This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
File:                     lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft (raw, json)
Hash identifier:          It6w562Co43PLL3UkM3ojg3aE+2SUZjhR6j8xGpzDV8=
Subject key identifier:   6D:9B:D6:1F:FC:D3:CC:7D:39:52:79:9B:4E:96:FD:33:8D:E8:9A:E1
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Certificate issuer:       /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
Manifest number:          01D0
Signing time:             Wed 11 Feb 2026 02:35:03 +0000
Manifest this update:     Wed 11 Feb 2026 02:35:03 +0000
Manifest next update:     Wed 18 Feb 2026 02:35:03 +0000
Files and hashes:         1: lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl (hash: 4hwNzLKjBf7wgx/OAosKgRybuNNdDegABGTMijpLjbI=)
                          2: 0A90C738CFEE11F09D36C783C4F9AE02.roa (hash: ZblMFf9O0YNvkXXCXIU9yPZ+T5g15Kc4bEkyX6PFx5M=)
                          3: A155911C4BCA11EEBC8C8B82C4F9AE02.roa (hash: LiaqpSK92cBpFsHl2uGwMK05eZl8TgnXPG5GLO/r81A=)
                          4: 2B1FE092CFEE11F082935D16C4F9AE02.roa (hash: sEgmp2IWSRikNLP+LIqA6zVpui1lVKU13kPuTPci6uI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
                          rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Feb 2026 02:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
        Validity
            Not Before: Feb 11 02:35:03 2026 GMT
            Not After : Feb 18 02:35:03 2026 GMT
        Subject: CN=698bead7-34fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:60:11:a1:48:32:7d:50:41:ad:f6:5f:05:
                    e2:da:d5:c8:fe:0d:5c:63:85:57:83:e2:7a:87:7f:
                    b0:e7:37:5b:eb:07:3b:28:1a:0f:bd:2b:af:29:23:
                    bd:3e:9e:3b:05:5c:15:04:c7:c1:1d:20:5e:25:62:
                    a1:84:51:a3:92:96:93:51:4b:30:95:21:fa:0a:9e:
                    43:88:62:1f:f5:80:c5:b3:43:d6:68:9a:e5:12:51:
                    6c:c3:0b:d5:17:d1:14:59:07:37:e0:79:1b:0d:9f:
                    e1:a4:9c:53:08:00:c9:01:29:bf:a5:c3:df:2b:9e:
                    ba:3d:e9:96:ef:25:af:3d:87:80:d9:a8:40:1a:c7:
                    6d:cd:4c:90:ea:45:38:4f:c4:65:f2:40:76:f0:88:
                    3a:a3:f5:3b:57:f8:d0:19:e8:93:d3:b0:08:5d:34:
                    37:b4:91:31:f2:eb:da:ed:e7:8c:d4:f1:84:0f:58:
                    ba:b3:37:41:15:17:0d:b5:1e:6b:64:26:cb:c2:f7:
                    c5:15:72:15:fc:ce:95:ce:05:f6:fb:7c:fe:a1:b9:
                    69:10:d9:cb:02:1b:8b:a6:08:c5:db:66:f0:dd:c3:
                    3f:19:bc:e3:a0:0f:c2:ee:e7:bf:55:6f:11:be:f0:
                    57:c0:0d:26:7e:5f:e9:ff:81:e3:70:65:d7:79:ab:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:D6:1F:FC:D3:CC:7D:39:52:79:9B:4E:96:FD:33:8D:E8:9A:E1
            X509v3 Authority Key Identifier:
                keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:ac:8a:f8:a4:d9:61:19:0d:01:59:a8:bf:96:b4:91:8a:
         6d:d5:ab:3c:67:78:a5:30:78:68:6f:92:cf:f4:e8:50:30:ab:
         92:52:06:49:0a:32:3b:aa:55:1b:af:3d:52:76:73:95:43:74:
         de:66:7d:5c:ad:7e:df:59:cb:63:72:30:b0:92:d7:8d:16:35:
         28:c9:e9:c2:b4:d3:f5:be:6d:38:00:8d:b7:ae:62:60:9c:ff:
         de:52:1d:71:ea:a7:d1:9b:e0:d9:05:a8:7c:ba:5b:48:9a:92:
         80:65:52:ec:64:6c:d9:e7:97:85:e6:8f:b7:61:eb:27:23:74:
         76:cb:26:57:d1:24:be:20:4c:af:28:f4:de:71:6a:0f:45:cb:
         ad:74:74:86:9e:5a:56:b3:25:7a:0c:c5:05:58:e9:26:c7:c2:
         e7:6d:3b:a7:a3:c1:d1:5a:df:e3:8a:5b:e2:3e:cd:6e:97:1b:
         0f:e4:28:06:ba:13:e3:e3:46:0c:8b:ab:c9:e1:0f:fd:c2:e6:
         5d:30:4c:64:4e:ad:0f:13:fe:32:13:14:45:9f:78:9c:ae:71:
         21:88:f8:d8:1c:80:de:41:ef:c7:42:ae:48:9f:1e:00:62:76:
         ca:8a:b0:f6:a0:f9:2f:3b:cc:11:38:c3:89:3d:4a:97:b0:50:
         f8:e5:d3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 20:15:12 2026 by rpki-client