This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
File:                     KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json)
Hash identifier:          38tNfJTqZ39FHrsjARMsEENNLuROEocB2m+DutKHatw=
Subject key identifier:   F1:A0:87:31:A5:FD:51:A0:E1:F4:87:F5:00:C1:3F:BA:6F:34:B8:4C
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Certificate issuer:       /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial:       0F29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
Manifest number:          0ED9
Signing time:             Sat 14 Feb 2026 17:30:36 +0000
Manifest this update:     Sat 14 Feb 2026 17:30:36 +0000
Manifest next update:     Sat 21 Feb 2026 17:30:36 +0000
Files and hashes:         1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: r5dh4ovRYwOse8ePs4/kBzuGpTpE9iub2XUW5oh3mtY=)
                          2: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: DsQ8k2r18shy7gg+hUBL2SO8HUEFyNSKHtxB+WEbNG4=)
                          3: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: hPUFimj9BE3+BwwQ7RyTBe4Kb4UDlyO5v1n1M99BRDE=)
                          4: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: h1piDIbFbu2D+AHr+FNeuVa8V0LAf8dUKVxZfkw96aI=)
                          5: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: uul2CdaEoquPtSKMLPmrjkbQbRp1WUkF6rtkLx9zg64=)
                          6: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: wbUo+m2N2pVjNOlqoJ9Ve/RDUUkR0+GFezmtrgOfh+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
                          rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Feb 2026 17:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3881 (0xf29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
        Validity
            Not Before: Feb 14 17:30:36 2026 GMT
            Not After : Feb 21 17:30:36 2026 GMT
        Subject: CN=6990b13c-cfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c8:33:30:33:14:32:2a:ff:b6:06:f0:e7:ac:
                    14:10:12:79:d0:0b:6b:19:eb:68:24:a8:8b:cb:32:
                    5c:8e:b2:93:38:4e:29:e8:78:f9:dd:c5:62:fe:26:
                    ca:14:60:e7:f8:71:16:1d:7c:88:ec:5d:fb:89:8d:
                    69:38:8b:df:43:8f:a8:4e:e4:3a:14:e5:79:5f:82:
                    5f:f6:dc:f2:ac:d8:dc:d1:43:6d:b3:54:09:a5:d3:
                    64:bd:c8:e1:73:24:a9:13:bb:d4:e2:0a:5d:e3:52:
                    99:0b:5c:63:88:d1:34:2c:af:32:6d:27:31:15:83:
                    c0:e7:c6:3d:b0:2c:96:9e:e7:a6:99:77:e0:65:5a:
                    ea:bc:64:0b:29:b8:38:81:83:04:51:d7:43:71:4a:
                    40:98:ee:aa:8a:19:0a:35:12:67:f5:38:09:67:33:
                    03:3a:0a:66:75:7c:b0:66:26:a1:9e:84:4c:f8:99:
                    ac:d3:77:74:f3:bc:eb:63:e6:68:48:fe:bb:e3:ef:
                    8b:8c:50:52:ed:95:e3:68:1d:0b:2c:f4:06:9a:b4:
                    6d:47:f5:ae:69:31:f5:29:f3:e3:dc:d9:38:8f:a7:
                    e6:e2:f3:b5:e7:d4:91:f1:78:b1:a9:32:f7:81:e8:
                    a3:a5:a7:ca:af:fd:0c:11:d3:17:ec:65:57:d8:c7:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:87:31:A5:FD:51:A0:E1:F4:87:F5:00:C1:3F:BA:6F:34:B8:4C
            X509v3 Authority Key Identifier:
                keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:18:6b:a8:35:c7:0a:c9:da:e9:83:ea:f2:66:2d:38:b2:
         c8:72:1a:1c:66:ee:e2:0a:29:4c:8c:47:11:31:74:05:84:aa:
         4e:0a:a7:a0:1b:0e:b0:fe:1d:0c:76:d3:d1:98:8e:6c:ee:9c:
         fa:10:59:c0:6e:85:bf:3d:0f:42:b8:17:a5:15:58:6f:ae:ee:
         f8:5a:90:cf:03:02:f4:19:f5:61:75:6b:41:7e:52:96:da:98:
         4a:26:9e:32:d3:68:6b:3d:06:01:e7:09:1d:66:b6:05:53:7e:
         55:ee:47:19:4a:11:d1:d2:a0:13:74:86:70:88:6b:dd:04:88:
         30:29:93:20:e7:bd:1e:fb:4a:88:d2:49:49:29:93:95:11:5a:
         aa:98:8d:18:49:45:e3:62:24:0f:5f:c7:0f:75:47:ef:8e:b6:
         19:72:36:22:9e:5a:3c:36:12:1d:69:b4:69:65:3f:df:63:3e:
         41:29:1d:00:14:95:52:ef:9e:e9:70:ea:09:06:7b:a1:67:2c:
         40:e4:84:78:36:54:c6:32:7a:ea:24:92:fb:85:fb:59:10:02:
         11:5d:9f:bd:ba:01:0c:ca:fe:0a:24:f9:e4:d2:cb:8e:09:d9:
         47:d8:6f:7e:f8:7f:87:9d:9a:d7:c0:aa:5e:dc:7c:18:4b:05:
         5c:f3:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 23:41:07 2026 by rpki-client