This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File:                     m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier:          IvSCBUYms5bJq1T4oytBjzLWoeaS3xE4cEoBtZLK+DM=
Subject key identifier:   95:F8:8D:76:A2:79:81:1F:B8:F5:A0:29:8F:B2:14:BF:B3:B6:AD:75
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer:       /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number:          0B36
Signing time:             Sun 08 Feb 2026 19:50:10 +0000
Manifest this update:     Sun 08 Feb 2026 19:50:10 +0000
Manifest next update:     Sun 15 Feb 2026 19:50:10 +0000
Files and hashes:         1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: pxdnou6ghFmmy3unaDMbJWpFEaFEG/98e23oezlF9TY=)
                          2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=)
                          3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
        Validity
            Not Before: Feb  8 19:50:10 2026 GMT
            Not After : Feb 15 19:50:10 2026 GMT
        Subject: CN=6988e8f2-051e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:fa:02:53:32:3a:c3:84:99:3f:99:98:ba:
                    e8:d2:5e:a5:9a:f8:7b:9e:98:55:cd:39:b8:b3:d2:
                    7f:21:cd:80:c8:d8:0d:42:ff:60:4d:d4:26:bd:38:
                    c8:29:e9:90:da:ad:84:30:fc:c8:a5:51:26:89:4d:
                    de:8f:84:6e:8e:99:43:79:40:47:6b:b7:20:91:27:
                    bb:5d:23:ba:35:35:bd:d7:25:1f:30:16:e3:bd:55:
                    ca:00:34:82:f0:82:a2:b5:c4:85:bc:04:d6:77:5d:
                    8a:f9:2f:22:ec:52:58:8c:ea:6c:44:fc:d9:2b:cc:
                    4d:79:6e:71:2f:16:17:e5:2a:09:35:c3:b4:b7:49:
                    91:0b:40:ab:8e:26:82:89:60:e9:cb:83:4e:7d:7f:
                    d8:53:9f:35:a5:0d:f4:ef:93:74:f6:39:a9:3b:c2:
                    5a:00:e8:80:b4:c2:6b:fa:b5:99:a0:28:6d:6a:3c:
                    e2:5a:26:45:ff:fc:f4:47:02:fb:3f:d3:0a:b6:8a:
                    ef:be:b5:e7:1d:94:5d:df:48:72:08:fb:0f:b0:ef:
                    71:a4:a6:e0:b4:a0:9b:7d:a0:3f:79:cc:f8:8e:81:
                    cc:bf:75:49:61:3d:93:43:62:a0:d6:5f:db:65:b4:
                    67:b0:b1:96:f1:f3:44:7d:ea:4d:70:d8:7c:5c:d4:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:8D:76:A2:79:81:1F:B8:F5:A0:29:8F:B2:14:BF:B3:B6:AD:75
            X509v3 Authority Key Identifier:
                keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:68:95:b8:8a:af:5f:06:51:a5:58:c8:fb:01:14:33:cb:
         24:0f:b6:bf:54:9b:51:e9:63:e4:a2:93:51:cb:14:70:14:be:
         5e:6f:3a:20:04:8d:29:d8:62:fc:68:b6:65:8f:72:63:cb:86:
         ed:35:af:6b:af:9e:ac:6a:ea:bf:11:f9:b5:a4:2e:7a:3f:0a:
         01:48:17:cb:3a:85:26:be:9a:21:7d:c6:4a:56:3b:61:b4:88:
         92:cb:74:c0:6a:37:f2:6e:d6:4c:0d:fd:bb:f3:8f:61:61:2c:
         cf:44:28:35:2b:11:8a:49:c6:c0:48:a1:9b:f6:56:72:d8:46:
         95:fa:97:98:da:a0:7e:1d:61:3f:cb:bd:c4:7b:79:42:9e:3b:
         08:8e:59:fc:33:86:76:8d:89:22:4f:e2:18:31:cf:c1:c1:17:
         98:f8:fa:2c:ec:5e:c5:6f:97:5a:d8:46:97:03:5d:df:3d:5d:
         bc:38:69:9d:5f:9d:f9:0e:18:61:a7:8b:98:51:75:10:d3:93:
         64:df:1d:16:cd:14:d0:66:66:96:c7:6b:00:87:f9:dd:e2:19:
         86:00:61:4c:da:98:9d:42:f8:76:e0:03:8d:c7:f6:b6:82:e4:
         28:88:c5:47:b9:68:f0:1e:b6:d8:33:2e:74:3e:d9:b2:70:3e:
         d9:98:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 18:29:53 2026 by rpki-client