This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File:                     GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier:          a5quGg7nnhPl0UmKf8ePSAPP2rfn1wfnkJMgspIUGOo=
Subject key identifier:   DC:DB:AD:5B:BD:20:47:DB:FE:30:DB:71:2B:08:A1:0B:10:54:34:92
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer:       /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number:          60
Signing time:             Wed 11 Feb 2026 06:38:10 +0000
Manifest this update:     Wed 11 Feb 2026 06:38:10 +0000
Manifest next update:     Wed 18 Feb 2026 06:38:10 +0000
Files and hashes:         1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: mKLLkEEqKlPDKDkTcU8d+SloLZ9c7Ihs8DSFJ5mmD4Q=)
                          2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: ni8ytUAWwdbtGIc+iXlEFG+5N/RDCdFk/BOjShyc/2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
                          rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
        Validity
            Not Before: Feb 11 06:38:10 2026 GMT
            Not After : Feb 18 06:38:10 2026 GMT
        Subject: CN=698c23d2-ca4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:01:73:65:a8:ed:96:59:fd:d2:59:62:d5:
                    86:c9:70:2f:04:ff:70:cc:08:7b:d9:9a:be:ba:25:
                    e6:39:f3:8d:f2:8e:84:e1:21:c2:7a:29:3b:96:9b:
                    2b:6d:ae:86:de:4d:71:10:77:51:1b:23:c3:77:57:
                    c9:cb:0f:dd:f7:4d:5c:3e:a8:fb:c5:f1:5a:00:b4:
                    c3:21:3b:2f:08:65:08:79:ab:9c:3c:77:48:79:18:
                    7d:b5:e2:6f:c3:88:e3:bb:d9:4e:26:0f:20:7b:aa:
                    38:00:f0:33:e4:6a:8d:63:0e:8a:3e:6a:19:9d:5a:
                    a3:ce:a4:7e:c8:22:29:0b:90:2a:f5:3d:e9:c2:9c:
                    76:c3:ea:3a:f8:18:a1:ac:77:c7:1e:26:ee:68:c5:
                    a5:e2:00:f9:ee:31:e3:c1:ef:2e:fa:8e:44:33:10:
                    4f:7b:25:93:c8:62:ad:a0:ac:bf:ac:d5:af:f3:d9:
                    e6:c7:c9:e9:d7:b1:17:c5:01:ba:ca:97:c4:51:e6:
                    0f:f6:a7:36:bb:6d:d8:06:79:e2:02:59:06:7f:eb:
                    21:dd:39:a6:12:d3:f6:f0:ad:ec:94:70:e3:73:84:
                    e9:c8:05:88:6f:46:11:84:df:c7:95:e8:bd:e9:f0:
                    33:5a:af:c4:b0:67:41:32:00:c8:9b:19:c5:bc:98:
                    02:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:AD:5B:BD:20:47:DB:FE:30:DB:71:2B:08:A1:0B:10:54:34:92
            X509v3 Authority Key Identifier:
                keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:7a:11:ee:62:5c:3b:3f:48:d0:df:5c:0e:a3:b8:9d:e8:
         1e:bf:5f:db:f2:cd:d0:15:bb:0e:f0:31:b4:36:c0:4f:ad:45:
         88:88:6c:b4:0a:b7:11:d4:cb:88:2b:65:95:67:aa:ab:0c:c9:
         2e:17:73:17:d2:54:b8:95:1c:b2:e9:6e:6f:5f:72:91:b1:4a:
         01:c3:ce:4f:21:a0:01:9b:8f:81:59:7d:0d:03:d1:a6:2c:ca:
         37:f4:94:36:b3:3f:75:e9:de:33:db:29:51:0c:9c:fb:fc:25:
         54:84:85:d9:c7:99:18:9d:b3:ef:2b:46:82:d4:19:c1:24:42:
         c5:e6:f7:33:ec:f2:ca:ba:35:81:e6:40:a2:fe:a6:5d:5a:61:
         78:3c:55:18:f9:a2:1a:89:84:cc:d1:0f:8d:fb:ff:65:32:8b:
         55:15:b1:95:be:b2:e5:33:4f:33:04:1a:a9:5c:2d:ac:05:cd:
         43:d7:af:81:93:73:99:54:4b:d0:c0:35:b8:46:ab:ed:8f:14:
         22:7f:46:39:fc:2b:e6:49:31:c9:28:f1:29:d7:6d:7d:aa:4a:
         04:c6:72:b6:6c:a3:97:a1:a8:45:55:17:ee:71:57:05:c2:16:
         84:8c:13:c4:05:df:db:3c:94:ef:c1:7e:1b:ee:a8:71:fb:4c:
         00:bb:db:c1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MEJERTExMC8GA1UEBRMoMTlGMkE0NkUyQzQ5MDM4NzUzNUU5NDVGNkIxNDg2NzAw
MDY4NTc2MTAeFw0yNjAyMTEwNjM4MTBaFw0yNjAyMTgwNjM4MTBaMBgxFjAUBgNV
BAMMDTY5OGMyM2QyLWNhNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpmQFzZajtlln90lli1YbJcC8E/3DMCHvZmr66JeY5843yjoThIcJ6KTuWmytt
robeTXEQd1EbI8N3V8nLD933TVw+qPvF8VoAtMMhOy8IZQh5q5w8d0h5GH214m/D
iOO72U4mDyB7qjgA8DPkao1jDoo+ahmdWqPOpH7IIikLkCr1PenCnHbD6jr4GKGs
d8ceJu5oxaXiAPnuMePB7y76jkQzEE97JZPIYq2grL+s1a/z2ebHyenXsRfFAbrK
l8RR5g/2pza7bdgGeeICWQZ/6yHdOaYS0/bwreyUcONzhOnIBYhvRhGE38eV6L3p
8DNar8SwZ0EyAMibGcW8mALHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3NutW70g
R9v+MNtxKwihCxBUNJIwHwYDVR0jBBgwFoAUGfKkbixJA4dTXpRfaxSGcABoV2Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQkRFLzI5RDFFNzZDNzRC
MzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1Yy
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2ZLa2JpeEpBNGRUWHBSZmF4U0djQUJvVjJFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
QkRFLzI5RDFFNzZDNzRCMzExRjBBRTI5NTIxQkM0RjlBRTAyL0dmS2tiaXhKQTRk
VFhwUmZheFNHY0FCb1YyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGmxehHuYlw7P0jQ31wOo7id6B6/X9vyzdAVuw7wMbQ2wE+tRYiIbLQK
txHUy4grZZVnqqsMyS4XcxfSVLiVHLLpbm9fcpGxSgHDzk8hoAGbj4FZfQ0D0aYs
yjf0lDazP3Xp3jPbKVEMnPv8JVSEhdnHmRids+8rRoLUGcEkQsXm9zPs8sq6NYHm
QKL+pl1aYXg8VRj5ohqJhMzRD437/2Uyi1UVsZW+suUzTzMEGqlcLawFzUPXr4GT
c5lUS9DANbhGq+2PFCJ/Rjn8K+ZJMcko8SnXbX2qSgTGcrZso5ehqEVVF+5xVwXC
FoSME8QF39s8lO/BfhvuqHH7TAC728E=
-----END CERTIFICATE-----
Generated at Wed Feb 11 11:54:58 2026 by rpki-client