This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
File:                     zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json)
Hash identifier:          FW26MvpqCzn8Jl6FUnA5VX/zk5ysNrUgvq9UKdQ5hxs=
Subject key identifier:   BD:5F:21:19:0E:05:DA:32:CF:C0:24:34:EA:9E:C2:8D:76:AF:2D:79
Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3
Certificate issuer:       /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
Manifest number:          55
Signing time:             Wed 11 Feb 2026 06:44:50 +0000
Manifest this update:     Wed 11 Feb 2026 06:44:49 +0000
Manifest next update:     Wed 18 Feb 2026 06:44:49 +0000
Files and hashes:         1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: C1piCH3NZUCIoMc+vxPoXa2MhlOpNtp/ID6iYj5A/+A=)
                          2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=)
                          3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl
                          rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 06:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3
        Validity
            Not Before: Feb 11 06:44:49 2026 GMT
            Not After : Feb 18 06:44:49 2026 GMT
        Subject: CN=698c2562-872d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:df:a6:29:52:e8:e6:36:fe:ff:cf:6b:d9:
                    89:fc:83:47:09:3b:e7:4f:e6:bf:b9:1e:ce:3a:6f:
                    32:1c:2b:90:82:cd:36:6d:bd:9f:92:6a:6b:d8:00:
                    4c:5e:db:d5:e6:21:0a:e1:cd:7e:e0:f0:31:e3:c4:
                    44:d9:27:0a:af:9c:24:2c:df:d7:ff:94:db:b7:21:
                    87:96:85:1d:d0:96:0c:ef:f6:05:e5:9c:79:90:1b:
                    24:af:27:75:7e:de:84:30:8f:b0:75:3a:ef:42:b8:
                    b9:72:8d:1d:8c:0e:bd:77:a6:59:ff:6a:df:ec:83:
                    b0:08:2f:01:c5:00:83:43:56:0c:46:01:07:f2:e5:
                    ab:dc:5a:51:53:e8:79:2b:94:27:79:79:87:bd:0c:
                    22:21:b0:21:5b:5c:8d:5a:00:51:4e:06:e9:18:16:
                    ce:ea:f6:ce:87:b9:e5:1f:04:71:70:1c:47:0f:04:
                    04:21:57:4d:e8:20:7b:86:bf:52:b4:c0:f2:8a:7b:
                    22:a0:86:39:67:24:2b:1b:6f:2c:b9:f4:ed:ac:4d:
                    9a:16:0d:b3:0c:20:d9:61:58:e7:cb:5c:ff:10:4d:
                    df:aa:30:da:fa:b0:04:58:84:53:0c:1c:e6:cf:00:
                    05:b8:2e:38:8f:88:51:6f:7d:e3:b3:e0:cc:7e:fc:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5F:21:19:0E:05:DA:32:CF:C0:24:34:EA:9E:C2:8D:76:AF:2D:79
            X509v3 Authority Key Identifier:
                keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:4e:f8:61:d3:2c:39:e1:df:27:95:27:12:37:cd:e4:8b:
         3b:4a:c5:1a:ef:7d:41:58:60:70:8e:5f:1c:60:82:36:9d:a2:
         42:09:e1:c4:a9:28:a4:8d:cd:37:49:08:3a:33:17:a6:90:db:
         06:34:81:82:e9:65:09:12:10:13:7b:04:39:17:fe:2f:18:69:
         a7:36:9b:0f:0e:0c:4f:58:13:e1:e8:11:98:a4:2f:d0:c7:c0:
         28:6c:38:04:6b:c3:26:af:b8:14:63:35:a6:b7:55:50:34:01:
         8d:0f:37:25:b9:13:f1:e3:05:20:6f:44:2f:58:6a:1c:e2:ad:
         cf:17:25:cd:ec:cd:c1:8d:c7:9f:c8:46:b7:61:81:80:c1:dd:
         8a:15:65:bc:f8:22:e2:7c:df:27:62:3e:ca:e0:89:3e:a5:d6:
         af:36:e7:41:88:2c:d9:12:6a:28:77:e9:74:92:70:b8:55:9d:
         19:ad:60:b8:56:87:7e:e4:6b:be:3e:57:f5:5d:78:d0:16:40:
         6e:aa:e6:06:fb:d5:7c:2f:2f:f0:03:59:79:57:51:d8:51:8e:
         da:68:e3:a4:c0:02:46:b8:2e:60:b6:04:e9:71:b1:7d:c0:c7:
         ed:86:b1:50:55:fe:e0:ea:12:d9:11:92:e7:7c:d9:65:2d:5b:
         8a:b7:aa:64
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx
RDIyRDJGMzAeFw0yNjAyMTEwNjQ0NDlaFw0yNjAyMTgwNjQ0NDlaMBgxFjAUBgNV
BAMMDTY5OGMyNTYyLTg3MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPtN+mKVLo5jb+/89r2Yn8g0cJO+dP5r+5Hs46bzIcK5CCzTZtvZ+SamvYAExe
29XmIQrhzX7g8DHjxETZJwqvnCQs39f/lNu3IYeWhR3Qlgzv9gXlnHmQGySvJ3V+
3oQwj7B1Ou9CuLlyjR2MDr13pln/at/sg7AILwHFAINDVgxGAQfy5avcWlFT6Hkr
lCd5eYe9DCIhsCFbXI1aAFFOBukYFs7q9s6HueUfBHFwHEcPBAQhV03oIHuGv1K0
wPKKeyKghjlnJCsbbyy59O2sTZoWDbMMINlhWOfLXP8QTd+qMNr6sARYhFMMHObP
AAW4LjiPiFFvfeOz4Mx+/CyzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvV8hGQ4F
2jLPwCQ06p7CjXavLXkwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2
RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz
MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB
clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEE7Tvhh0yw54d8nlScSN83kiztKxRrvfUFYYHCOXxxggjadokIJ4cSp
KKSNzTdJCDozF6aQ2wY0gYLpZQkSEBN7BDkX/i8Yaac2mw8ODE9YE+HoEZikL9DH
wChsOARrwyavuBRjNaa3VVA0AY0PNyW5E/HjBSBvRC9Yahzirc8XJc3szcGNx5/I
RrdhgYDB3YoVZbz4IuJ83ydiPsrgiT6l1q8250GILNkSaih36XSScLhVnRmtYLhW
h37ka74+V/VdeNAWQG6q5gb71XwvL/ADWXlXUdhRjtpo46TAAka4LmC2BOlxsX3A
x+2GsVBV/uDqEtkRkud82WUtW4q3qmQ=
-----END CERTIFICATE-----
Generated at Thu Feb 12 01:52:48 2026 by rpki-client