This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
File:                     US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json)
Hash identifier:          UoMj8WThH1+nWpeIIk4NWcrSyb3sEMYJEc4UJ2rhVJk=
Subject key identifier:   16:76:5A:C2:BF:6F:4D:DA:26:F3:52:8D:BE:8E:90:8F:FE:53:F1:22
Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F
Certificate issuer:       /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
Manifest number:          0592
Signing time:             Sun 08 Feb 2026 22:53:41 +0000
Manifest this update:     Sun 08 Feb 2026 22:53:40 +0000
Manifest next update:     Sun 15 Feb 2026 22:53:40 +0000
Files and hashes:         1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: Jkjqicjz1gc7u33I3G/D+P1Y7ITsnIvBKqHWGIcLSak=)
                          2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: +Mi7BZoKW+xr25lpsKkabZrOyuilHhAO129Cyy+dlGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl
                          rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 22:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F
        Validity
            Not Before: Feb  8 22:53:40 2026 GMT
            Not After : Feb 15 22:53:40 2026 GMT
        Subject: CN=698913f4-be4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:d0:96:88:31:3f:43:97:0d:d2:a9:0d:8c:
                    4b:86:c4:79:03:33:8e:d9:bb:d3:2a:52:6d:98:4d:
                    48:bd:b1:1d:5a:43:81:b1:a3:99:7d:a0:29:76:ea:
                    6c:f4:f7:cc:fd:3c:bc:5b:33:65:d0:1b:ba:7b:ac:
                    2d:cf:1a:33:9a:31:76:1d:96:a3:dd:64:a3:7f:79:
                    bc:d5:fb:bd:94:e1:52:ae:a7:ca:4f:d5:71:31:b4:
                    bc:55:8d:38:fb:4b:b4:97:bd:91:45:29:a1:2c:45:
                    6a:8b:f2:fc:df:e4:9f:74:a3:b9:7b:03:a7:2a:6b:
                    35:3d:37:85:7e:cd:77:f3:5b:a1:ff:de:1c:0d:78:
                    cc:35:de:d7:09:07:5f:7b:d7:33:e3:b4:a3:88:d5:
                    bf:64:b2:79:a5:16:bf:cd:8b:9b:6d:ee:e9:b4:dd:
                    07:46:8c:c4:50:13:48:b0:9f:fc:37:ac:dd:f4:4e:
                    80:17:0a:4c:60:10:44:f2:72:2f:f6:86:7c:fb:28:
                    26:80:6b:d7:93:b1:b2:38:ff:3e:f0:b7:8e:20:6b:
                    cd:16:8a:53:3f:6c:e9:29:36:e9:e3:88:69:05:ff:
                    ea:e5:5d:f8:c6:2b:75:12:1f:b1:0a:91:15:56:b2:
                    9f:54:87:2b:ba:72:04:b2:32:73:d4:3b:56:d4:df:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:76:5A:C2:BF:6F:4D:DA:26:F3:52:8D:BE:8E:90:8F:FE:53:F1:22
            X509v3 Authority Key Identifier:
                keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:04:ad:2a:1b:cb:09:20:b4:9f:c4:64:7f:34:b4:9a:7c:f9:
         a9:64:03:f5:19:66:b5:76:35:85:9f:18:4f:f0:c2:d4:69:e4:
         96:9a:eb:58:55:c5:91:97:3c:96:99:74:72:ef:db:0d:53:3c:
         4a:92:f3:02:2c:b8:92:af:c1:8a:b7:cd:8c:74:38:96:c4:bd:
         bc:81:49:46:cf:8c:b3:a9:37:5d:38:f9:1c:b8:ee:0e:a9:4a:
         be:ef:6b:1a:bc:24:b6:60:ec:9f:14:eb:46:00:4c:e9:63:4a:
         f7:c1:c7:4f:51:5a:19:99:48:9e:90:38:0a:0a:50:9f:c0:4a:
         3c:ce:84:18:75:5b:66:0f:bf:24:f6:13:be:cf:08:a1:df:07:
         5c:37:20:52:42:a8:d0:b5:34:d0:01:ae:19:d8:de:98:4a:6d:
         89:e7:4f:43:3c:e4:3d:cf:dd:16:b7:68:4e:f5:2d:b4:9a:fd:
         56:89:82:68:c7:97:40:19:3b:38:4f:4f:7d:6b:d3:e6:b9:35:
         16:b3:37:39:10:19:73:86:3f:f5:53:ea:5d:76:84:27:75:4f:
         c7:00:9d:fd:bb:e7:1f:95:e1:8d:99:b8:86:25:41:43:b0:d1:
         bf:8d:19:c0:3a:50:59:41:72:f2:c1:f8:a9:58:37:8b:43:41:
         bc:7c:83:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4
RUI0RTIyNUYwHhcNMjYwMjA4MjI1MzQwWhcNMjYwMjE1MjI1MzQwWjAYMRYwFAYD
VQQDDA02OTg5MTNmNC1iZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/7QlogxP0OXDdKpDYxLhsR5AzOO2bvTKlJtmE1IvbEdWkOBsaOZfaApdups
9PfM/Ty8WzNl0Bu6e6wtzxozmjF2HZaj3WSjf3m81fu9lOFSrqfKT9VxMbS8VY04
+0u0l72RRSmhLEVqi/L83+SfdKO5ewOnKms1PTeFfs1381uh/94cDXjMNd7XCQdf
e9cz47SjiNW/ZLJ5pRa/zYubbe7ptN0HRozEUBNIsJ/8N6zd9E6AFwpMYBBE8nIv
9oZ8+ygmgGvXk7GyOP8+8LeOIGvNFopTP2zpKTbp44hpBf/q5V34xit1Eh+xCpEV
VrKfVIcrunIEsjJz1DtW1N/SWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZ2WsK/
b03aJvNSjb6OkI/+U/EiMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD
OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3
eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7BK0qG8sJILSfxGR/NLSafPmpZAP1GWa1djWFnxhP8MLUaeSWmutY
VcWRlzyWmXRy79sNUzxKkvMCLLiSr8GKt82MdDiWxL28gUlGz4yzqTddOPkcuO4O
qUq+72savCS2YOyfFOtGAEzpY0r3wcdPUVoZmUiekDgKClCfwEo8zoQYdVtmD78k
9hO+zwih3wdcNyBSQqjQtTTQAa4Z2N6YSm2J509DPOQ9z90Wt2hO9S20mv1WiYJo
x5dAGTs4T099a9PmuTUWszc5EBlzhj/1U+pddoQndU/HAJ39u+cfleGNmbiGJUFD
sNG/jRnAOlBZQXLywfipWDeLQ0G8fIOQ
-----END CERTIFICATE-----
Generated at Tue Feb 10 13:08:46 2026 by rpki-client