This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
File:                     4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json)
Hash identifier:          shvU5TnCIb9YKP+EhVxoQJVHH7M3tnTRHD90uXQ6VSA=
Subject key identifier:   30:C6:50:33:18:07:2F:E9:0B:B8:57:4F:40:62:F8:34:00:62:CB:4C
Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66
Certificate issuer:       /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
Manifest number:          20
Signing time:             Mon 09 Feb 2026 07:56:28 +0000
Manifest this update:     Mon 09 Feb 2026 07:56:28 +0000
Manifest next update:     Mon 16 Feb 2026 07:56:28 +0000
Files and hashes:         1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: kYPqPK5vjQ9y2EtbWvM9iCG/u7LvVQkLeaqEe9zQzlA=)
                          2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: mc23TLWcQpileDQlx1e7FDTUox4NNol25hSA6IP7+MY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl
                          rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Feb 2026 07:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866
        Validity
            Not Before: Feb  9 07:56:28 2026 GMT
            Not After : Feb 16 07:56:28 2026 GMT
        Subject: CN=6989932c-61ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:39:da:80:af:e0:83:3a:41:ba:5d:aa:97:
                    db:1f:bf:51:3f:de:2f:b0:68:9b:02:8f:6e:12:b7:
                    4e:95:ca:45:01:d1:33:c5:77:f4:f9:26:2b:2b:03:
                    cc:97:ea:d1:57:e7:86:15:19:26:c9:b3:e0:14:8b:
                    31:8e:0d:8a:58:30:b2:d8:c2:50:9d:34:24:68:63:
                    ba:f3:b2:bd:3f:ee:ec:c2:85:5c:61:98:bd:ba:4b:
                    db:53:fa:07:e3:bf:f9:4d:14:ea:50:45:b4:ff:73:
                    b0:88:5c:4f:42:03:7d:2c:c4:e5:47:68:ad:80:8e:
                    66:c9:4f:fb:c2:da:c2:24:25:79:24:1a:f8:0f:82:
                    8c:be:f3:1a:66:09:e9:ff:fe:78:d8:3a:ba:36:3d:
                    66:d4:09:0b:fb:17:1e:df:18:98:8a:0f:28:4c:38:
                    c9:57:92:bb:19:66:02:dd:95:45:db:ae:56:1f:ce:
                    a9:80:5d:4a:0d:12:25:93:93:f1:60:db:5a:4a:22:
                    1a:2e:95:6f:2f:b8:17:da:c7:1e:a5:98:cf:05:3f:
                    fa:42:a7:4d:fc:d4:89:85:80:91:75:19:9b:09:c0:
                    dc:7d:8d:e1:3b:5c:55:e4:96:ab:3b:78:d8:07:96:
                    1c:c4:b9:eb:8d:3a:e1:bf:15:cb:f4:8e:83:71:4b:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:50:33:18:07:2F:E9:0B:B8:57:4F:40:62:F8:34:00:62:CB:4C
            X509v3 Authority Key Identifier:
                keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c2:42:25:34:44:59:0a:9e:d5:91:ac:35:c3:e1:d9:3b:87:
         51:05:1f:e4:66:04:6a:58:c6:af:5a:13:ef:24:8d:4c:d7:34:
         86:66:59:17:34:ba:e0:18:14:4a:05:74:6b:de:ab:20:a2:e0:
         dc:e2:b4:1c:44:51:b9:81:25:7e:30:4b:57:0a:5d:41:59:4f:
         69:0e:fe:10:4e:ee:fc:3b:06:c9:2d:51:52:cc:6a:e2:60:0f:
         7d:f7:0d:b4:0e:81:93:3a:43:c2:e5:68:74:cc:16:f1:e8:f1:
         c7:7c:b0:d3:b1:a9:a5:11:22:bf:7e:55:48:bf:80:60:9d:e8:
         bd:13:39:d8:f3:01:ae:21:27:60:5a:11:5a:ac:48:9a:3e:89:
         49:7d:7a:60:2e:a5:aa:23:8e:de:82:a9:64:bd:4e:92:fe:af:
         a8:c4:bc:5c:9a:37:3e:c7:ef:7f:4e:74:97:0e:0a:56:c0:f7:
         3d:78:77:45:1c:9c:f5:93:38:2a:48:82:86:31:c2:52:0f:77:
         6d:d9:80:36:de:6c:f5:cf:a7:52:33:57:eb:7c:6c:50:3b:0d:
         da:ce:2b:b4:d8:f2:39:c3:ad:57:53:6a:3e:91:cc:1a:c7:b6:
         7b:1b:5c:a8:cd:d0:7e:be:68:47:2e:0d:46:05:5b:c6:40:d5:
         ea:49:9b:a2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0
RjA1MTg2NjAeFw0yNjAyMDkwNzU2MjhaFw0yNjAyMTYwNzU2MjhaMBgxFjAUBgNV
BAMMDTY5ODk5MzJjLTYxY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyMTnagK/ggzpBul2ql9sfv1E/3i+waJsCj24St06VykUB0TPFd/T5JisrA8yX
6tFX54YVGSbJs+AUizGODYpYMLLYwlCdNCRoY7rzsr0/7uzChVxhmL26S9tT+gfj
v/lNFOpQRbT/c7CIXE9CA30sxOVHaK2AjmbJT/vC2sIkJXkkGvgPgoy+8xpmCen/
/njYOro2PWbUCQv7Fx7fGJiKDyhMOMlXkrsZZgLdlUXbrlYfzqmAXUoNEiWTk/Fg
21pKIhoulW8vuBfaxx6lmM8FP/pCp0381ImFgJF1GZsJwNx9jeE7XFXklqs7eNgH
lhzEueuNOuG/Fcv0joNxSxs5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMMZQMxgH
L+kLuFdPQGL4NABiy0wwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5
RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF
REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5
ODVLUnNxcTVnWUU4RkdHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIvCQiU0RFkKntWRrDXD4dk7h1EFH+RmBGpYxq9aE+8kjUzXNIZmWRc0
uuAYFEoFdGveqyCi4NzitBxEUbmBJX4wS1cKXUFZT2kO/hBO7vw7BsktUVLMauJg
D333DbQOgZM6Q8LlaHTMFvHo8cd8sNOxqaURIr9+VUi/gGCd6L0TOdjzAa4hJ2Ba
EVqsSJo+iUl9emAupaojjt6CqWS9TpL+r6jEvFyaNz7H739OdJcOClbA9z14d0Uc
nPWTOCpIgoYxwlIPd23ZgDbebPXPp1IzV+t8bFA7DdrOK7TY8jnDrVdTaj6RzBrH
tnsbXKjN0H6+aEcuDUYFW8ZA1epJm6I=
-----END CERTIFICATE-----
Generated at Tue Feb 10 10:37:22 2026 by rpki-client