This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
File:                     TTExNNGjpXdD2_A2ocHu_FlQPbw.mft (raw, json)
Hash identifier:          PkACf/VJgynb/NViA+RCX2xNHE5VHHTBtvkUGAKNUU8=
Subject key identifier:   38:BB:40:9F:A3:E0:F4:3D:E7:4A:31:49:17:93:A2:AF:72:87:46:8B
Authority key identifier: 4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC
Certificate issuer:       /CN=A91516DE/serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
Manifest number:          90
Signing time:             Fri 23 Jan 2026 05:36:08 +0000
Manifest this update:     Fri 23 Jan 2026 05:36:07 +0000
Manifest next update:     Fri 30 Jan 2026 05:36:07 +0000
Files and hashes:         1: TTExNNGjpXdD2_A2ocHu_FlQPbw.crl (hash: I9YuM4uOnm2BhJ17Wipm7UR2+t5pHB76RXf8J2sNXvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl
                          rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Jan 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516DE, serialNumber=4D313134D1A3A57743DBF036A1C1EEFC59503DBC
        Validity
            Not Before: Jan 23 05:36:07 2026 GMT
            Not After : Jan 30 05:36:07 2026 GMT
        Subject: CN=697308c8-1a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:18:89:9a:63:11:38:82:c3:1a:68:14:6b:
                    89:fb:af:bf:c9:27:27:70:3d:2d:67:2f:d9:e1:46:
                    b5:d3:84:54:5a:6c:aa:71:7b:e1:71:39:8e:48:c2:
                    ea:b0:80:e9:a7:7e:a7:f6:13:93:70:0b:13:6c:b3:
                    26:d6:a6:4a:da:4b:73:54:8e:a5:7e:99:00:7a:78:
                    84:5e:dd:35:27:18:b5:70:18:26:9b:3e:07:5d:56:
                    2e:21:f7:0c:23:6c:a0:c6:c0:97:47:a1:cd:aa:60:
                    b0:31:24:2e:eb:78:ee:8b:d2:13:ef:79:51:b5:f9:
                    d9:2e:a5:5e:87:0d:e0:73:09:6a:99:01:1d:73:fd:
                    15:52:8d:8f:b9:bd:c2:15:48:6b:92:fb:b6:22:1c:
                    ea:4f:8e:60:2f:8e:1d:47:f4:45:b0:0d:46:4d:2c:
                    01:f1:6a:e3:5e:c9:91:98:4e:ca:83:47:24:6a:05:
                    9a:5b:32:5c:6e:38:2a:13:ff:48:6a:2e:91:b3:e5:
                    b5:a1:18:0c:de:d5:4f:14:4a:50:4a:86:fd:14:65:
                    9e:a5:09:f0:5f:28:70:73:ea:67:aa:7a:b3:cb:d5:
                    a9:c8:35:6d:95:82:40:e6:e4:57:11:b9:03:35:5f:
                    1f:34:c2:bc:99:b2:25:22:7e:91:f9:3b:8a:b0:f2:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BB:40:9F:A3:E0:F4:3D:E7:4A:31:49:17:93:A2:AF:72:87:46:8B
            X509v3 Authority Key Identifier:
                keyid:4D:31:31:34:D1:A3:A5:77:43:DB:F0:36:A1:C1:EE:FC:59:50:3D:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TTExNNGjpXdD2_A2ocHu_FlQPbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516DE/379DB0701A8A11F0AF0F337CC4F9AE02/TTExNNGjpXdD2_A2ocHu_FlQPbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:04:4c:a3:c9:14:78:2a:5e:80:4d:e6:c7:47:6e:5b:30:59:
         b8:ae:a1:0d:8d:ac:b6:ed:fb:6a:a5:29:6d:02:d1:7f:14:00:
         b5:c5:da:88:15:3f:65:da:ea:21:f8:8e:0a:35:48:85:82:b7:
         83:e1:df:6e:c0:e2:54:57:d8:7d:e3:ab:1c:8b:dc:05:5e:e9:
         20:16:f4:03:62:da:ae:e7:2f:e8:c6:63:53:c3:ce:8d:94:44:
         b5:13:6c:36:2c:9b:5f:41:18:b3:1b:80:d2:c0:7d:75:07:0d:
         44:91:e1:87:77:77:9f:09:e0:67:ad:7c:d6:ed:55:4d:d5:84:
         9a:1a:db:5a:1a:31:67:c9:6b:2a:93:da:17:64:95:9a:c4:10:
         33:a4:36:63:b4:66:a4:ef:e0:ca:40:24:ce:dc:08:39:e9:21:
         e5:59:56:15:23:dd:27:83:e7:91:1f:49:e8:52:de:0a:78:d8:
         a7:9e:27:29:6f:e0:01:2d:54:3d:05:75:7b:44:57:5e:22:b9:
         6e:49:c4:5e:0f:76:f9:98:3e:3b:22:c5:f6:6b:51:66:e7:99:
         23:6c:85:9f:9e:c3:be:d2:6f:61:1c:12:b3:02:61:96:ad:47:
         a5:ce:01:89:ac:29:ef:30:d3:c3:0b:0a:50:4d:52:24:e1:c3:
         4c:79:ef:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2REUxMTAvBgNVBAUTKDREMzEzMTM0RDFBM0E1Nzc0M0RCRjAzNkExQzFFRUZD
NTk1MDNEQkMwHhcNMjYwMTIzMDUzNjA3WhcNMjYwMTMwMDUzNjA3WjAYMRYwFAYD
VQQDDA02OTczMDhjOC0xYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt08YiZpjETiCwxpoFGuJ+6+/yScncD0tZy/Z4Ua104RUWmyqcXvhcTmOSMLq
sIDpp36n9hOTcAsTbLMm1qZK2ktzVI6lfpkAeniEXt01Jxi1cBgmmz4HXVYuIfcM
I2ygxsCXR6HNqmCwMSQu63jui9IT73lRtfnZLqVehw3gcwlqmQEdc/0VUo2Pub3C
FUhrkvu2IhzqT45gL44dR/RFsA1GTSwB8WrjXsmRmE7Kg0ckagWaWzJcbjgqE/9I
ai6Rs+W1oRgM3tVPFEpQSob9FGWepQnwXyhwc+pnqnqzy9WpyDVtlYJA5uRXEbkD
NV8fNMK8mbIlIn6R+TuKsPK0OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDi7QJ+j
4PQ950oxSReToq9yh0aLMB8GA1UdIwQYMBaAFE0xMTTRo6V3Q9vwNqHB7vxZUD28
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZERS8zNzlEQjA3MDFB
OEExMUYwQUYwRjMzN0NDNEY5QUUwMi9UVEV4Tk5HanBYZEQyX0Eyb2NIdV9GbFFQ
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RURXhOTkdqcFhkRDJfQTJvY0h1X0ZsUVBidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTZERS8zNzlEQjA3MDFBOEExMUYwQUYwRjMzN0NDNEY5QUUwMi9UVEV4Tk5HanBY
ZEQyX0Eyb2NIdV9GbFFQYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZBEyjyRR4Kl6ATebHR25bMFm4rqENjay27ftqpSltAtF/FAC1xdqI
FT9l2uoh+I4KNUiFgreD4d9uwOJUV9h946sci9wFXukgFvQDYtqu5y/oxmNTw86N
lES1E2w2LJtfQRizG4DSwH11Bw1EkeGHd3efCeBnrXzW7VVN1YSaGttaGjFnyWsq
k9oXZJWaxBAzpDZjtGak7+DKQCTO3Ag56SHlWVYVI90ng+eRH0noUt4KeNinnicp
b+ABLVQ9BXV7RFdeIrluScReD3b5mD47IsX2a1Fm55kjbIWfnsO+0m9hHBKzAmGW
rUelzgGJrCnvMNPDCwpQTVIk4cNMee80
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:17:58 2026 by rpki-client