This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File:                     kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier:          na8NT93ELVlaq1Vo+TZT3DImj0leCC+lpha8p2FtxCQ=
Subject key identifier:   8B:D9:B6:31:1C:3E:97:45:24:56:9B:C2:A4:16:83:07:10:28:74:87
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer:       /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial:       03E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number:          03DC
Signing time:             Mon 09 Feb 2026 00:10:35 +0000
Manifest this update:     Mon 09 Feb 2026 00:10:35 +0000
Manifest next update:     Mon 16 Feb 2026 00:10:35 +0000
Files and hashes:         1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: Xh4EY3EqaScqmIz9eVzvaQudcTK8mlgWThAnkTqIDX4=)
                          2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: xHLevAzZuis8NnrBHZLDJf2yx7IF05dGBA1riYkWutY=)
                          3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: /NRpEcDAXrkS/YDBwDOng+rHtIrpT7sCWxlP3Tbbtb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 00:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
        Validity
            Not Before: Feb  9 00:10:35 2026 GMT
            Not After : Feb 16 00:10:35 2026 GMT
        Subject: CN=698925fb-05f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:3c:f0:5f:9d:5a:a7:bd:06:66:7e:13:d5:
                    db:17:5d:1d:84:9c:b1:f2:98:0e:05:98:36:aa:a9:
                    f6:0c:60:51:3e:69:21:69:fa:53:49:92:9e:3a:78:
                    7f:13:0e:b5:63:63:3d:0c:07:40:43:a3:77:2e:eb:
                    26:3d:6c:65:3a:10:1c:1a:81:f5:72:e9:2d:8d:64:
                    38:c0:08:39:df:5f:6e:a8:72:e4:eb:10:c5:cd:ad:
                    3f:83:92:a2:84:b0:b4:e0:fa:37:d3:22:88:af:74:
                    e2:9c:f7:f0:44:3e:31:00:34:93:06:c6:c0:91:43:
                    97:ef:6a:b8:c4:77:bb:d9:52:ce:ca:a7:a5:b6:43:
                    92:02:36:e1:01:12:2e:c0:af:6d:26:52:04:e8:ee:
                    99:3f:74:47:84:10:c8:43:98:89:14:11:14:64:32:
                    08:85:6f:fa:66:00:ce:a4:12:cc:52:95:5e:f7:f6:
                    fa:3c:c2:81:3c:db:02:93:77:1e:58:a0:0f:55:bf:
                    4e:d0:2c:01:4c:3d:37:00:09:49:a3:aa:5a:29:e6:
                    9a:be:47:34:4e:0c:53:9a:6e:50:68:9d:65:14:ac:
                    37:18:7c:8f:79:bc:f1:f3:aa:c5:6a:20:38:89:d5:
                    13:82:36:01:31:d4:f1:d8:60:32:91:c3:fd:92:14:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:B6:31:1C:3E:97:45:24:56:9B:C2:A4:16:83:07:10:28:74:87
            X509v3 Authority Key Identifier:
                keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:61:e1:32:59:eb:32:00:7b:69:bd:22:c5:7a:03:e5:f3:24:
         93:f3:db:2e:a3:4d:98:3f:b3:22:9f:f3:d4:76:80:67:14:14:
         a7:f6:ed:fa:0e:7b:17:f0:84:0b:c4:e5:d8:63:ec:c7:be:2b:
         71:72:a7:08:3d:61:4d:53:7d:ea:53:94:1a:0f:08:1d:38:28:
         21:1d:37:00:42:85:47:b0:05:23:28:9b:6a:bc:25:84:77:2a:
         28:87:ac:8c:c1:27:9c:d8:d8:fd:fc:ff:3d:e4:07:24:b3:4b:
         ff:e7:8f:44:a0:ce:ab:ae:43:fb:b2:81:18:2f:e2:c1:c3:03:
         31:fe:b7:d6:83:de:23:3b:bd:99:ce:f6:1d:c1:62:23:a4:c2:
         c0:3b:9b:af:e5:67:11:88:3c:24:f4:03:6a:8c:8f:83:8c:d2:
         1b:ab:73:05:d1:15:2a:d4:27:21:c5:2f:1f:12:f5:19:c4:7a:
         0e:1c:5e:2f:60:ff:68:df:e1:93:79:02:99:f9:ce:e8:09:f5:
         c0:20:1a:6b:bd:64:09:a2:26:4e:75:03:7d:39:2d:8e:62:26:
         52:1b:e9:41:1f:c3:e5:94:92:fc:23:b0:a2:7f:b7:1e:dd:ee:
         93:c0:71:d1:19:e1:83:7b:e2:46:42:c8:65:c4:ce:cf:4a:e4:
         51:8c:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 11:37:14 2026 by rpki-client