This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
File:                     -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json)
Hash identifier:          PnX/eE/878mMZgpMG3b58wRS1DSOfhjoNCR0WCQ+TKc=
Subject key identifier:   DD:7C:41:42:44:6D:C7:E5:90:E6:8F:D0:79:1A:59:ED:63:6C:66:24
Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D
Certificate issuer:       /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
Certificate serial:       0B5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
Manifest number:          0B34
Signing time:             Fri 06 Feb 2026 19:04:30 +0000
Manifest this update:     Fri 06 Feb 2026 19:04:30 +0000
Manifest next update:     Fri 13 Feb 2026 19:04:30 +0000
Files and hashes:         1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: eFGBFMTzeQZoje+b2owgNZPJCwO7eYIfRdeD2FPes2I=)
                          2: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=)
                          3: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Feb 2026 19:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2906 (0xb5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D
        Validity
            Not Before: Feb  6 19:04:30 2026 GMT
            Not After : Feb 13 19:04:30 2026 GMT
        Subject: CN=69863b3e-f4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:f2:26:c3:8e:3c:ab:c2:95:f3:76:c7:0a:
                    d1:8c:e5:47:36:65:ef:cf:cd:b5:39:06:ee:b5:fa:
                    6b:71:46:6b:a2:dd:5f:f8:c1:33:cb:02:b5:1d:a0:
                    56:e8:d6:4a:d5:6d:c0:85:18:d5:0e:bf:ac:63:95:
                    ca:9f:a8:43:99:41:09:18:a0:6e:b5:12:0b:85:0b:
                    05:7c:7b:f2:83:4c:dd:3c:0c:be:a4:56:f2:f9:3f:
                    ac:cb:b3:f5:60:31:af:36:9d:f1:76:10:1d:e0:a8:
                    00:84:a6:ad:be:39:88:dc:75:52:5e:5f:e0:24:46:
                    8f:3a:61:58:5c:ff:23:45:09:d3:91:46:ef:df:6c:
                    0a:cb:6d:d8:3f:b6:a8:bb:1a:03:24:4d:97:fc:4b:
                    d7:47:7b:38:88:4c:42:1a:8c:d4:e0:59:0d:a4:68:
                    8e:8e:1a:e6:8b:be:05:aa:60:3c:3e:18:76:51:eb:
                    cd:d0:70:1b:4e:30:b1:12:cc:6d:97:d6:31:9f:47:
                    fa:11:df:6d:60:88:3a:5d:1c:bc:a6:d4:29:69:b5:
                    05:ca:90:8c:c7:a6:00:84:85:16:40:2b:b9:a9:9e:
                    d2:53:0a:6b:4c:40:f7:31:b2:a8:fe:bc:00:89:98:
                    2d:fa:85:83:b5:f3:58:eb:0a:22:0a:38:83:af:52:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7C:41:42:44:6D:C7:E5:90:E6:8F:D0:79:1A:59:ED:63:6C:66:24
            X509v3 Authority Key Identifier:
                keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4b:df:a5:5d:b5:aa:89:ed:d8:50:cc:8e:f1:d2:42:8e:da:
         16:10:f8:66:08:54:44:d1:52:ac:4c:26:f0:61:2c:d8:56:46:
         f7:f7:53:f0:ea:2e:17:f9:eb:8a:ec:9a:37:b6:a0:9c:d6:6e:
         f9:60:2a:e9:b1:c8:c5:12:ff:09:0a:b9:1e:a7:fc:35:df:04:
         88:74:df:e5:e0:6e:5e:1a:ac:8a:fc:92:92:69:4e:db:a1:a3:
         ac:90:78:63:1d:55:09:28:94:bc:2a:9d:89:1d:cc:f1:3a:37:
         b3:53:42:46:e4:3d:17:2a:7e:2d:93:3c:3f:32:7e:21:62:a7:
         ae:4f:f3:52:11:82:ad:5f:cf:70:b5:99:c0:3f:10:40:85:f0:
         30:42:42:c9:21:8f:63:83:d0:44:52:33:fb:27:97:0a:22:f4:
         14:f1:d3:69:cb:7e:0a:9d:30:cc:11:28:46:09:26:4f:fe:2a:
         2d:a5:a3:5b:c4:41:84:ce:a1:e3:87:fa:9f:2b:a8:e4:e6:83:
         2e:a5:4e:92:f0:95:70:3d:cd:1e:aa:62:3e:21:f4:ba:d3:81:
         0b:e2:7f:34:e2:49:53:91:81:49:d9:9a:41:0f:6a:fa:26:b9:
         a7:d7:37:3f:3c:63:b8:01:81:7a:cf:46:b8:84:16:68:d4:90:
         b8:bd:2c:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy
M0Y1NUNDOEQwHhcNMjYwMjA2MTkwNDMwWhcNMjYwMjEzMTkwNDMwWjAYMRYwFAYD
VQQDDA02OTg2M2IzZS1mNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ovyJsOOPKvClfN2xwrRjOVHNmXvz821OQbutfprcUZrot1f+MEzywK1HaBW
6NZK1W3AhRjVDr+sY5XKn6hDmUEJGKButRILhQsFfHvyg0zdPAy+pFby+T+sy7P1
YDGvNp3xdhAd4KgAhKatvjmI3HVSXl/gJEaPOmFYXP8jRQnTkUbv32wKy23YP7ao
uxoDJE2X/EvXR3s4iExCGozU4FkNpGiOjhrmi74FqmA8Phh2UevN0HAbTjCxEsxt
l9Yxn0f6Ed9tYIg6XRy8ptQpabUFypCMx6YAhIUWQCu5qZ7SUwprTED3MbKo/rwA
iZgt+oWDtfNY6woiCjiDr1IgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN18QUJE
bcflkOaP0HkaWe1jbGYkMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5
MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv
N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0S9+lXbWqie3YUMyO8dJCjtoWEPhmCFRE0VKsTCbwYSzYVkb391Pw
6i4X+euK7Jo3tqCc1m75YCrpscjFEv8JCrkep/w13wSIdN/l4G5eGqyK/JKSaU7b
oaOskHhjHVUJKJS8Kp2JHczxOjezU0JG5D0XKn4tkzw/Mn4hYqeuT/NSEYKtX89w
tZnAPxBAhfAwQkLJIY9jg9BEUjP7J5cKIvQU8dNpy34KnTDMEShGCSZP/iotpaNb
xEGEzqHjh/qfK6jk5oMupU6S8JVwPc0eqmI+IfS604EL4n804klTkYFJ2ZpBD2r6
Jrmn1zc/PGO4AYF6z0a4hBZo1JC4vSyh
-----END CERTIFICATE-----
Generated at Sun Feb 8 13:12:59 2026 by rpki-client