This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
File:                     p24FuDRU7RogkCXoPXXkBXkYksE.mft (raw, json)
Hash identifier:          RlkveJgNJEQ+AvGnWVEtmmWvygc8P7Iy1KVlRX1Abcs=
Subject key identifier:   02:CE:75:B4:38:76:D2:5A:D4:DF:57:54:3B:6E:1D:23:BE:DE:C4:6E
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Certificate issuer:       /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
Manifest number:          0A5C
Signing time:             Sat 06 Dec 2025 21:30:55 +0000
Manifest this update:     Sat 06 Dec 2025 21:30:55 +0000
Manifest next update:     Sat 13 Dec 2025 21:30:55 +0000
Files and hashes:         1: p24FuDRU7RogkCXoPXXkBXkYksE.crl (hash: ujvs4ADSEnSxptIIvi53FnxUXtxWmaVhHz2jUr7PPW4=)
                          2: 078192DE0E0111F08A256F7AC4F9AE02.roa (hash: LXGEYHuadccOutKJ+/tshTQpVwD3yYdPEV04BO81LG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
        Validity
            Not Before: Dec  6 21:30:55 2025 GMT
            Not After : Dec 13 21:30:55 2025 GMT
        Subject: CN=6934a08f-3dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:d7:27:10:60:63:bc:57:92:5f:ca:2e:dc:
                    a5:e8:e1:62:b7:3d:07:59:13:d1:31:9f:96:e4:57:
                    40:7d:0a:c3:93:cc:42:33:06:0b:41:af:44:19:3b:
                    77:74:00:9f:bf:e1:2a:d7:62:0a:25:a7:b0:29:a2:
                    59:82:04:7b:67:eb:e6:5d:74:f4:03:c9:77:3c:d9:
                    2b:6f:f4:63:81:3e:9d:ce:92:57:0c:92:f5:b0:b1:
                    50:30:e9:54:51:84:0f:dc:9f:b1:f9:78:41:60:e4:
                    11:48:6f:23:ca:96:f8:1f:4d:5e:f4:64:84:96:65:
                    b4:b3:1a:4c:c1:6c:ae:80:23:20:53:e1:a7:5d:75:
                    ed:44:6f:94:ad:05:aa:6e:c0:4b:1c:5c:00:3e:93:
                    65:dc:e9:36:c3:b1:a2:ee:f7:1d:c5:15:7b:f4:26:
                    e0:e2:b2:f2:3a:70:70:28:fe:b1:eb:b3:99:8e:41:
                    b1:b0:ff:16:df:e0:3a:92:f9:1f:4c:e1:79:0a:4f:
                    f1:e1:3a:d5:57:08:61:73:de:fb:2f:fb:7d:66:04:
                    c7:63:34:c1:94:35:68:a4:30:29:a8:4c:61:38:6b:
                    ec:f1:4c:a5:56:a6:fd:b1:28:fd:25:7e:cb:75:90:
                    db:77:a8:c4:1c:85:b9:44:fb:52:ab:4b:46:61:22:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CE:75:B4:38:76:D2:5A:D4:DF:57:54:3B:6E:1D:23:BE:DE:C4:6E
            X509v3 Authority Key Identifier:
                keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d0:8d:44:63:b8:3b:37:ba:0a:80:43:c4:44:a3:dd:a0:a9:
         a6:67:83:92:d4:12:33:50:73:a4:c9:58:bd:e4:9e:86:42:49:
         2e:9b:09:9c:45:44:86:0b:75:1a:61:d4:7d:68:15:05:df:5d:
         8d:e4:2a:8b:35:7d:fc:13:29:fb:1e:0d:1c:bf:41:cc:ca:59:
         84:63:ab:b6:13:d0:87:3a:40:ff:54:c6:5f:bb:c6:db:10:73:
         7b:50:1d:05:d9:39:ef:99:bf:9f:5c:a1:c2:bb:df:58:11:41:
         59:ae:59:26:96:46:b6:68:f8:cd:fc:11:9d:0d:9d:df:41:4e:
         db:60:d3:6b:02:3a:ae:b0:9c:85:60:60:00:4c:f1:a0:7e:95:
         0c:b1:67:ea:cc:ee:04:f0:85:f8:27:29:21:ab:32:1e:f2:8c:
         bf:aa:ab:5e:f9:99:93:8a:be:8d:1b:20:ec:69:e7:0c:82:61:
         89:31:63:eb:49:f9:a5:de:54:1d:c3:31:02:eb:d5:73:02:09:
         ec:81:d1:09:9c:04:eb:63:63:dc:43:c1:e9:f7:c2:34:c1:97:
         ea:9f:0f:ea:ff:7d:7b:a5:f4:b7:1c:b3:fc:a3:ae:c3:a0:79:
         c7:79:f2:d0:c2:d4:87:fa:8d:74:af:22:bd:b2:6f:3b:10:84:
         9f:c1:96:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2QUExMTAvBgNVBAUTKEE3NkUwNUI4MzQ1NEVEMUEyMDkwMjVFODNENzVFNDA1
NzkxODkyQzEwHhcNMjUxMjA2MjEzMDU1WhcNMjUxMjEzMjEzMDU1WjAYMRYwFAYD
VQQDEw02OTM0YTA4Zi0zZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyjXJxBgY7xXkl/KLtyl6OFitz0HWRPRMZ+W5FdAfQrDk8xCMwYLQa9EGTt3
dACfv+Eq12IKJaewKaJZggR7Z+vmXXT0A8l3PNkrb/RjgT6dzpJXDJL1sLFQMOlU
UYQP3J+x+XhBYOQRSG8jypb4H01e9GSElmW0sxpMwWyugCMgU+GnXXXtRG+UrQWq
bsBLHFwAPpNl3Ok2w7Gi7vcdxRV79Cbg4rLyOnBwKP6x67OZjkGxsP8W3+A6kvkf
TOF5Ck/x4TrVVwhhc977L/t9ZgTHYzTBlDVopDApqExhOGvs8UylVqb9sSj9JX7L
dZDbd6jEHIW5RPtSq0tGYSIQGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALOdbQ4
dtJa1N9XVDtuHSO+3sRuMB8GA1UdIwQYMBaAFKduBbg0VO0aIJAl6D115AV5GJLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE
QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9wMjRGdURSVTdSb2drQ1hvUFhYa0JYa1lr
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AyNEZ1RFJVN1JvZ2tDWG9QWFhrQlhrWWtzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9wMjRGdURSVTdS
b2drQ1hvUFhYa0JYa1lrc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz0I1EY7g7N7oKgEPERKPdoKmmZ4OS1BIzUHOkyVi95J6GQkkumwmc
RUSGC3UaYdR9aBUF312N5CqLNX38Eyn7Hg0cv0HMylmEY6u2E9CHOkD/VMZfu8bb
EHN7UB0F2Tnvmb+fXKHCu99YEUFZrlkmlka2aPjN/BGdDZ3fQU7bYNNrAjqusJyF
YGAATPGgfpUMsWfqzO4E8IX4JykhqzIe8oy/qqte+ZmTir6NGyDsaecMgmGJMWPr
Sfml3lQdwzEC69VzAgnsgdEJnATrY2PcQ8Hp98I0wZfqnw/q/317pfS3HLP8o67D
oHnHefLQwtSH+o10ryK9sm87EISfwZbx
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:24:52 2025 by rpki-client