This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
File:                     TzLs_4zUbD7AP6deEAj0qpoM-JM.mft (raw, json)
Hash identifier:          FUDCSib+Y/jyA+Wv7TltQDesz1//hQwSO4M+s3e4B8c=
Subject key identifier:   74:71:E9:D4:C1:AC:A6:82:06:BB:D5:A4:AE:2A:D0:29:CF:F2:EF:CE
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Certificate issuer:       /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
Manifest number:          0B7C
Signing time:             Sat 24 Jan 2026 18:41:25 +0000
Manifest this update:     Sat 24 Jan 2026 18:41:25 +0000
Manifest next update:     Sat 31 Jan 2026 18:41:25 +0000
Files and hashes:         1: TzLs_4zUbD7AP6deEAj0qpoM-JM.crl (hash: xYU0TeuV6VhhB9QLqSGADNeiz6vPJ5ywefV+NOc94f8=)
                          2: B34C91C4B14311EF8479AA21C4F9AE02.roa (hash: eH7lKxC1fSAwRwADOegzWnR0eN8xp2QzqcA2Q9e7qkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
                          rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 18:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91522E0, serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
        Validity
            Not Before: Jan 24 18:41:25 2026 GMT
            Not After : Jan 31 18:41:25 2026 GMT
        Subject: CN=69751255-b6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:25:fd:b8:3a:e7:5c:f2:6f:a6:fe:42:0f:
                    49:04:a7:11:24:16:5d:d2:92:20:f9:25:cb:54:6e:
                    a3:d5:79:0d:f5:b1:3a:25:48:92:d0:62:93:05:d7:
                    80:50:60:20:bd:d5:f5:aa:61:6b:4e:ca:48:67:65:
                    83:10:bc:07:19:6b:ff:59:33:77:35:f2:3b:b6:ed:
                    17:7b:a7:86:1b:fc:8a:05:7d:39:22:46:dc:48:67:
                    7e:02:b6:50:67:1e:93:16:15:e3:20:04:4a:ae:0c:
                    db:2d:c2:33:a1:fe:42:6d:44:bc:95:53:44:a9:f0:
                    af:cc:de:05:59:e3:9e:79:c7:d8:9d:61:76:b4:19:
                    58:97:25:c8:21:38:9b:64:90:92:da:47:e8:f0:eb:
                    32:7b:bb:57:02:86:6c:7f:df:ec:27:4a:8b:2e:ad:
                    3d:74:c5:d6:af:4c:d4:a0:47:3e:1a:64:38:8a:e4:
                    5d:88:62:05:3f:99:13:c2:ad:14:7a:a2:9d:d4:af:
                    c0:f0:4e:ec:92:1c:b4:1b:f2:2d:16:47:e3:29:87:
                    27:5b:61:f4:83:bc:ea:6b:33:81:ad:25:ed:5f:fe:
                    d1:89:bd:f3:fd:08:52:cf:c9:3f:48:88:f1:d9:34:
                    f6:79:0b:5d:76:ae:f4:71:e8:a4:82:33:83:93:7f:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:71:E9:D4:C1:AC:A6:82:06:BB:D5:A4:AE:2A:D0:29:CF:F2:EF:CE
            X509v3 Authority Key Identifier:
                keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:e5:48:0a:b2:a7:40:a0:77:89:ee:18:bc:fc:06:5f:f8:
         91:f7:12:0b:0a:dc:1f:ca:1b:63:de:e6:40:c5:20:d9:ee:50:
         65:ab:49:26:8e:a0:de:b3:94:c5:c2:92:ae:39:3d:f7:5a:8d:
         d8:fb:90:3d:25:85:4c:2c:54:95:9b:ee:92:44:e7:f5:6b:0a:
         cf:69:06:b8:80:e0:95:d3:62:1b:68:47:65:dc:ba:9d:6e:93:
         c5:4a:c6:6a:77:93:68:1e:a1:6b:c6:b5:38:f2:6e:66:08:66:
         0c:7b:dc:74:ef:ce:d0:68:ac:42:80:4d:2f:6c:8a:61:5d:ff:
         61:54:d8:07:45:a1:99:88:6e:e2:df:a0:1c:f5:46:8f:e6:42:
         8e:53:27:08:a5:90:60:8a:7c:25:76:59:db:d3:ff:07:b3:bb:
         c4:35:81:37:ef:41:4b:0a:7b:56:b9:f6:4f:c1:d0:cc:d7:b2:
         b7:05:35:cc:1c:a3:f3:cc:54:46:f7:d0:6d:c6:7f:a4:4e:b4:
         79:fb:b8:dd:e6:08:2c:a4:ae:0a:40:85:7c:78:2a:82:61:5c:
         a7:7e:49:5b:09:78:50:fc:fa:53:3d:df:9d:c3:3b:13:e1:e0:
         48:77:66:b2:64:5f:9c:71:c3:0e:f8:2c:fc:b4:f0:41:2f:82:
         e4:a6:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:36 2026 by rpki-client