This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
File:                     IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json)
Hash identifier:          JA1HxNru8RY7i2KNRHOq2kJulEqHzcmCzDwOCtr4iw4=
Subject key identifier:   30:CD:BA:21:66:EB:27:D4:E8:E3:C1:AF:F2:4E:A9:61:AC:FA:A4:8C
Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63
Certificate issuer:       /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
Manifest number:          0257
Signing time:             Mon 09 Feb 2026 01:30:05 +0000
Manifest this update:     Mon 09 Feb 2026 01:30:04 +0000
Manifest next update:     Mon 16 Feb 2026 01:30:04 +0000
Files and hashes:         1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: FoZ2qYiV5KJR/NnglvWg1nAmVzoN54Hk4AN7URydUgo=)
                          2: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=)
                          3: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=)
                          4: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl
                          rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 01:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63
        Validity
            Not Before: Feb  9 01:30:04 2026 GMT
            Not After : Feb 16 01:30:04 2026 GMT
        Subject: CN=6989389d-f71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:8f:88:b0:fa:7c:8d:62:5f:aa:f8:fd:b1:
                    9a:47:c3:30:45:73:74:06:5a:f0:87:74:c7:9e:75:
                    f6:37:c3:98:95:a9:c3:b5:f8:05:9b:d2:9f:13:2a:
                    df:89:67:ea:d4:19:3d:f8:1b:cd:52:4c:85:25:2b:
                    cf:e2:f8:0a:73:2f:5e:60:54:c3:6e:ab:3e:a6:7d:
                    16:bc:76:9a:7d:9e:ee:82:53:d1:97:06:61:62:bc:
                    c5:13:1d:b7:1d:30:a6:14:f8:f4:1b:d9:cc:75:06:
                    11:ab:10:38:8f:8b:f0:96:a9:5a:e5:10:0d:5d:44:
                    5c:80:04:57:8e:a1:e0:64:11:4f:35:9e:1e:af:f7:
                    ae:0f:31:ed:4e:c6:2e:35:91:40:cd:c7:f7:ea:45:
                    7d:53:3e:df:81:f2:48:93:87:ca:1a:f4:27:0d:99:
                    2b:05:ef:a8:40:71:3a:0e:d1:38:65:4a:4b:52:10:
                    14:37:dd:ab:02:87:4d:41:ea:da:6d:b7:b6:aa:9c:
                    7d:e4:23:2d:eb:c7:99:90:9b:c3:e9:35:55:37:92:
                    37:48:30:f4:47:3e:27:4e:86:ef:cb:f2:ad:c7:65:
                    8d:bd:32:f6:b7:ef:d5:dd:30:f7:6a:3c:20:93:d3:
                    56:67:55:35:7f:42:bc:a9:d1:6e:74:15:ce:65:0f:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CD:BA:21:66:EB:27:D4:E8:E3:C1:AF:F2:4E:A9:61:AC:FA:A4:8C
            X509v3 Authority Key Identifier:
                keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dc:a8:24:36:0f:76:e5:d1:76:34:73:e1:1a:7d:36:39:23:
         92:e5:a6:0d:05:45:44:54:b2:74:1f:27:ef:3e:ec:49:2f:6b:
         d6:70:e7:5c:24:36:68:61:fc:1c:2f:f1:bd:83:fd:0a:ba:a4:
         fd:3f:5e:e9:00:36:bc:01:e1:02:17:11:d6:65:72:6a:7d:df:
         89:24:51:16:27:8c:af:d1:14:ee:29:68:1b:d1:89:d7:b8:4c:
         c1:7b:50:19:d0:15:69:07:e1:48:de:71:00:ca:66:92:62:1b:
         ad:34:bd:3c:9e:2e:36:c3:6d:f9:ed:81:53:4c:cc:6d:28:00:
         bb:cf:f4:72:8a:90:62:45:bf:48:a8:e8:f6:e9:35:e6:09:89:
         0a:e2:20:6b:ee:c2:7b:b1:ee:73:17:76:2a:eb:ed:03:0d:95:
         c2:53:a1:bd:f9:0f:65:29:93:fb:32:12:42:b7:48:d3:06:46:
         f0:d9:38:12:6a:11:9c:f2:38:7f:4e:b2:af:ad:b1:d7:24:7d:
         33:77:32:47:8a:c5:48:be:c5:5a:60:43:3f:c1:dd:2f:c5:ad:
         89:c8:a0:0c:d2:3a:3c:5e:ab:8c:02:e7:3f:ae:f4:79:be:14:
         75:6a:d1:9a:5f:3e:8b:60:81:e1:d8:3b:fe:c5:8a:32:f1:9b:
         26:4e:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:15 2026 by rpki-client