This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft File: N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json) Hash identifier: PcmQhXUOHieiRSIQ+1FrZEhdITkKeJbI29sUjyFOZ/U= Subject key identifier: 5D:0E:03:86:A0:E3:C3:4D:B4:97:FE:70:81:90:92:59:C2:FD:BA:79 Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D Certificate issuer: /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft Manifest number: 1559 Signing time: Mon 22 Dec 2025 17:54:29 +0000 Manifest this update: Mon 22 Dec 2025 17:54:28 +0000 Manifest next update: Mon 29 Dec 2025 17:54:28 +0000 Files and hashes: 1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: HWucvb/gY+qEC4LAlSBSHf27Ugu+tK4sYyPLFWsKs9c=) 2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: ohLcJGiw9Qpz+3q7Qq1rXsYI1VYW0bgcQ/ITvPJhtyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D Validity Not Before: Dec 22 17:54:28 2025 GMT Not After : Dec 29 17:54:28 2025 GMT Subject: CN=694985d4-056a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:20:15:30:87:d8:9d:32:f8:93:d7:b9:fb: a0:16:01:56:ec:64:54:87:85:20:1e:ac:f8:7f:0b: e0:36:83:af:a6:69:ec:30:e1:0b:54:63:2d:cf:ce: 6f:2e:c4:00:e9:db:0c:3a:c6:08:90:90:88:75:38: 69:aa:51:ed:10:06:75:d6:05:68:a2:1d:a6:bd:1c: 9d:09:64:f8:31:4c:53:88:61:12:5c:49:9a:7a:2c: fe:9f:35:a6:fb:46:1a:e0:40:b3:bc:f3:0a:22:0f: 8a:96:6f:92:e7:3c:19:a4:03:bb:3b:7d:c2:7a:96: 4a:2d:5c:77:97:ab:26:8d:46:94:0d:d2:3b:a0:19: 7e:99:17:42:3b:80:a3:1b:e1:73:fa:06:68:28:18: 20:60:ca:39:57:5d:3d:1f:d7:09:04:5d:e1:34:74: 18:f9:b6:dc:4f:c8:03:41:c8:79:82:eb:9e:03:5b: b5:00:f5:28:e4:43:b8:e8:ea:ae:fe:c6:1e:3a:34: 31:84:a6:5f:26:a1:b4:47:2c:b8:80:63:4c:61:64: 32:2a:07:71:8b:bd:76:4c:e3:64:aa:68:58:17:05: 82:04:c4:ff:2e:8e:4e:6d:f9:0e:8b:41:53:4e:f8: db:5d:3d:84:07:2e:ff:5f:1a:66:e0:6b:22:99:20: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:03:86:A0:E3:C3:4D:B4:97:FE:70:81:90:92:59:C2:FD:BA:79 X509v3 Authority Key Identifier: keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:25:3d:b5:c1:83:25:2c:1c:9e:ef:05:a9:89:a6:3b:30:7d: a7:5b:f5:6f:02:0f:9e:73:79:c9:4b:5b:9c:b4:a0:63:58:f1: c1:d9:04:e6:95:84:22:a1:6a:0b:36:d9:41:70:6b:b9:d4:cb: 50:1f:02:06:68:7a:fd:b8:0c:e0:4c:15:69:0e:51:ef:a8:cd: bf:a0:b3:6e:35:9b:a8:a6:81:1e:52:81:51:7f:ac:94:d9:60: 6a:7e:4b:cc:52:df:93:9a:b7:aa:2b:d4:50:1e:07:d4:4a:0c: 09:3e:2d:a7:f5:83:fa:0f:b5:30:b9:72:a4:a7:89:bd:f8:08: 4e:83:b3:df:cf:09:41:09:28:29:ad:ed:c5:68:52:ef:3d:0e: 55:17:06:43:b3:e4:12:9c:bb:e4:4f:62:60:ed:d7:54:82:a2: d6:8f:51:59:26:0a:47:1c:36:e4:d8:bd:30:a0:4c:b9:31:c9: bc:19:aa:61:b8:e1:c2:f8:84:2f:60:10:18:11:a8:54:9e:82: fa:69:a2:52:b9:ee:83:43:b7:77:bc:39:21:0e:3f:3a:07:dd: 5c:a4:aa:81:14:91:c1:08:1e:c0:88:47:8b:47:f2:a0:e9:a0: ee:be:af:96:f9:ba:b1:37:fa:74:e8:25:c5:b3:87:25:39:ec: 64:a2:e2:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZGMDcxMTAvBgNVBAUTKDM3RURCODAwQTU2OTlGQTg1N0Y3NkQ3NTRCN0YyRjQx NzVFRUE4NUQwHhcNMjUxMjIyMTc1NDI4WhcNMjUxMjI5MTc1NDI4WjAYMRYwFAYD VQQDDA02OTQ5ODVkNC0wNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PYgFTCH2J0y+JPXufugFgFW7GRUh4UgHqz4fwvgNoOvpmnsMOELVGMtz85v LsQA6dsMOsYIkJCIdThpqlHtEAZ11gVooh2mvRydCWT4MUxTiGESXEmaeiz+nzWm +0Ya4ECzvPMKIg+Klm+S5zwZpAO7O33CepZKLVx3l6smjUaUDdI7oBl+mRdCO4Cj G+Fz+gZoKBggYMo5V109H9cJBF3hNHQY+bbcT8gDQch5guueA1u1APUo5EO46Oqu /sYeOjQxhKZfJqG0Ryy4gGNMYWQyKgdxi712TONkqmhYFwWCBMT/Lo5ObfkOi0FT TvjbXT2EBy7/Xxpm4GsimSDSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0OA4ag 48NNtJf+cIGQklnC/bp5MB8GA1UdIwQYMBaAFDftuAClaZ+oV/dtdUt/L0F17qhd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1 MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42aFg5MjExUzM4dlFYWHVx RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04tMjRBS1ZwbjZoWDkyMTFTMzh2UVhYdXFGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42 aFg5MjExUzM4dlFYWHVxRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCJT21wYMlLBye7wWpiaY7MH2nW/VvAg+ec3nJS1uctKBjWPHB2QTm lYQioWoLNtlBcGu51MtQHwIGaHr9uAzgTBVpDlHvqM2/oLNuNZuopoEeUoFRf6yU 2WBqfkvMUt+TmreqK9RQHgfUSgwJPi2n9YP6D7UwuXKkp4m9+AhOg7PfzwlBCSgp re3FaFLvPQ5VFwZDs+QSnLvkT2Jg7ddUgqLWj1FZJgpHHDbk2L0woEy5Mcm8Gaph uOHC+IQvYBAYEahUnoL6aaJSue6DQ7d3vDkhDj86B91cpKqBFJHBCB7AiEeLR/Kg 6aDuvq+W+bqxN/p06CXFs4clOexkouLo -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:15 2025 by rpki-client