This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
File:                     N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json)
Hash identifier:          yv4L4mAPXk++0d8B07O0v4/x1Kb+xj0kkXr53ngzMFc=
Subject key identifier:   E8:A6:AD:28:FE:4C:31:84:91:EB:EB:12:46:AC:19:03:63:89:B1:CC
Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F
Certificate issuer:       /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
Manifest number:          02A4
Signing time:             Thu 05 Feb 2026 11:10:36 +0000
Manifest this update:     Thu 05 Feb 2026 11:10:35 +0000
Manifest next update:     Thu 12 Feb 2026 11:10:35 +0000
Files and hashes:         1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: TbWsclK0f/VAoA1H9MvYMlVB7a2apmqnFTS53RjxXak=)
                          2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: ENwpRdEuucpLR199wMX1ovh0yufktlvsonosnrFa6n4=)
                          3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: hpkK6ksOTaD7mDbT56x2zJ1eza3vKxeFROPXP1u/0+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 11:10:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F
        Validity
            Not Before: Feb  5 11:10:35 2026 GMT
            Not After : Feb 12 11:10:35 2026 GMT
        Subject: CN=69847aac-fcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:14:4d:a2:a0:11:a6:15:81:f7:bd:21:5f:
                    61:54:72:e5:40:da:36:a2:2d:fa:21:56:e0:60:28:
                    06:6e:55:23:3f:29:ef:e4:cd:1b:92:00:88:b9:d3:
                    45:6f:fa:cd:01:24:76:8e:98:33:0a:36:17:3a:8e:
                    ca:37:28:55:50:13:c6:62:b8:7b:69:a3:fd:06:34:
                    a9:10:56:dd:05:50:85:7c:08:91:13:f4:12:7a:ff:
                    00:c7:89:cb:33:a4:63:e1:68:83:bb:52:00:40:9b:
                    d0:09:70:1c:b0:e2:c9:34:08:49:c9:77:32:fc:86:
                    11:0e:23:cb:a8:5a:3b:35:91:c6:7f:f7:a7:14:e2:
                    2a:7b:78:b5:c4:d1:5f:34:85:51:12:4a:1f:b6:ad:
                    11:52:73:1c:93:be:d7:bb:76:1e:ee:94:00:2d:c9:
                    d3:fd:6b:03:bc:09:07:a6:c9:da:51:c6:32:8d:67:
                    e7:c7:09:f9:d3:f5:fe:61:7e:98:20:f6:53:25:28:
                    cb:e5:22:b6:45:dd:fb:4f:d9:f2:67:cb:6e:88:67:
                    f4:cf:c2:24:b5:f0:02:58:e4:13:93:76:51:9d:d8:
                    8c:a0:c5:d6:b4:ec:92:87:c8:0f:81:b9:ad:03:c3:
                    4f:77:ed:45:87:2f:df:76:e4:a5:bd:60:fc:46:3e:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A6:AD:28:FE:4C:31:84:91:EB:EB:12:46:AC:19:03:63:89:B1:CC
            X509v3 Authority Key Identifier:
                keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b7:59:01:05:7f:9c:2c:32:38:64:99:9f:39:cc:33:1a:60:
         b7:af:42:b9:cf:8d:bb:4c:58:89:ed:8a:bf:bb:e7:b6:8c:cd:
         4f:35:d4:4c:e4:ed:30:dd:91:61:ee:f8:6a:51:86:da:e9:21:
         53:33:a1:8f:91:3a:fc:52:ca:f3:a8:70:04:34:2e:73:78:d9:
         82:21:bf:73:7c:64:e2:d4:7b:fb:8b:c8:38:42:3a:a5:55:85:
         d2:27:1d:30:1a:ac:d5:24:42:40:80:dc:0f:dd:5c:7a:47:34:
         00:1f:30:3b:30:df:3e:a8:59:6b:cb:d5:85:a5:bc:f2:4f:8c:
         df:44:c7:29:e0:c6:a5:84:59:fa:d6:7d:81:b5:5d:16:b2:dd:
         35:19:16:53:13:e7:da:c0:62:2d:40:ae:ec:f1:56:09:eb:77:
         3d:be:05:60:7e:9b:52:f9:b5:96:c5:57:36:d3:85:47:e3:e9:
         63:9a:9d:64:c8:4b:8a:0e:db:ec:91:f6:73:f4:0f:20:3a:f4:
         fb:84:22:ef:15:6b:c7:46:07:a4:1f:1b:65:09:d1:51:12:ad:
         84:48:13:55:03:fd:b4:fe:05:40:49:5f:46:79:81:68:eb:78:
         82:2d:c8:c8:9f:b4:91:d6:8c:93:e4:a2:51:df:f1:6e:0e:34:
         2c:7e:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:30:05 2026 by rpki-client