This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
File:                     MZdALMHUBvlwfS4iBDY7wNE8Apk.mft (raw, json)
Hash identifier:          mMXFJk4n9SWtMcQn7UBnCiBvqXVMdoEjM++NTvt1hoM=
Subject key identifier:   19:6F:19:10:6B:FB:E7:9F:DA:94:A6:35:B7:2F:03:90:74:20:E7:66
Authority key identifier: 31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99
Certificate issuer:       /CN=A91F479C/serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
Certificate serial:       0422
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
Manifest number:          041E
Signing time:             Mon 02 Feb 2026 23:50:00 +0000
Manifest this update:     Mon 02 Feb 2026 23:49:59 +0000
Manifest next update:     Mon 09 Feb 2026 23:49:59 +0000
Files and hashes:         1: MZdALMHUBvlwfS4iBDY7wNE8Apk.crl (hash: v+UGKG0lUNn5t1I+3njhMdNoRGEn6FjBSANlovWZY8o=)
                          2: 751D2C1A98E611EC849D155FC4F9AE02.roa (hash: CkImo8IsUmsaya0jHXM103+CNWFzYVltZI4TafvBrlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl
                          rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 23:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F479C, serialNumber=3197402CC1D406F9707D2E2204363BC0D13C0299
        Validity
            Not Before: Feb  2 23:49:59 2026 GMT
            Not After : Feb  9 23:49:59 2026 GMT
        Subject: CN=69813828-65af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:30:72:84:fd:1e:2a:42:c5:97:1b:b9:34:
                    60:5c:f8:d6:57:db:99:e7:b2:0c:ff:b3:d5:22:51:
                    0d:05:4a:a3:01:25:f8:71:ad:9b:c7:db:4a:86:69:
                    0e:ae:d2:b0:73:53:8b:df:4d:54:7c:c4:c2:26:b4:
                    e6:7f:44:a9:73:49:51:f2:e0:4d:36:e9:28:99:d8:
                    8d:b9:02:14:1f:55:52:56:75:ae:1a:42:59:8d:11:
                    c5:38:b9:00:2b:3e:ee:c2:f4:d0:38:ad:f1:a9:86:
                    ea:f3:26:c8:21:76:75:55:c0:6d:a6:ce:e6:46:f2:
                    07:c5:8b:cb:8e:1a:e7:72:43:74:33:d2:7b:01:bc:
                    34:23:c5:d1:d1:54:2f:a2:73:c1:db:c6:f7:16:11:
                    1a:16:19:27:2b:5c:87:d7:8c:bf:aa:a4:f2:44:02:
                    95:cd:01:75:8e:72:78:44:cd:3f:7a:85:61:a6:90:
                    7e:00:e2:9c:a9:22:c1:b8:f4:62:74:7a:83:1a:94:
                    47:49:d9:58:1b:02:a0:45:6d:46:be:6d:cc:e3:f2:
                    95:f9:f8:41:91:5b:9d:de:0e:cc:f1:d8:4d:45:a5:
                    e5:c6:4c:99:59:72:3f:ee:4a:c9:e5:97:63:02:2d:
                    4b:fb:72:1f:9c:2d:ac:01:47:61:c9:f4:dd:51:e7:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:19:10:6B:FB:E7:9F:DA:94:A6:35:B7:2F:03:90:74:20:E7:66
            X509v3 Authority Key Identifier:
                keyid:31:97:40:2C:C1:D4:06:F9:70:7D:2E:22:04:36:3B:C0:D1:3C:02:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MZdALMHUBvlwfS4iBDY7wNE8Apk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F479C/32BF850E98E411EC937D615CC4F9AE02/MZdALMHUBvlwfS4iBDY7wNE8Apk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:b0:f2:6c:64:e9:8c:a1:3a:b0:cc:fb:32:39:45:a1:c4:
         7c:70:50:81:e7:47:22:87:df:51:c0:79:29:bc:d4:ff:ab:a8:
         ad:5b:e9:c8:0c:92:3f:38:90:e4:96:47:c0:3a:77:20:67:7c:
         72:6b:f0:0e:99:62:b2:22:29:60:e3:da:ff:e6:75:ac:a5:87:
         23:bb:32:de:91:ec:53:df:69:9b:d7:66:b4:fa:9e:7c:c3:21:
         9c:19:05:09:81:1a:73:e0:97:54:87:71:e9:81:50:7b:57:87:
         b8:d8:4b:20:34:90:a3:03:7a:0f:43:a4:06:f8:1d:6c:cb:6e:
         10:0a:62:c3:8c:13:b0:3a:b3:c3:47:04:af:17:fb:cb:71:12:
         72:eb:a5:13:72:b3:6b:70:8a:ba:28:19:b3:92:dc:3d:ff:bc:
         b7:f5:31:63:d6:56:88:58:38:61:ff:57:af:0a:7e:2f:c1:5b:
         5e:eb:cb:99:ad:f4:a1:e8:cc:7d:f1:b6:7a:63:68:be:59:fb:
         15:45:54:cc:03:0e:8f:0a:56:65:05:99:30:e1:88:af:ac:3c:
         28:10:78:c1:83:47:4a:bc:02:ce:44:88:58:06:6b:05:2a:4f:
         9a:6d:f4:69:d8:45:f1:eb:bf:05:ad:2c:80:eb:f3:8d:10:cb:
         7e:11:bd:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ3OUMxMTAvBgNVBAUTKDMxOTc0MDJDQzFENDA2Rjk3MDdEMkUyMjA0MzYzQkMw
RDEzQzAyOTkwHhcNMjYwMjAyMjM0OTU5WhcNMjYwMjA5MjM0OTU5WjAYMRYwFAYD
VQQDDA02OTgxMzgyOC02NWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApfIwcoT9HipCxZcbuTRgXPjWV9uZ57IM/7PVIlENBUqjASX4ca2bx9tKhmkO
rtKwc1OL301UfMTCJrTmf0Spc0lR8uBNNukomdiNuQIUH1VSVnWuGkJZjRHFOLkA
Kz7uwvTQOK3xqYbq8ybIIXZ1VcBtps7mRvIHxYvLjhrnckN0M9J7Abw0I8XR0VQv
onPB28b3FhEaFhknK1yH14y/qqTyRAKVzQF1jnJ4RM0/eoVhppB+AOKcqSLBuPRi
dHqDGpRHSdlYGwKgRW1Gvm3M4/KV+fhBkVud3g7M8dhNRaXlxkyZWXI/7krJ5Zdj
Ai1L+3IfnC2sAUdhyfTdUefZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlvGRBr
++ef2pSmNbcvA5B0IOdmMB8GA1UdIwQYMBaAFDGXQCzB1Ab5cH0uIgQ2O8DRPAKZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDc5Qy8zMkJGODUwRTk4
RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2bHdmUzRpQkRZN3dORThB
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01aZEFMTUhVQnZsd2ZTNGlCRFk3d05FOEFway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDc5Qy8zMkJGODUwRTk4RTQxMUVDOTM3RDYxNUNDNEY5QUUwMi9NWmRBTE1IVUJ2
bHdmUzRpQkRZN3dORThBcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8r7DybGTpjKE6sMz7MjlFocR8cFCB50cih99RwHkpvNT/q6itW+nI
DJI/OJDklkfAOncgZ3xya/AOmWKyIilg49r/5nWspYcjuzLekexT32mb12a0+p58
wyGcGQUJgRpz4JdUh3HpgVB7V4e42EsgNJCjA3oPQ6QG+B1sy24QCmLDjBOwOrPD
RwSvF/vLcRJy66UTcrNrcIq6KBmzktw9/7y39TFj1laIWDhh/1evCn4vwVte68uZ
rfSh6Mx98bZ6Y2i+WfsVRVTMAw6PClZlBZkw4YivrDwoEHjBg0dKvALORIhYBmsF
Kk+abfRp2EXx678FrSyA6/ONEMt+Eb1j
-----END CERTIFICATE-----
Generated at Wed Feb 4 22:17:55 2026 by rpki-client