This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File:                     7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier:          nZFpVRK5v3w1wkjZNKBCvOT/WtoMC415ejnu8di94rI=
Subject key identifier:   A5:73:0F:52:03:62:F8:43:DF:17:52:18:A2:B7:1E:59:6E:52:E3:C7
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer:       /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial:       025B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number:          0254
Signing time:             Mon 09 Feb 2026 01:34:18 +0000
Manifest this update:     Mon 09 Feb 2026 01:34:17 +0000
Manifest next update:     Mon 16 Feb 2026 01:34:17 +0000
Files and hashes:         1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: FxsK2wULqa/mKhos0PMknNbjUoedNZ8aZNP+oSYu/io=)
                          2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: a7dxXCx6MYR+XHKV7x8741sygGvBY9tuPGBJ3I6LZes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 01:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
        Validity
            Not Before: Feb  9 01:34:17 2026 GMT
            Not After : Feb 16 01:34:17 2026 GMT
        Subject: CN=6989399a-d305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:bb:12:0a:aa:b3:85:fd:50:2c:dc:9c:4a:
                    d3:a2:80:f0:41:d5:3b:11:e7:00:2f:c0:a6:a3:47:
                    fd:f8:de:4e:5f:9c:77:bf:50:49:e6:37:f9:01:0a:
                    27:43:23:32:78:f8:1c:29:ba:cf:63:eb:ac:f4:21:
                    3d:1e:47:9e:2c:e7:ca:61:27:21:99:b2:c7:a4:da:
                    0d:cb:5e:50:fb:3a:d9:81:ce:d2:f8:14:45:29:1e:
                    f1:06:f1:0c:8a:10:8b:dc:fd:af:89:90:61:d9:2c:
                    82:a5:76:c5:5b:a7:19:06:12:0c:55:f8:02:9f:39:
                    53:6f:91:37:4b:28:a6:3d:e4:bb:bd:27:a5:55:38:
                    6c:db:ab:8c:ab:c0:de:1b:09:8b:7f:f1:5c:f8:e8:
                    96:42:b7:5c:c6:8a:5d:e6:f0:a5:74:4e:c1:1b:1f:
                    c6:62:17:6e:a2:47:a1:6a:ec:a2:8b:dc:53:ae:2e:
                    9f:6f:45:d0:4e:fa:1c:2e:f7:e7:bb:21:b7:c8:6d:
                    ee:52:38:ee:b1:a6:0b:7d:56:40:64:73:f2:9c:4c:
                    3c:76:ce:ba:f3:51:e6:4d:bb:e5:ac:65:b4:ff:dd:
                    d4:20:b0:12:02:14:3c:1c:97:ee:d2:8a:26:42:89:
                    61:17:88:44:7c:5c:3f:3d:e2:6a:7f:23:77:c8:b5:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:0F:52:03:62:F8:43:DF:17:52:18:A2:B7:1E:59:6E:52:E3:C7
            X509v3 Authority Key Identifier:
                keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:3a:4c:36:5f:8d:55:c9:59:66:41:cf:2f:5f:6b:32:32:
         4d:ae:9a:44:53:38:aa:62:28:ee:19:b0:76:28:9c:c9:d1:a0:
         cd:5e:5d:eb:8f:13:a5:3e:46:04:4f:5b:73:b2:ff:9e:49:d5:
         5d:3a:88:f6:93:92:2c:bd:da:40:c9:af:af:b9:b1:d9:6e:db:
         01:e8:7e:b2:b4:61:b2:2c:05:af:01:cb:62:5b:bf:8a:4e:64:
         98:1c:86:b4:fa:cd:fc:d8:fd:4d:1c:2f:04:e3:1c:84:b8:f0:
         e4:d0:de:66:0c:45:83:1d:ad:f8:d7:84:f5:3a:a4:ae:70:55:
         f6:61:c6:09:8b:8b:c2:3a:a3:64:08:09:fa:04:b1:59:00:93:
         e3:8c:3e:56:cd:73:70:18:99:06:27:b2:7d:dd:2c:3a:ee:67:
         33:ba:c1:87:e4:77:41:f0:0b:56:58:be:c0:90:70:27:07:3a:
         93:9b:8f:6c:ee:42:a5:51:e4:08:bc:39:2e:33:b6:1d:76:82:
         e5:df:82:41:0b:de:12:00:d6:ca:74:71:1d:57:2f:bc:60:38:
         ba:e4:78:7f:7e:0d:5d:1f:7a:c5:23:ab:de:55:3c:96:f3:4e:
         59:3a:94:e8:cc:2f:44:69:21:e9:bb:73:d1:51:d0:24:64:24:
         20:d9:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 11:14:26 2026 by rpki-client