This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
File:                     p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json)
Hash identifier:          P2ZZpqSyjItk5aMcmNVAMoAGF5Z0Sz+Ckf0QN2NneUs=
Subject key identifier:   73:22:EF:D1:A3:82:AA:74:2A:8C:14:8D:41:76:3A:A4:62:53:48:84
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Certificate issuer:       /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
Manifest number:          0A78
Signing time:             Sat 20 Dec 2025 21:56:11 +0000
Manifest this update:     Sat 20 Dec 2025 21:56:11 +0000
Manifest next update:     Sat 27 Dec 2025 21:56:11 +0000
Files and hashes:         1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: Hty2hO6xSpFowMwP1W0B1nU99DHEkzjXs9J25VJhk/A=)
                          2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
        Validity
            Not Before: Dec 20 21:56:11 2025 GMT
            Not After : Dec 27 21:56:11 2025 GMT
        Subject: CN=69471b7b-0525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:46:1e:2b:a7:14:2c:42:bf:60:9a:9b:11:
                    29:f1:4a:e5:bb:ca:0b:86:d8:ff:54:9e:10:2c:54:
                    ba:50:e4:1f:f0:1c:bc:c7:a9:f5:57:c4:81:e7:f4:
                    c1:4c:6e:ef:95:d5:66:ab:a7:00:4f:e6:c4:10:73:
                    77:bf:97:26:08:d4:e9:b1:0f:d8:12:a8:0a:c7:66:
                    47:55:18:8e:b8:c5:2a:b3:45:20:5b:9c:88:3e:59:
                    6c:33:26:c6:fa:c2:15:74:df:52:df:b2:99:7f:7b:
                    28:4b:8b:fa:91:87:f8:14:4e:7a:29:88:31:7c:fa:
                    06:c9:a2:97:ce:49:41:f1:18:38:8f:25:49:bf:4b:
                    a9:8b:a6:0b:9c:bc:76:6e:5a:c1:28:3e:74:62:8b:
                    f0:c7:b4:fc:87:f0:48:ba:3f:b5:c2:29:46:0d:2d:
                    02:27:22:93:53:a9:cb:b0:c7:36:ff:3b:d8:67:16:
                    d0:4a:44:8e:8b:e4:8b:d9:48:b9:ef:d6:6c:7c:43:
                    3a:7c:6f:d8:86:ca:f7:82:6d:c6:5c:fd:b7:a1:24:
                    f5:4d:d7:64:8c:ad:db:2b:8b:42:42:fc:75:a0:ad:
                    c3:09:ec:0d:fd:5a:68:9c:e7:a7:9c:fd:5e:4b:ae:
                    12:60:ab:de:5b:7b:eb:81:5d:92:3c:66:47:00:ba:
                    94:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:22:EF:D1:A3:82:AA:74:2A:8C:14:8D:41:76:3A:A4:62:53:48:84
            X509v3 Authority Key Identifier:
                keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:6d:8b:9b:03:9f:20:2f:09:06:7b:bc:ef:93:27:ed:ae:
         66:dd:72:91:d5:51:28:1c:5c:59:78:30:33:07:4b:63:45:c6:
         47:b2:c2:49:2a:46:a6:9c:fd:0a:3c:1e:0a:c0:de:d7:94:a9:
         60:40:7e:90:13:13:0c:46:91:23:74:5d:61:e1:b3:5a:7f:2d:
         f9:e3:cf:5a:28:70:2a:ff:7d:ce:7f:fc:63:66:ad:c6:ff:72:
         ec:6b:3e:0e:c3:36:dc:c8:77:79:d5:36:1c:ed:c8:c8:cc:f0:
         9f:e3:23:4e:85:d4:cd:28:73:63:f8:c7:d0:0d:e8:9f:af:f6:
         3b:f9:9e:2d:ab:b0:7d:9c:f0:5f:05:6c:68:66:a6:b8:a4:cb:
         6f:72:c1:f9:2c:5b:48:a6:4a:fb:39:b5:4f:42:4d:df:d7:94:
         09:19:6d:e4:5c:ab:45:6f:bd:39:cb:2c:78:b0:1d:68:a6:53:
         d6:eb:a1:2d:ba:34:96:a8:a1:85:cb:c6:2e:00:26:09:80:5f:
         59:a5:5d:d7:1e:03:3c:88:a4:cd:83:63:cb:30:44:57:9a:1b:
         55:ca:6b:24:a2:d2:5b:a5:8f:4e:a4:d8:8f:68:87:93:10:d6:
         94:93:08:39:5d:bc:75:65:11:f2:f3:96:59:a1:cf:d4:0c:73:
         ab:63:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 11:16:41 2025 by rpki-client