This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          /VswwucetFs446F1TonDQGaDA6WFGWfYEI2K1APNRCE=
Subject key identifier:   3A:07:77:1C:81:79:38:91:05:92:D5:2F:7E:52:4D:06:80:9E:3A:7F
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       05E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          05DF
Signing time:             Sat 24 Jan 2026 22:15:28 +0000
Manifest this update:     Sat 24 Jan 2026 22:15:28 +0000
Manifest next update:     Sat 31 Jan 2026 22:15:28 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: LghqicXIZJXJO7rAsc0P2Gzol36IoKlVc/KBQSvs+EI=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: RnCdsnsA5t3rSQhlqndquIzW2+Ap7Mst87/6oAJexVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Jan 2026 22:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1509 (0x5e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Jan 24 22:15:28 2026 GMT
            Not After : Jan 31 22:15:28 2026 GMT
        Subject: CN=69754480-0261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:78:35:ce:9f:71:dd:db:5e:54:a6:73:68:
                    af:1a:33:af:ef:ab:6d:a3:a2:fd:3c:99:ef:e3:53:
                    2a:13:91:55:bc:2c:0a:91:67:67:d9:23:53:d8:3e:
                    a5:c5:e0:09:f9:8d:83:85:35:0c:aa:8c:8a:c4:30:
                    61:c2:8b:a6:96:6f:ff:91:42:a9:b7:29:0f:97:95:
                    5f:8a:77:e8:c6:33:67:40:f6:eb:f4:99:3b:88:02:
                    c8:97:bb:b7:b3:29:43:0a:46:96:2f:96:ca:a6:39:
                    7b:95:54:f6:c3:39:a6:fe:06:09:b9:ee:a1:2e:3b:
                    81:55:32:28:a2:6f:34:35:cb:27:84:f9:e8:40:9c:
                    7e:f3:b2:28:a2:41:fc:0f:c8:55:b1:ba:87:0b:95:
                    74:38:83:e8:06:06:97:93:f5:8c:56:af:41:d7:dc:
                    b5:32:89:79:06:db:e6:85:df:62:35:3b:7e:08:b2:
                    43:02:55:fe:c4:1a:94:0c:67:ea:7f:a1:c3:5b:1e:
                    fd:ac:fb:cc:bd:23:c7:5a:12:e8:01:95:c7:8d:75:
                    12:c1:c8:ec:6e:6b:2a:c3:94:a4:25:7d:5a:d4:cc:
                    cf:af:14:c0:f9:9d:e9:4f:ab:f4:c8:d7:d1:f0:ec:
                    cb:06:71:83:71:76:f4:86:83:7a:74:2e:87:18:0a:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:77:1C:81:79:38:91:05:92:D5:2F:7E:52:4D:06:80:9E:3A:7F
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:83:35:11:74:c6:c7:1e:5d:13:62:44:3c:d1:1c:b3:a2:18:
         95:c6:35:86:08:56:59:6b:a2:54:24:b2:ad:60:1e:c5:f5:88:
         be:2d:38:f8:1b:d0:f0:5c:f1:51:13:b5:a1:ca:71:58:fc:9f:
         72:d6:f6:d1:ae:7f:08:6f:ef:99:76:7a:54:3e:b5:55:bc:f7:
         2f:2f:b3:6d:89:ec:ae:fa:dd:9d:37:d9:a2:51:da:49:42:e9:
         9b:e0:c3:96:46:57:46:58:d4:96:7a:70:bc:81:d0:a5:e5:0a:
         cf:c0:87:50:a0:e6:bf:61:60:db:38:a8:e3:4d:0f:ac:c7:2d:
         fd:f8:62:66:58:d3:01:38:88:d5:6e:17:6a:7f:af:fa:bf:55:
         fc:9c:48:41:8a:2c:80:2f:e6:e0:11:b5:34:62:bf:f5:75:6e:
         6b:95:6a:9b:53:47:76:a0:41:24:e2:63:02:ee:c8:3c:17:41:
         b7:37:d1:b2:4c:ea:52:4b:a8:58:5c:75:ce:42:c1:8b:ba:c3:
         17:46:04:fa:0c:87:98:5f:b8:7d:bb:71:d0:92:d8:48:05:95:
         32:99:36:83:7a:b0:e1:58:57:a5:6c:c4:e5:15:11:02:e1:c8:
         65:eb:6c:07:4f:7f:f2:f4:3b:8d:15:7c:33:da:91:80:1e:fd:
         ff:6a:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:51 2026 by rpki-client