This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File:                     Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier:          P4CRJyaLhEvf//pBC2Emxt24hc5XA+cyWrqIyfggf1Q=
Subject key identifier:   74:41:50:4F:DF:54:57:FF:A6:44:43:CD:CF:C6:55:8B:4D:2C:54:22
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer:       /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number:          03E9
Signing time:             Mon 09 Feb 2026 00:09:07 +0000
Manifest this update:     Mon 09 Feb 2026 00:09:06 +0000
Manifest next update:     Mon 16 Feb 2026 00:09:06 +0000
Files and hashes:         1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: G537MUmo/OsgNLjB1l+hTyIyy3kcVnwisKjMOVQb+Tg=)
                          2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 00:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
        Validity
            Not Before: Feb  9 00:09:06 2026 GMT
            Not After : Feb 16 00:09:06 2026 GMT
        Subject: CN=698925a3-b9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ae:ce:85:b9:0a:65:06:91:86:2f:dd:d2:df:
                    a4:87:36:ba:3c:05:1e:78:b7:b1:66:f7:5c:e7:44:
                    5f:48:b7:d0:7a:22:51:fe:8c:d5:21:89:d4:f2:7f:
                    37:0f:4f:2e:9b:10:df:46:69:30:9b:0b:f5:a5:2f:
                    25:27:a8:74:22:d3:66:c5:0a:a1:77:65:30:c1:2b:
                    36:0e:ea:15:15:44:00:67:8e:37:85:12:58:27:61:
                    b8:ce:f9:1f:a2:9b:2b:ab:d5:b2:04:1c:be:29:fb:
                    5b:3c:8f:f0:8d:7b:4d:ba:a0:e6:04:b0:8f:7c:59:
                    20:54:2c:9e:71:68:cf:81:ed:56:84:9b:73:84:08:
                    39:e3:85:f4:68:54:98:6c:00:31:f9:4d:0f:e6:74:
                    46:2c:44:14:41:0b:75:38:8f:54:f8:ca:e2:23:97:
                    fa:55:f6:8a:f1:02:89:4e:fb:b0:8a:68:a1:41:7c:
                    17:c2:a9:0e:6c:9b:63:d9:ef:f2:a9:4d:9b:a3:39:
                    1a:d4:70:b1:d6:69:b4:f3:c8:66:ca:94:36:4b:29:
                    84:17:78:7e:7d:60:14:75:5e:35:b8:23:62:fa:05:
                    a0:6f:b0:31:9d:b8:ab:23:6f:5a:73:54:68:b2:50:
                    6f:58:13:09:65:eb:ee:c1:7a:6f:03:b5:03:5a:8e:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:50:4F:DF:54:57:FF:A6:44:43:CD:CF:C6:55:8B:4D:2C:54:22
            X509v3 Authority Key Identifier:
                keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:52:f3:41:9d:aa:20:ae:3e:9d:a4:27:d9:4d:a1:25:0b:
         81:37:1f:7d:5c:fc:36:a0:85:27:de:33:88:1b:df:73:2a:61:
         49:9e:7d:0d:c6:13:5a:fa:26:0a:53:98:66:f2:c4:10:32:d9:
         f4:14:da:d7:7b:d6:ef:29:af:26:48:dc:f4:ba:8e:4d:d7:b1:
         4a:38:cc:ff:c2:b0:b0:5b:37:b1:66:6c:db:da:31:4c:25:0a:
         71:5c:3a:a2:dc:0d:dc:b7:0f:c3:c3:ce:45:49:6f:4b:f3:50:
         f0:8e:a7:56:b1:ae:3e:26:b1:41:5f:2f:00:e8:d3:fc:36:fa:
         97:79:9a:03:66:a1:56:62:3e:53:0f:4e:e0:94:fa:e1:01:dd:
         18:3f:a2:ce:ca:eb:ef:89:3e:2b:fc:5b:a3:ed:6c:3e:50:aa:
         67:11:da:ec:09:ea:cd:62:7f:33:c1:5c:b3:e0:e3:eb:51:10:
         ec:fd:d9:bf:c1:ef:3c:75:98:4d:b7:42:04:94:b4:a7:35:39:
         7c:50:5e:83:55:cd:fa:4c:cf:ca:1b:f5:65:a4:f8:06:2b:7b:
         aa:94:4c:0d:90:d8:3c:b3:5d:27:ce:4a:b8:b3:56:a6:ab:ef:
         23:9b:3d:18:6b:da:0f:9c:69:25:7e:d4:b9:4a:82:df:a6:9d:
         d4:6a:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:13:16 2026 by rpki-client