This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
File:                     p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json)
Hash identifier:          ZQ0XZQYWDh5vnSBso9oOjBrPWw/5MvniCgYR+3k/0l4=
Subject key identifier:   A3:0B:DA:C2:3C:E1:09:FB:B5:4C:BF:2C:0B:55:58:2E:31:F2:18:47
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Certificate issuer:       /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
Manifest number:          0A7C
Signing time:             Mon 22 Dec 2025 21:48:42 +0000
Manifest this update:     Mon 22 Dec 2025 21:48:41 +0000
Manifest next update:     Mon 29 Dec 2025 21:48:41 +0000
Files and hashes:         1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: XrIqdg+mF0yibScI9x1h6NyN+edBs6ZzX1sv6zhpbmU=)
                          2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 21:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
        Validity
            Not Before: Dec 22 21:48:41 2025 GMT
            Not After : Dec 29 21:48:41 2025 GMT
        Subject: CN=6949bcb9-1662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:27:cb:3c:53:ca:37:fa:6a:1a:ba:59:89:
                    0a:26:b8:85:31:58:f6:31:0d:6a:40:67:81:a5:b7:
                    28:4a:8d:3b:8f:2e:a1:0c:10:c4:28:40:e9:ae:13:
                    af:9e:67:ea:d6:52:66:bb:43:07:d4:51:b5:ee:92:
                    7c:64:17:30:49:e7:9c:94:1d:0b:40:9a:e0:30:3e:
                    d7:ab:a5:0a:1c:84:28:e0:8a:12:3a:69:f4:14:db:
                    27:2e:78:62:06:f9:a2:09:2d:fa:a3:92:b0:76:74:
                    69:16:53:dc:9b:f2:c0:f2:4a:19:c6:db:e9:1a:6d:
                    3e:14:01:0e:8f:8f:88:d8:d3:99:a6:0d:6a:84:dc:
                    75:37:62:ed:09:49:ec:db:b7:21:5d:d0:b9:46:2b:
                    cf:a4:b5:50:d1:f2:bc:58:b0:25:62:2a:ad:29:79:
                    16:9a:d9:91:5e:11:7e:ab:11:c4:ec:77:72:da:00:
                    ad:7a:ef:c5:50:1d:15:cc:cb:cf:50:54:0b:37:f4:
                    37:6e:33:60:7d:51:aa:ee:6a:52:a4:e3:47:35:3e:
                    e0:83:18:3e:21:a5:8b:7c:29:fe:1e:7e:fb:be:0b:
                    be:46:1c:34:32:ae:81:4d:3b:a7:87:6f:27:26:a8:
                    7d:d0:7b:30:2b:c3:5f:8a:7e:f5:95:f1:d2:7f:3f:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:DA:C2:3C:E1:09:FB:B5:4C:BF:2C:0B:55:58:2E:31:F2:18:47
            X509v3 Authority Key Identifier:
                keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:55:62:e5:0e:6e:89:33:fa:43:31:b7:a3:eb:be:6c:2b:aa:
         16:bc:f6:6f:6d:21:bf:04:48:69:f7:e4:af:5d:d3:80:51:2f:
         7e:60:4d:33:f9:8c:96:37:eb:68:2b:a3:e4:c0:08:52:e8:77:
         9a:cb:db:42:25:04:45:f4:4d:47:a2:d2:db:cb:28:6f:d1:ee:
         7b:b4:67:3e:28:cf:a5:96:30:c1:23:50:51:7e:c6:31:9a:5f:
         25:57:c3:01:6a:91:69:52:69:d5:bb:e6:fb:cc:7a:24:9a:b2:
         cd:66:ff:9f:99:42:a3:d8:cb:8b:55:d9:af:0c:cd:df:c0:90:
         84:dc:5b:3c:7d:93:3c:32:ae:54:57:e9:37:75:12:d5:a9:75:
         96:ec:b9:b1:ea:e2:a2:37:8a:96:4b:01:42:2b:13:4a:d0:ec:
         62:f7:70:80:a6:6a:cc:48:05:ef:8b:3c:24:42:5a:90:b9:e3:
         5f:57:96:02:ee:34:ca:15:2c:b1:ce:55:c8:fd:86:e6:fd:ef:
         4b:ad:fa:9b:76:32:e1:8d:43:80:9a:f1:c0:0e:11:92:87:54:
         36:3e:80:28:dd:8c:c3:26:e1:42:4f:b7:35:35:b1:3e:dc:07:
         eb:f4:78:d3:8e:7d:1f:26:06:35:f3:47:e1:f4:48:06:89:1f:
         3e:6a:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 00:32:04 2025 by rpki-client