This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File:                     TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier:          3rNTuzjvzIyKmq2ZTrjB/l9wJlNqE8TxZAdQgYGK9Bk=
Subject key identifier:   23:B2:AA:E4:56:07:CB:97:1A:5F:4F:F1:35:6F:44:A5:AD:04:13:F6
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer:       /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number:          A2
Signing time:             Sun 25 Jan 2026 05:31:01 +0000
Manifest this update:     Sun 25 Jan 2026 05:31:00 +0000
Manifest next update:     Sun 01 Feb 2026 05:31:00 +0000
Files and hashes:         1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: kAkfCdEP1AzmKzknUhzGYA1vkT8isgXKujbJIAs0LDk=)
                          2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: J+SOazezAnnNxrhHdeWBnb2C7IQYkYVgwLiko+keJWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
                          rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 04:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
        Validity
            Not Before: Jan 25 05:31:00 2026 GMT
            Not After : Feb  1 05:31:00 2026 GMT
        Subject: CN=6975aa94-b88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:0b:b0:6c:71:06:3b:85:45:4f:62:0f:9e:
                    c6:70:79:ea:62:d1:4d:37:85:02:a8:73:94:53:de:
                    62:0b:51:58:08:04:03:14:23:6e:19:ce:a7:6d:70:
                    91:0c:b6:eb:8e:02:fa:45:a5:30:11:c8:ad:86:af:
                    a9:fb:dc:11:18:ac:36:9b:8f:74:34:fc:df:3c:36:
                    63:d2:4f:56:0f:43:0a:72:a1:bd:84:e3:28:b7:fc:
                    82:14:14:03:ab:ca:fa:30:e2:f1:2a:3b:eb:1d:d9:
                    25:63:6d:58:46:38:ab:51:31:be:dd:d7:4d:42:b2:
                    56:39:1a:33:59:bc:89:29:1d:46:00:ce:a4:b4:38:
                    f2:24:10:2a:86:3a:ce:2d:ff:12:e5:cc:6e:fc:e6:
                    7e:a8:ee:d0:32:cb:8a:f8:02:50:ed:c2:3a:b4:6c:
                    d3:08:1c:4a:db:c2:71:ca:0b:a4:c2:0b:92:a1:2b:
                    f3:d0:30:ad:2d:ce:31:07:c0:5d:4d:c1:31:4e:12:
                    b3:d0:c6:3c:3f:53:03:0c:86:d6:f4:46:ff:f8:73:
                    42:35:ee:57:4e:84:c8:93:31:57:51:9b:29:66:13:
                    e8:92:b7:d1:c5:c6:ba:8e:b2:e2:d6:98:af:56:0c:
                    ca:ad:00:ac:99:05:56:dd:01:93:8c:49:e7:cb:83:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:AA:E4:56:07:CB:97:1A:5F:4F:F1:35:6F:44:A5:AD:04:13:F6
            X509v3 Authority Key Identifier:
                keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:80:d5:d6:b4:7d:76:cc:cf:a8:e1:6f:43:a4:37:b2:34:73:
         32:57:c9:cd:f1:0b:0b:53:03:72:a0:68:9f:d0:2a:8c:40:b3:
         4b:9b:9f:75:b1:7a:70:d3:10:4a:74:d2:0e:6b:43:24:a7:e3:
         98:e3:68:8c:96:dd:ce:8a:2e:20:c2:de:10:e9:e5:3f:bd:c1:
         68:56:9c:5c:48:ed:ac:da:b6:0e:f4:b6:2c:cf:a6:4c:65:e7:
         02:8a:49:36:66:97:6b:bf:df:e5:8f:c1:c1:15:14:b1:87:72:
         f7:c1:73:e2:3c:00:68:1f:9a:ef:88:51:64:47:f0:bc:f7:62:
         0a:eb:47:43:4f:af:12:9d:e9:23:c7:f7:bf:a4:f8:de:d2:9f:
         d6:b8:de:5d:00:f7:08:92:f6:f9:23:cc:10:d0:1b:ba:10:00:
         8d:11:cc:73:fd:2b:5e:2a:2c:eb:ad:18:59:3e:ee:08:f2:08:
         2f:25:7e:73:dd:75:2f:eb:5c:43:d1:5b:eb:fd:5d:06:ed:fc:
         51:bc:b0:74:17:d2:c6:bf:38:12:56:c7:57:2c:ce:53:ab:a2:
         81:99:80:36:e8:6d:0a:74:e7:2a:e6:72:94:0d:ad:88:d5:2a:
         6f:0e:92:2f:71:15:64:f5:c8:78:fa:da:2a:94:df:d7:a2:38:
         35:a1:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:39 2026 by rpki-client