32:3a:fb:30:67:08:de:f0:da:46:
         e9:73:24:67:57:1d:20:b3:66:25:bb:3f:6c:c6:b3:9f:bc:43:
         7f:b7:de:06:22:ed:0a:13:23:ef:ec:f1:47:ee:d0:66:aa:f2:
         01:e0:a1:9c:bf:98:8b:45:9b:0b:04:4e:f5:81:8f:a0:dd:07:
         89:36:bc:eb:83:75:9d:08:ff:49:5f:85:b1:ff:32:d7:fa:b3:
         90:b6:05:56:fd:34:ef:97:c3:37:d5:e5:8a:e6:45:a4:d4:35:
         a3:62:3f:49:df:d4:00:4c:c6:47:13:9f:fc:e7:02:0b:28:74:
         f8:6f:4b:23:6e:bc:66:b9:f2:24:4c:f6:26:91:ab:95:e1:f5:
         c2:8f:fc:69:fe:6c:77:75:6a:e2:9a:9f:12:b2:53:26:91:10:
         d6:86:66:a3:3a:aa:04:06:65:0a:1a:67:4a:10:e8:a5:f0:07:
         1d:bc:21:a2:bf:fa:0f:84:5f:6c:4a:b0:ee:14:d0:14:68:0a:
         21:63:6b:6c:15:05:f9:d6:af:18:cb:b0:96:44:6b:cc:68:11:
         6e:08:03:e8:7a:41:97:7c:ec:4d:87:7b:71:e3:ae:47:45:ec:
         60:8f:15:24:f8:73:7a:b6:d7:d9:59:ab:f7:2b:33:ee:a2:1d:
         ba:3b:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 13:15:02 2026 by rpki-client