This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft
File:                     b8Lt8MURUqO-wRSaG9su2yk8nZU.mft (raw, json)
Hash identifier:          FxNoW71asv0vaag6CN2lU36eASpBXR+iEAVWX5TCIY0=
Subject key identifier:   7E:F5:24:C0:DC:B9:A8:B8:C2:81:D4:A9:79:B9:31:73:39:4D:6A:7E
Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95
Certificate issuer:       /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
Certificate serial:       0DE0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft
Manifest number:          0DB5
Signing time:             Sun 08 Feb 2026 17:44:19 +0000
Manifest this update:     Sun 08 Feb 2026 17:44:19 +0000
Manifest next update:     Sun 15 Feb 2026 17:44:19 +0000
Files and hashes:         1: b8Lt8MURUqO-wRSaG9su2yk8nZU.crl (hash: LffehJroNHO1y6QUNirWY1l2p+XBlPqF+8VVYzOW86s=)
                          2: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (hash: 8r7MWVk5x8o1qlWsJdhw0htq1GLcuT7GZDff98YKUWg=)
                          3: 11815E36135311EE94A8A114C4F9AE02.roa (hash: 4RiRLEUaqFnMyzAxg+jhTtVSLZnRrw+D1OLV5ZjDtiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl
                          rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 17:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3552 (0xde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95
        Validity
            Not Before: Feb  8 17:44:19 2026 GMT
            Not After : Feb 15 17:44:19 2026 GMT
        Subject: CN=6988cb73-82cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:53:c2:0e:87:3d:75:58:78:62:ed:14:f9:
                    90:1b:87:a5:8c:2f:cb:a9:32:1a:ed:83:cc:ac:3d:
                    4a:89:17:ba:b1:f1:3b:43:36:9b:a0:e6:1c:71:07:
                    a0:60:8d:c4:40:52:a2:1a:7d:1b:ea:2c:93:f7:ca:
                    ed:b0:ab:85:02:20:a6:5e:7c:ec:ba:fd:54:00:f8:
                    92:fc:56:99:0c:f8:46:db:95:e3:de:3f:38:57:a5:
                    24:c9:a6:48:1f:ce:68:dc:cd:ca:c2:68:26:c3:32:
                    42:17:14:9c:54:0c:79:47:69:74:c5:ce:88:3d:cd:
                    1c:5e:f8:d9:92:fa:c0:c5:23:44:68:5f:ec:bd:ac:
                    83:2c:f6:a0:61:4f:b7:9c:20:49:b0:c0:ca:72:56:
                    fa:fe:00:1a:e8:1e:25:c4:06:48:ea:7a:9f:75:d5:
                    4e:01:f7:c2:d9:80:8f:97:e3:fd:6c:5e:fd:50:b6:
                    c7:b0:7b:82:48:32:99:6a:1c:8a:ed:a9:58:a1:4c:
                    4a:22:e2:6e:b3:f2:61:90:84:fa:da:45:14:a0:98:
                    ee:1b:14:a9:ec:da:b5:11:35:3e:5c:de:41:f8:85:
                    08:0d:4a:e0:bf:a5:f6:e8:a8:06:e0:2e:10:51:74:
                    5d:d9:01:1e:52:76:f1:99:d5:7a:1e:52:76:d3:da:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F5:24:C0:DC:B9:A8:B8:C2:81:D4:A9:79:B9:31:73:39:4D:6A:7E
            X509v3 Authority Key Identifier:
                keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:af:d3:82:0a:ef:8a:68:68:59:f6:b5:14:0b:10:3c:e1:
         a2:3b:17:88:16:ee:18:59:38:55:3e:04:cb:b7:94:45:35:66:
         d6:cf:83:44:c8:c1:27:6f:8c:08:19:f9:a7:b2:09:71:c7:9a:
         6a:c6:ef:ae:3f:23:87:97:e1:87:cf:63:0f:a1:49:b6:b5:ff:
         c3:cf:9f:2b:18:16:b7:32:e2:20:39:a3:83:ea:17:f9:a5:a3:
         10:ca:0b:02:1a:3d:2e:0e:a9:11:e4:26:e7:d7:e2:8a:61:ac:
         f3:e6:33:38:fb:02:6f:5c:8d:43:70:12:15:27:07:ce:91:29:
         36:dc:5b:35:e3:d4:af:27:fc:f7:cc:e3:ac:9a:29:68:84:e3:
         bc:41:77:bb:53:88:12:73:ab:be:9d:d3:08:33:4f:c3:eb:80:
         09:80:b9:9b:91:44:b1:e5:51:43:b4:75:98:53:0f:fd:2a:fd:
         82:6a:58:e8:f3:ed:61:86:0d:f4:46:b4:c0:4f:0f:8c:b5:4c:
         c9:77:d6:99:e7:c4:89:1a:f4:39:61:69:5b:8a:d6:c8:3f:47:
         8b:01:5a:3c:d4:00:b1:55:7f:77:f0:d1:f5:61:de:8e:34:4f:
         15:ad:17:3b:f6:f2:9b:45:3a:10:96:8e:7d:34:90:0e:0c:64:
         19:ee:f4:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC
MjkzQzlEOTUwHhcNMjYwMjA4MTc0NDE5WhcNMjYwMjE1MTc0NDE5WjAYMRYwFAYD
VQQDDA02OTg4Y2I3My04MmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsNTwg6HPXVYeGLtFPmQG4eljC/LqTIa7YPMrD1KiRe6sfE7QzaboOYccQeg
YI3EQFKiGn0b6iyT98rtsKuFAiCmXnzsuv1UAPiS/FaZDPhG25Xj3j84V6UkyaZI
H85o3M3KwmgmwzJCFxScVAx5R2l0xc6IPc0cXvjZkvrAxSNEaF/svayDLPagYU+3
nCBJsMDKclb6/gAa6B4lxAZI6nqfddVOAffC2YCPl+P9bF79ULbHsHuCSDKZahyK
7alYoUxKIuJus/JhkIT62kUUoJjuGxSp7Nq1ETU+XN5B+IUIDUrgv6X26KgG4C4Q
UXRd2QEeUnbxmdV6HlJ209oSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH71JMDc
uai4woHUqXm5MXM5TWp+MB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC
QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTI4Qi8xRTAyNjRBQURCQzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVx
Ty13UlNhRzlzdTJ5azhuWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPEq/TggrvimhoWfa1FAsQPOGiOxeIFu4YWThVPgTLt5RFNWbWz4NE
yMEnb4wIGfmnsglxx5pqxu+uPyOHl+GHz2MPoUm2tf/Dz58rGBa3MuIgOaOD6hf5
paMQygsCGj0uDqkR5Cbn1+KKYazz5jM4+wJvXI1DcBIVJwfOkSk23Fs149SvJ/z3
zOOsmilohOO8QXe7U4gSc6u+ndMIM0/D64AJgLmbkUSx5VFDtHWYUw/9Kv2Caljo
8+1hhg30RrTATw+MtUzJd9aZ58SJGvQ5YWlbitbIP0eLAVo81ACxVX938NH1Yd6O
NE8VrRc79vKbRToQlo59NJAODGQZ7vQS
-----END CERTIFICATE-----
Generated at Tue Feb 10 13:05:52 2026 by rpki-client