This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
File:                     TTExNNGjpXdD2_A2ocHu_FlQPbw.mft (raw, json)
Hash identifier:          xjxStuphT1TfKsh36Kkp2mRWuL+Z4CLLyieeIOqKd0M=
Subject key identifier:   3D:AF:AB:A9:23:47:3D:F8:61:5B:20:B1:7B:78:D7:73:EB:0E:EA:C2
Authority key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC
Certificate issuer:       /CN=A91516DE/serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
Manifest number:          7E
Signing time:             Fri 19 Dec 2025 05:44:46 +0000
Manifest this update:     Fri 19 Dec 2025 05:44:46 +0000
Manifest next update:     Fri 26 Dec 2025 05:44:46 +0000
Files and hashes:         1: TTExNNGjpXdD2_A2ocHu_FlQPbw.crl (hash: P/igSMvG4klb+ityvLxqJ2VPN8pRcDULnA0jgrou0yI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl
                          rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC
        Validity
            Not Before: Dec 19 05:44:46 2025 GMT
            Not After : Dec 26 05:44:46 2025 GMT
        Subject: CN=6944e64e-76e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:62:77:97:30:68:ac:ad:8f:83:d3:ce:f5:
                    8f:62:65:33:7d:46:ee:a1:96:99:db:6e:90:21:c9:
                    af:3a:39:79:d0:d2:14:bd:60:f2:ea:67:32:80:49:
                    c3:9c:dc:ee:92:fb:eb:fd:e2:f2:c8:5b:15:1f:b4:
                    74:cf:24:88:d7:7a:76:e2:8d:f3:62:69:2c:63:fb:
                    1c:6d:54:98:f3:83:8f:ae:d3:95:6f:87:69:4a:a1:
                    69:95:73:0e:2f:74:bf:a7:1a:5a:30:61:10:df:9f:
                    4c:51:f1:8e:59:cf:16:26:8c:bf:85:4c:f3:b2:ab:
                    94:81:71:5f:50:d8:5f:02:c0:4a:25:6c:55:27:db:
                    95:5a:b9:c0:c1:a8:1a:55:11:11:17:cb:11:5c:28:
                    ae:fc:b4:f4:1d:ba:81:4e:81:dd:eb:54:c4:bb:70:
                    a8:d2:37:89:26:6c:0d:d8:3a:df:0d:13:f3:f2:77:
                    5c:ff:0b:aa:c6:8b:7e:27:a2:96:3b:cf:7f:c5:5b:
                    6c:4b:da:c8:07:4e:f8:f5:aa:0f:2d:ac:f8:d0:57:
                    b8:49:55:89:36:88:10:a6:7c:34:15:a6:c4:83:c4:
                    9c:72:c3:a3:c1:1b:94:fb:9f:cd:4b:2b:8c:36:cd:
                    a8:e3:1b:4b:32:d1:85:a2:26:37:9e:cb:60:c7:d7:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AF:AB:A9:23:47:3D:F8:61:5B:20:B1:7B:78:D7:73:EB:0E:EA:C2
            X509v3 Authority Key Identifier:
                keyid:4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:09:d6:44:a5:a8:0d:cd:19:69:eb:6f:b5:3b:0d:0c:2a:28:
         fb:b2:db:4b:62:95:cc:ee:10:ac:26:9d:46:b4:af:0e:d4:77:
         5e:a7:86:3c:7c:ac:35:8e:0a:ec:7a:8c:cb:57:11:66:f7:a3:
         ed:28:6c:66:de:92:43:4c:59:90:34:81:1f:61:b0:7c:d8:f6:
         c3:07:88:15:a4:cf:51:0e:08:0c:70:eb:d9:0a:36:3c:58:35:
         4b:53:3f:f1:b5:14:05:bc:9d:13:f3:7a:36:b8:04:5a:00:bb:
         84:4d:35:55:1d:3f:53:70:cf:36:b8:53:c5:c5:b6:aa:0c:34:
         d6:8a:79:38:79:75:f6:c5:a7:a1:3f:96:26:bd:4e:e5:3c:87:
         9f:2b:94:63:13:22:b4:79:a1:59:f8:c5:5a:5c:e8:23:c5:0e:
         01:62:93:43:88:fc:b0:8d:e2:9f:fa:d3:5a:79:2a:28:99:b6:
         e6:37:61:8b:34:e3:98:02:a8:73:61:ea:fb:3e:9a:ea:25:09:
         e6:b8:c6:07:ad:ff:62:b9:ca:a3:a5:37:8d:c3:3e:e1:6d:0a:
         0e:d4:f2:da:aa:03:f6:31:02:7e:f7:03:2d:a5:54:f7:9a:9b:
         3f:21:04:57:39:78:36:8c:d7:50:e1:f1:92:28:67:37:68:ec:
         fb:6f:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:14 2025 by rpki-client