This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
File:                     LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft (raw, json)
Hash identifier:          sDcH5Mfx8WS80/VY6PbolTfOBvXWnEIBfbVN7Qvws3k=
Subject key identifier:   31:0B:3C:9F:B1:E1:95:65:73:0B:00:7B:BA:15:46:CB:81:83:35:3B
Authority key identifier: 2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25
Certificate issuer:       /CN=A913EC3B/serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
Manifest number:          0252
Signing time:             Sun 15 Feb 2026 01:39:28 +0000
Manifest this update:     Sun 15 Feb 2026 01:39:28 +0000
Manifest next update:     Sun 22 Feb 2026 01:39:28 +0000
Files and hashes:         1: LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl (hash: UoDjIPoX0ggh5xuUUNJ6per4SOCCCm802WEeDrFrOXk=)
                          2: F40EE60A9B5C11EFAF221C2AC4F9AE02.roa (hash: 9OZz5jF3wKw1CoZp9fYy/VeudY7hWDh1XxJPduifOg0=)
                          3: E8B7423A7DE911EDBCFD3082C4F9AE02.roa (hash: SRGoWxChP7e+9DgNFVadV9cBgB/2tWGPBAWl8n31NII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl
                          rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Feb 2026 01:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EC3B, serialNumber=2DDCD05DCE2C58037FE02F95E1A8BFCBD3E0E325
        Validity
            Not Before: Feb 15 01:39:28 2026 GMT
            Not After : Feb 22 01:39:28 2026 GMT
        Subject: CN=699123d0-97f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:6c:1e:8d:50:96:a5:c3:cd:b1:5f:24:cb:
                    3b:a9:b2:7c:8c:5d:0b:eb:49:4a:f2:64:b0:50:58:
                    bb:27:c3:f0:bc:45:84:84:0a:15:c5:4e:ea:ba:26:
                    3a:9a:09:34:4a:8a:48:cb:74:bc:dc:03:2c:13:af:
                    ba:b8:78:bf:7e:aa:33:56:90:7b:7c:4e:cc:9e:dc:
                    a5:7a:57:39:04:12:3d:aa:e0:e7:0b:14:43:c0:af:
                    51:ec:6d:ae:81:16:da:ec:db:0d:19:65:e8:ba:88:
                    b2:09:ff:81:d6:97:93:6f:83:06:62:a1:a2:bc:5e:
                    3d:03:9a:c5:78:4d:2e:52:bc:00:9d:32:4b:07:dc:
                    ea:f1:72:a3:1c:85:49:a2:6e:d3:46:fd:81:c7:85:
                    45:00:a6:3a:d4:66:9c:4b:14:33:73:6c:86:31:2d:
                    7f:d6:37:71:e3:a7:f7:31:95:1e:99:7d:c9:40:94:
                    95:76:37:29:ae:17:cf:7c:b1:cd:cd:c0:1f:5d:44:
                    29:be:bf:49:9e:01:b6:99:8c:cc:d3:41:67:3f:55:
                    ba:db:57:20:40:a8:9b:78:96:b9:04:dc:7c:44:99:
                    6b:e4:33:4b:d3:b7:3c:aa:10:05:04:fa:bc:40:c2:
                    a9:8e:25:02:7d:d6:ba:86:8d:71:b3:25:8b:aa:c9:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0B:3C:9F:B1:E1:95:65:73:0B:00:7B:BA:15:46:CB:81:83:35:3B
            X509v3 Authority Key Identifier:
                keyid:2D:DC:D0:5D:CE:2C:58:03:7F:E0:2F:95:E1:A8:BF:CB:D3:E0:E3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EC3B/DF4A43727DE511ED8781127FC4F9AE02/LdzQXc4sWAN_4C-V4ai_y9Pg4yU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:6a:3c:85:88:28:eb:4e:e7:c0:5a:0d:77:9f:c2:76:7a:
         5a:45:3c:e4:c2:c3:c2:bb:99:9f:67:88:7e:99:65:cb:b8:66:
         48:e7:3a:8f:6a:7d:f1:ac:e3:3a:a6:a7:32:a1:08:73:33:6e:
         bf:f8:08:6b:d6:ed:99:2c:f1:86:32:fe:3e:dd:4b:ee:6d:a4:
         7f:56:56:a2:96:ab:03:35:b9:e9:fe:dc:02:37:75:b8:24:fc:
         e4:5b:9e:46:86:95:ff:57:09:6f:2a:ab:d3:bc:10:c9:39:64:
         6e:27:4b:6f:b4:f2:0f:52:fb:62:63:a4:bc:22:5d:4d:5e:3f:
         91:b1:e5:cd:2a:a7:6d:b8:8e:4f:0f:7d:d7:54:a2:07:f8:12:
         d2:69:65:78:be:af:cb:88:89:f4:ca:e0:5c:e0:0e:10:65:33:
         5c:54:be:e5:58:e0:3f:16:c9:12:2a:b4:4a:23:cc:5a:12:45:
         92:bb:52:bd:c2:a8:5b:ab:35:1b:b7:68:ed:64:f8:71:ec:a5:
         95:7b:af:0a:ac:64:c4:d2:be:2c:de:ad:46:d0:c2:07:44:25:
         94:5a:57:ac:e9:99:3d:15:ed:cc:43:3f:04:1a:4c:24:1c:c1:
         d0:85:92:5c:23:59:7e:f1:78:a6:d3:18:c7:8a:be:1e:e5:0e:
         e3:f1:3e:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VDM0IxMTAvBgNVBAUTKDJERENEMDVEQ0UyQzU4MDM3RkUwMkY5NUUxQThCRkNC
RDNFMEUzMjUwHhcNMjYwMjE1MDEzOTI4WhcNMjYwMjIyMDEzOTI4WjAYMRYwFAYD
VQQDDA02OTkxMjNkMC05N2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbxsHo1QlqXDzbFfJMs7qbJ8jF0L60lK8mSwUFi7J8PwvEWEhAoVxU7quiY6
mgk0SopIy3S83AMsE6+6uHi/fqozVpB7fE7Mntylelc5BBI9quDnCxRDwK9R7G2u
gRba7NsNGWXouoiyCf+B1peTb4MGYqGivF49A5rFeE0uUrwAnTJLB9zq8XKjHIVJ
om7TRv2Bx4VFAKY61GacSxQzc2yGMS1/1jdx46f3MZUemX3JQJSVdjcprhfPfLHN
zcAfXUQpvr9JngG2mYzM00FnP1W621cgQKibeJa5BNx8RJlr5DNL07c8qhAFBPq8
QMKpjiUCfda6ho1xsyWLqsmZlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDELPJ+x
4ZVlcwsAe7oVRsuBgzU7MB8GA1UdIwQYMBaAFC3c0F3OLFgDf+AvleGov8vT4OMl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUMzQi9ERjRBNDM3MjdE
RTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dBTl80Qy1WNGFpX3k5UGc0
eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xkelFYYzRzV0FOXzRDLVY0YWlfeTlQZzR5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUMzQi9ERjRBNDM3MjdERTUxMUVEODc4MTEyN0ZDNEY5QUUwMi9MZHpRWGM0c1dB
Tl80Qy1WNGFpX3k5UGc0eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCx+2o8hYgo607nwFoNd5/CdnpaRTzkwsPCu5mfZ4h+mWXLuGZI5zqP
an3xrOM6pqcyoQhzM26/+Ahr1u2ZLPGGMv4+3UvubaR/VlailqsDNbnp/twCN3W4
JPzkW55GhpX/VwlvKqvTvBDJOWRuJ0tvtPIPUvtiY6S8Il1NXj+RseXNKqdtuI5P
D33XVKIH+BLSaWV4vq/LiIn0yuBc4A4QZTNcVL7lWOA/FskSKrRKI8xaEkWSu1K9
wqhbqzUbt2jtZPhx7KWVe68KrGTE0r4s3q1G0MIHRCWUWles6Zk9Fe3MQz8EGkwk
HMHQhZJcI1l+8Xim0xjHir4e5Q7j8T4J
-----END CERTIFICATE-----
Generated at Mon Feb 16 08:09:20 2026 by rpki-client