This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          ZnZ8OE0FHwXv9rGaKuhoSJLfrBWnXyVZyzfevD4mD54=
Subject key identifier:   82:B6:24:F9:B8:65:68:74:81:3C:B2:21:3D:91:DE:4A:CD:1C:F5:F1
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       09A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          1388
Signing time:             Tue 10 Feb 2026 19:27:19 +0000
Manifest this update:     Tue 10 Feb 2026 19:27:18 +0000
Manifest next update:     Tue 17 Feb 2026 19:27:18 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: QAt0wIdMwdfh2BztsFnb78ma01iGmgiR1IPOyrCcR0k=)
                          2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=)
                          3: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=)
                          4: F9E12AD89D0011F08C93B545C4F9AE02.roa (hash: fPmtLcUFfqmnk0wi645J2lDvp8Mqyw6eXt3q3C30cuA=)
                          5: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 19:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470 (0x9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Feb 10 19:27:18 2026 GMT
            Not After : Feb 17 19:27:18 2026 GMT
        Subject: CN=698b8696-3c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:be:7e:76:52:02:20:be:88:79:5f:97:0f:
                    bc:da:5b:0f:f8:bd:d8:0b:62:9e:39:ce:b5:ef:78:
                    d0:d2:ab:49:86:c3:18:b9:eb:71:10:d5:9a:29:5d:
                    a3:f7:1d:0d:40:f4:95:41:54:71:45:85:12:46:79:
                    08:9d:66:3d:65:96:bd:f2:d6:06:ba:95:e9:97:ea:
                    44:ed:1f:c8:b1:24:ae:1d:01:78:a1:fd:ee:eb:9c:
                    f2:3e:b8:26:0e:e1:df:5e:3d:0e:65:5c:e8:7b:89:
                    32:4f:6f:d3:0d:47:5e:7f:98:cf:1b:11:72:4d:5b:
                    b6:de:18:53:95:e6:b3:3a:39:5d:8b:66:29:18:32:
                    b5:32:f8:c2:de:88:0e:33:c3:5f:d9:de:ac:80:3f:
                    4b:a5:a7:af:8e:00:47:a3:53:8f:68:d3:2f:37:10:
                    c4:5c:eb:81:a7:d2:99:fe:5f:fa:79:e8:e8:31:17:
                    39:be:d8:66:b0:51:a0:97:b5:4c:f8:70:f5:3e:79:
                    6b:bd:14:80:38:a0:af:51:4a:b1:79:f7:26:7b:50:
                    29:d3:a8:e3:8b:9b:06:3c:79:de:f6:5d:08:81:1d:
                    d4:86:c1:f1:69:d7:eb:70:fb:00:66:f8:84:97:46:
                    b9:db:29:40:a6:fe:f3:d6:46:2e:17:9e:ad:18:42:
                    f1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B6:24:F9:B8:65:68:74:81:3C:B2:21:3D:91:DE:4A:CD:1C:F5:F1
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ae:a3:53:a1:d0:e4:de:1e:1c:1d:43:08:2c:a4:4d:53:84:
         1d:37:37:2d:ba:79:57:c1:32:26:2f:73:c6:27:45:df:2f:7b:
         6c:d2:27:3b:c8:b5:1b:22:d3:0f:40:6f:c8:be:52:f3:f8:30:
         d8:b3:42:cd:f7:3a:46:d7:f2:02:19:69:7c:1b:28:f7:16:da:
         b2:e3:5c:16:84:55:d1:22:2d:73:4d:71:d1:01:86:e9:da:8f:
         0a:8f:da:ed:f6:b4:bb:42:b0:ef:1c:9f:4a:ad:d0:d5:d7:6c:
         41:a4:82:fb:10:c1:c3:95:78:ee:4e:a6:04:09:fb:ca:2b:a2:
         28:92:f1:f6:b9:11:7d:35:a6:23:31:ee:5f:2f:6d:60:b4:f6:
         22:ef:8e:a8:ab:53:77:9d:32:fc:7d:a9:b6:5b:a8:c4:8d:b3:
         b0:3e:63:9b:fb:4e:7e:9e:d2:63:04:a7:a4:0e:ce:ae:45:67:
         57:b0:ea:6a:3a:85:91:d4:3a:ae:c8:e7:3d:23:0e:b9:fd:20:
         c2:5c:60:51:4b:45:2b:3f:84:71:34:a3:62:2e:02:af:d3:88:
         23:fa:eb:61:99:54:f8:f5:0b:32:85:67:2d:96:fd:4f:07:81:
         53:58:b2:d7:0a:f4:10:0e:db:57:e5:9c:33:22:7f:6f:0f:c6:
         1a:31:e2:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC
RTE2OTA5MTgwHhcNMjYwMjEwMTkyNzE4WhcNMjYwMjE3MTkyNzE4WjAYMRYwFAYD
VQQDDA02OThiODY5Ni0zYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA68O+fnZSAiC+iHlflw+82lsP+L3YC2KeOc6173jQ0qtJhsMYuetxENWaKV2j
9x0NQPSVQVRxRYUSRnkInWY9ZZa98tYGupXpl+pE7R/IsSSuHQF4of3u65zyPrgm
DuHfXj0OZVzoe4kyT2/TDUdef5jPGxFyTVu23hhTleazOjldi2YpGDK1MvjC3ogO
M8Nf2d6sgD9LpaevjgBHo1OPaNMvNxDEXOuBp9KZ/l/6eejoMRc5vthmsFGgl7VM
+HD1PnlrvRSAOKCvUUqxefcme1Ap06jji5sGPHne9l0IgR3UhsHxadfrcPsAZviE
l0a52ylApv7z1kYuF56tGELxcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIK2JPm4
ZWh0gTyyIT2R3krNHPXxMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5
NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v
VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIrqNTodDk3h4cHUMILKRNU4QdNzctunlXwTImL3PGJ0XfL3ts0ic7
yLUbItMPQG/IvlLz+DDYs0LN9zpG1/ICGWl8Gyj3Ftqy41wWhFXRIi1zTXHRAYbp
2o8Kj9rt9rS7QrDvHJ9KrdDV12xBpIL7EMHDlXjuTqYECfvKK6IokvH2uRF9NaYj
Me5fL21gtPYi746oq1N3nTL8fam2W6jEjbOwPmOb+05+ntJjBKekDs6uRWdXsOpq
OoWR1DquyOc9Iw65/SDCXGBRS0UrP4RxNKNiLgKv04gj+uthmVT49QsyhWctlv1P
B4FTWLLXCvQQDttX5ZwzIn9vD8YaMeKN
-----END CERTIFICATE-----
Generated at Wed Feb 11 11:54:02 2026 by rpki-client