This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
File:                     nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json)
Hash identifier:          gyXgchFzWWsTt331CNCbPM+LqUo8s1Apl1ORQRMreWY=
Subject key identifier:   EB:45:46:0D:0C:1B:2E:25:85:60:85:B2:02:AE:84:8B:46:BC:DC:10
Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA
Certificate issuer:       /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
Manifest number:          08ED
Signing time:             Tue 10 Feb 2026 20:00:44 +0000
Manifest this update:     Tue 10 Feb 2026 20:00:43 +0000
Manifest next update:     Tue 17 Feb 2026 20:00:43 +0000
Files and hashes:         1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: csA2KLxQLkKhzdzh+DDqkDleS8XmY7ECTpew3tKKOFw=)
                          2: FE60ECB0879311EB84047577C4F9AE02.roa (hash: iVH3rhTgtUSo/JF63FQElE1NqUIp2qYoI3iOuK+LB04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl
                          rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Feb 2026 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA
        Validity
            Not Before: Feb 10 20:00:43 2026 GMT
            Not After : Feb 17 20:00:43 2026 GMT
        Subject: CN=698b8e6c-b9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:26:73:76:c7:7b:80:e6:26:be:81:b3:ac:
                    eb:72:18:ae:74:f7:95:39:06:80:b6:f6:48:12:dc:
                    8a:6e:b7:29:5f:9a:08:8a:bb:6d:fa:2f:ad:7a:90:
                    15:b5:c5:c6:f8:cb:16:9b:86:a9:d9:b2:23:11:92:
                    d1:0c:39:75:7d:ca:b8:6c:1f:f9:5b:91:d9:a2:62:
                    aa:1a:ac:f9:92:f0:ee:14:ec:74:32:31:2f:83:0c:
                    6b:e0:2d:9e:eb:1e:0b:04:de:86:5c:c1:53:93:53:
                    87:3b:ac:6e:dd:34:d4:75:4d:fd:d9:e0:e3:34:c7:
                    d9:14:8d:fa:08:65:10:71:3b:3f:7f:b7:77:70:c0:
                    37:7a:8c:d8:a1:25:5d:77:91:88:7b:cb:42:64:6e:
                    e7:9d:e5:8e:1b:0c:ea:fb:a4:a9:ee:13:40:25:e6:
                    4e:d9:91:6c:93:74:0b:9b:2d:4f:30:1a:83:2d:6e:
                    57:fe:0f:71:b3:3e:9a:dc:1e:b9:4f:cf:3b:36:41:
                    30:36:66:09:17:1c:52:1e:1c:90:c5:d7:a6:be:8e:
                    71:91:c0:fd:8d:03:b6:21:d6:fa:cc:6a:c0:ed:49:
                    51:45:e8:e9:f1:02:5d:e3:ec:8d:61:87:08:20:08:
                    2f:5c:a7:3b:54:4c:8c:8e:85:36:9f:6d:9d:c6:b6:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:46:0D:0C:1B:2E:25:85:60:85:B2:02:AE:84:8B:46:BC:DC:10
            X509v3 Authority Key Identifier:
                keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:79:6d:9f:2e:6d:33:1d:85:6e:44:e0:8c:8f:aa:a1:dc:a8:
         ff:55:14:d6:26:23:d8:1b:f2:e1:a5:5a:65:de:e5:26:1c:59:
         a2:d3:20:e8:b6:b4:24:d0:84:3e:e5:79:f1:af:b3:83:75:12:
         b6:a6:42:c1:b7:fe:02:6c:09:c6:01:37:d7:fc:07:b6:de:ba:
         53:ce:63:e8:d2:2c:dd:81:76:eb:b0:ef:7c:5c:38:2d:66:28:
         33:ef:f6:33:ef:2c:f2:f5:1d:92:13:2b:23:c6:90:6c:e4:2a:
         5c:e9:03:64:94:b0:8c:a6:ca:44:6e:b4:3e:59:5f:ef:1a:1a:
         b0:95:85:af:f4:ec:ae:b0:fe:68:72:d6:d3:d2:cd:1f:07:69:
         1a:60:f6:88:d0:1b:87:88:9c:f0:da:a3:93:b3:28:25:4c:0f:
         13:c9:1c:09:96:2c:35:a5:7a:ca:96:e7:b6:b7:8e:3b:03:18:
         ee:ff:58:92:d5:fc:cf:eb:e3:0e:3d:70:7a:74:07:a8:13:55:
         f6:35:ff:e0:9c:90:be:55:43:92:fe:57:03:fa:2e:8a:42:39:
         57:84:b8:b6:2b:5e:12:d6:df:82:bb:74:1f:7e:30:2b:65:be:
         41:37:f9:a5:23:26:b1:eb:2f:dd:64:07:46:d0:e4:80:04:2b:
         3e:39:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 20:15:12 2026 by rpki-client