This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File:                     A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier:          I7k8Q2/nVkqgL633ssDBRj6ucQivbDQjWoF/xX3karE=
Subject key identifier:   1E:B1:20:18:85:BE:75:E3:E1:64:2F:17:AF:B7:2F:F6:CC:11:27:03
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       0336
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number:          031F
Signing time:             Mon 09 Feb 2026 00:47:49 +0000
Manifest this update:     Mon 09 Feb 2026 00:47:48 +0000
Manifest next update:     Mon 16 Feb 2026 00:47:48 +0000
Files and hashes:         1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: gyecDlXUUWhbiHHSpYl4lygLJTDk/fq7WQok0F/vEjA=)
                          2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=)
                          3: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: 3CgCTp3bzKYZXfeq4ZljTed0rolq+eWipeXPCnowOi0=)
                          4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Feb  9 00:47:48 2026 GMT
            Not After : Feb 16 00:47:48 2026 GMT
        Subject: CN=69892eb5-abac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:4a:a9:c6:54:17:fc:a4:83:aa:cc:d9:61:
                    b6:fb:38:0b:44:da:8c:28:e7:57:76:a5:5e:d7:ae:
                    79:1e:c5:13:8d:94:b6:39:f6:48:55:8b:af:07:21:
                    8a:87:e9:9e:eb:e3:f0:31:c5:a1:65:8f:3a:c1:52:
                    27:81:61:45:fa:54:a9:54:44:81:a6:cd:5b:81:19:
                    cb:d2:53:fe:0d:10:59:58:ee:76:93:cb:a6:ae:13:
                    96:63:46:0b:aa:33:9c:2e:84:68:eb:89:13:fd:21:
                    2e:bf:cf:13:c1:8b:a5:27:9d:6e:e6:43:f4:b9:9f:
                    1f:93:c5:04:bb:48:bc:64:f8:5b:d8:b4:82:f7:2a:
                    43:47:56:e0:29:17:0a:33:ad:cb:39:05:45:f2:fc:
                    d1:a1:00:5c:f2:4d:82:c8:16:b3:6e:e8:d5:f3:53:
                    93:37:67:16:4f:56:d5:0f:c8:01:44:38:47:e6:31:
                    64:18:df:f7:fe:1e:78:ef:73:ef:cc:4f:3b:c6:89:
                    68:2e:9e:08:0e:80:96:16:34:70:fe:4a:f2:72:29:
                    55:d0:7f:0f:f0:15:22:1d:a8:b9:4c:a5:ca:75:9c:
                    83:fd:28:82:ae:d2:3a:a6:98:41:af:fb:89:8b:be:
                    9a:8d:3d:82:5a:fb:1e:b5:7c:de:07:a6:99:02:03:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B1:20:18:85:BE:75:E3:E1:64:2F:17:AF:B7:2F:F6:CC:11:27:03
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:b0:9f:e4:a0:62:bb:49:d0:18:d2:4b:57:37:10:3c:ad:
         f4:4d:8e:62:ff:f3:96:04:61:de:49:88:6e:9e:50:f4:58:7d:
         ec:1b:c5:ad:a0:02:1c:1b:e1:5f:8f:39:e1:c3:96:29:0e:74:
         3a:4c:ed:f7:5a:0d:37:8a:07:52:22:ee:63:a5:bb:a3:5f:fa:
         c9:fb:ce:c1:e1:e4:ad:8c:06:2d:49:5c:2e:f4:7d:4c:77:ed:
         45:34:0b:ab:f4:b9:ca:1f:4c:7e:73:39:68:2c:8c:ef:60:54:
         0b:4d:ce:47:3f:e4:10:01:e8:24:50:e2:28:4d:fe:cb:23:f3:
         e0:7c:e1:48:72:7e:eb:8f:76:0c:60:c5:f1:55:e5:49:0e:c8:
         b2:18:a8:15:0c:06:19:6d:ed:e0:8b:61:1d:2d:e8:9c:cb:e6:
         e4:a1:d9:54:01:45:a6:25:a6:93:b6:07:71:eb:3f:06:3f:a5:
         ee:50:ae:05:30:97:a4:68:4f:c4:60:0f:c7:2a:ec:7e:12:e7:
         c0:ec:26:43:7d:fb:c1:16:4a:ee:db:64:d8:b6:11:34:cd:64:
         67:ab:8f:70:12:7e:7d:7e:50:6e:7c:80:65:a3:c8:8f:bc:7d:
         96:19:64:d9:02:ac:b4:11:1c:a4:fb:99:03:b7:6a:fe:02:34:
         42:25:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 01:31:03 2026 by rpki-client