This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
File:                     xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json)
Hash identifier:          b2SXR2C2TyGvuG3aQ6xQ0+llitzMiJRWUseSrVTDGOE=
Subject key identifier:   88:85:C9:2B:B3:F1:1E:9F:B3:8C:BB:1C:E0:E8:1D:5A:F0:60:3D:56
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Certificate issuer:       /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
Manifest number:          096F
Signing time:             Sun 08 Feb 2026 19:49:17 +0000
Manifest this update:     Sun 08 Feb 2026 19:49:17 +0000
Manifest next update:     Sun 15 Feb 2026 19:49:17 +0000
Files and hashes:         1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: DDL+EvsjPXEGkb2EWP5VhBpNd4xu06PJLoHS/KzXQuU=)
                          2: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=)
                          3: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=)
                          4: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=)
                          5: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=)
                          6: 2BFE357EF06211F08763644E5C6F56BC.roa (hash: Xmf0MRh/MXBc+iFvfoflK2eHN9mE4CmoCd4WG2aslcQ=)
                          7: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: EzZJxF7ZrXqvRiGypY3gfcMIXSDFoU1zHAEwKcXQMu4=)
                          8: 7B3252CC014911F1B56055C9516F56BC.roa (hash: YvLBuX1GSQ3jSoWEQqwO93Hur0Iym2DdsLOAXPf1iLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Feb 2026 19:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
        Validity
            Not Before: Feb  8 19:49:17 2026 GMT
            Not After : Feb 15 19:49:17 2026 GMT
        Subject: CN=6988e8bd-9196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:8b:37:4b:78:50:69:5e:cb:93:b0:3f:c1:
                    41:87:b3:60:b4:0f:e5:22:7e:0d:6a:83:09:91:67:
                    47:aa:f8:6d:af:77:c6:b5:e1:0b:8a:9a:f6:8f:e3:
                    a7:0b:03:9e:8c:c8:1e:09:cc:fe:37:f4:bc:8d:db:
                    68:12:0d:c1:40:a4:f0:f0:38:9b:fe:c5:b7:c8:a1:
                    65:8d:ff:e6:8a:93:51:1c:61:18:ec:a5:55:4b:78:
                    01:f7:63:0b:84:de:14:5a:a3:12:49:84:de:6d:d1:
                    09:b9:4c:f0:9c:db:0a:7f:7d:f3:45:57:b5:fa:8d:
                    52:56:d0:4a:64:5c:88:7e:80:7a:41:12:9b:fa:ee:
                    61:f8:fd:ea:bf:35:31:1d:e4:a3:59:11:29:e7:68:
                    12:ab:bb:d6:2a:db:c6:80:e0:f7:a6:7d:5b:35:5b:
                    22:23:e1:4d:d8:79:b5:75:4f:9e:18:b8:9c:fa:2e:
                    8e:44:71:63:35:96:07:ef:af:2e:ec:c9:3d:4f:ba:
                    5e:6a:88:50:a1:c2:fe:70:2f:6f:df:89:61:d8:69:
                    13:46:ff:32:1a:39:f2:59:cb:b6:47:0c:15:14:93:
                    df:a7:a6:db:47:dd:e4:aa:58:15:6c:54:ab:e7:4a:
                    ad:75:f3:00:30:5a:e3:0d:58:19:c2:71:1c:48:34:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:C9:2B:B3:F1:1E:9F:B3:8C:BB:1C:E0:E8:1D:5A:F0:60:3D:56
            X509v3 Authority Key Identifier:
                keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:ff:44:d2:71:64:f2:b6:44:1d:ca:32:24:6d:59:ad:96:
         07:a8:a6:c2:63:fa:46:18:e6:bc:59:b8:89:57:90:0d:89:a1:
         8f:21:36:78:93:bd:20:10:bf:f4:3e:51:5c:ed:c6:6a:96:d5:
         e8:5c:e1:1f:ae:6b:57:b0:33:6f:52:96:94:85:89:9c:4c:50:
         ad:3a:e3:97:89:d6:35:3a:b3:9b:63:27:a3:67:d8:14:70:2b:
         00:4e:c9:35:70:29:7f:ec:fa:fe:d5:47:3a:df:27:e6:00:e1:
         06:93:51:b6:c0:30:f5:df:d6:d4:5b:a9:15:27:ed:87:7f:3a:
         dd:47:d4:8a:c1:97:24:dd:1a:2b:71:d6:07:4a:40:bd:54:38:
         21:87:2c:e0:ef:d3:85:05:b2:cb:d4:29:e7:20:12:0c:f4:f7:
         24:02:8e:37:50:61:1e:de:49:10:7f:e5:97:54:33:7f:78:fc:
         8c:fc:4d:56:1a:91:14:a0:4e:cf:d2:68:35:32:09:f0:b2:c1:
         06:a7:17:52:8b:a5:a1:61:7a:1f:6b:6b:83:c8:a3:a5:7f:f2:
         23:ba:80:20:d6:bb:fe:32:0f:6f:3e:16:ea:08:8a:53:48:c3:
         a1:c1:c0:5c:47:ee:6e:76:65:dd:f6:62:c5:a5:28:8c:7a:08:
         d1:94:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:30:46 2026 by rpki-client