This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
File:                     TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft (raw, json)
Hash identifier:          lfF5K5drWFNZiavt4cDuKHn9B8nS4yuG20MQnsYc2iI=
Subject key identifier:   38:9A:EF:7C:CB:6A:68:40:2F:57:49:AF:6B:2E:C4:F4:EC:C5:24:C8
Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D
Certificate issuer:       /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
Manifest number:          88
Signing time:             Fri 05 Dec 2025 04:36:06 +0000
Manifest this update:     Fri 05 Dec 2025 04:36:05 +0000
Manifest next update:     Fri 12 Dec 2025 04:36:05 +0000
Files and hashes:         1: TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl (hash: kzVErFj9C8r8uDhtm94cBUtFtbUV45UP7F3+m77cW50=)
                          2: 1201EAF6083911F0B43D9172C4F9AE02.roa (hash: J+SOazezAnnNxrhHdeWBnb2C7IQYkYVgwLiko+keJWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl
                          rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D
        Validity
            Not Before: Dec  5 04:36:05 2025 GMT
            Not After : Dec 12 04:36:05 2025 GMT
        Subject: CN=69326136-fd96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:80:cd:a4:06:81:2b:a1:b0:7d:45:41:35:
                    15:64:60:a5:1d:d8:36:f7:24:39:03:b0:30:7a:df:
                    30:c7:a7:4a:fd:56:d1:29:df:94:71:0f:d4:a1:f2:
                    f7:15:9e:49:de:ed:ed:41:80:c7:c6:bb:1f:aa:97:
                    7d:41:aa:5d:7f:c9:21:06:1a:d2:78:a9:0d:0d:d7:
                    d7:75:31:11:aa:5b:3a:05:94:c0:4b:00:d2:6d:27:
                    36:75:bd:63:9b:60:63:85:03:e2:73:51:09:a5:98:
                    ff:8f:74:ad:cc:16:0d:69:09:b8:f5:4f:d5:71:bd:
                    c7:81:82:97:3b:8f:af:59:62:7d:af:3e:71:b3:a2:
                    b7:5a:de:fe:67:30:b0:7d:51:09:57:a9:f2:88:57:
                    c7:bc:47:97:cb:9c:c0:0b:25:7b:b0:da:6a:48:11:
                    4b:94:57:52:50:9f:10:1f:66:0d:4c:50:da:a2:1c:
                    d3:95:a2:07:87:0b:30:ca:42:58:46:4a:57:75:b9:
                    e4:d5:c2:be:63:c6:9c:41:8b:37:bc:eb:5c:26:d2:
                    cf:b3:36:a5:a0:6d:79:f0:5e:a4:ed:88:91:e6:20:
                    32:64:f5:33:b5:a5:37:52:97:d5:13:8a:06:4b:0c:
                    2e:05:c5:73:fe:5e:f2:79:94:f8:41:02:24:fe:0e:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:EF:7C:CB:6A:68:40:2F:57:49:AF:6B:2E:C4:F4:EC:C5:24:C8
            X509v3 Authority Key Identifier:
                keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:61:96:30:04:45:50:0c:64:45:92:95:98:25:1d:06:96:8f:
         a1:14:7f:0e:55:53:fe:55:85:fe:bc:89:c3:ca:cb:d0:3a:ab:
         0d:af:7e:cb:1d:c0:a8:12:9a:bd:0f:98:b7:fd:ee:0e:0b:60:
         1a:4f:cd:b9:43:b2:29:b9:06:81:d6:9b:e6:43:21:55:a5:ce:
         3a:5d:42:68:05:dc:35:1e:c1:0c:50:03:54:9f:5f:61:47:7c:
         d8:55:fa:7c:3c:d0:c2:9b:13:32:c6:44:2c:1e:bc:16:1c:7e:
         9e:f4:cd:1c:b8:bd:2c:dc:86:e0:db:07:41:0b:d5:50:e2:75:
         5f:58:a9:cb:1b:42:a2:2f:54:e5:b1:0e:67:22:53:75:48:a6:
         29:50:1d:27:d5:58:46:1b:43:84:97:54:cd:c4:47:b7:61:72:
         e8:85:11:2a:ad:27:2e:be:d0:d1:ec:99:9b:cb:60:74:80:22:
         39:76:5b:af:27:69:62:76:20:f3:12:67:6d:e7:16:22:f3:27:
         98:1d:95:61:78:40:13:ca:d9:34:4a:84:2a:61:91:ed:1e:70:
         39:85:28:71:8b:0b:97:61:3c:29:0b:aa:8d:ad:89:f4:70:34:
         58:b0:26:47:6b:2b:0a:8d:63:32:9e:41:8d:d2:86:86:54:b7:
         33:76:a3:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTQxMTAvBgNVBAUTKDRDREY5OUU3MDdGOTAyMzM4RTE0RDUxMDI0OUE5NjI1
QkNBMEZGOUQwHhcNMjUxMjA1MDQzNjA1WhcNMjUxMjEyMDQzNjA1WjAYMRYwFAYD
VQQDEw02OTMyNjEzNi1mZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkE+AzaQGgSuhsH1FQTUVZGClHdg29yQ5A7Awet8wx6dK/VbRKd+UcQ/UofL3
FZ5J3u3tQYDHxrsfqpd9Qapdf8khBhrSeKkNDdfXdTERqls6BZTASwDSbSc2db1j
m2BjhQPic1EJpZj/j3StzBYNaQm49U/Vcb3HgYKXO4+vWWJ9rz5xs6K3Wt7+ZzCw
fVEJV6nyiFfHvEeXy5zACyV7sNpqSBFLlFdSUJ8QH2YNTFDaohzTlaIHhwswykJY
RkpXdbnk1cK+Y8acQYs3vOtcJtLPszaloG158F6k7YiR5iAyZPUztaU3UpfVE4oG
SwwuBcVz/l7yeZT4QQIk/g6SuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDia73zL
amhAL1dJr2suxPTsxSTIMB8GA1UdIwQYMBaAFEzfmecH+QIzjhTVECSaliW8oP+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBNC9GMjlFQjIwQTA3
RTAxMUYwQjYxODUxNjJDNEY5QUUwMi9UTi1aNXdmNUFqT09GTlVRSkpxV0pieWdf
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdBNC9GMjlFQjIwQTA3RTAxMUYwQjYxODUxNjJDNEY5QUUwMi9UTi1aNXdmNUFq
T09GTlVRSkpxV0pieWdfNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCkYZYwBEVQDGRFkpWYJR0Glo+hFH8OVVP+VYX+vInDysvQOqsNr37L
HcCoEpq9D5i3/e4OC2AaT825Q7IpuQaB1pvmQyFVpc46XUJoBdw1HsEMUANUn19h
R3zYVfp8PNDCmxMyxkQsHrwWHH6e9M0cuL0s3Ibg2wdBC9VQ4nVfWKnLG0KiL1Tl
sQ5nIlN1SKYpUB0n1VhGG0OEl1TNxEe3YXLohREqrScuvtDR7Jmby2B0gCI5dluv
J2lidiDzEmdt5xYi8yeYHZVheEATytk0SoQqYZHtHnA5hShxiwuXYTwpC6qNrYn0
cDRYsCZHaysKjWMynkGN0oaGVLczdqPT
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:04 2025 by rpki-client