This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
File:                     N-24AKVpn6hX9211S38vQXXuqF0.mft (raw, json)
Hash identifier:          pYTAqm3v2xtxZvgUEh7wGGa+s5OBH6KfFaRYb2IZStk=
Subject key identifier:   78:14:66:C6:F3:88:1F:FA:40:EA:90:95:E3:58:F9:C6:F3:73:87:66
Authority key identifier: 37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D
Certificate issuer:       /CN=A91E6F07/serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
Certificate serial:       08BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
Manifest number:          155F
Signing time:             Sun 28 Dec 2025 17:54:36 +0000
Manifest this update:     Sun 28 Dec 2025 17:54:35 +0000
Manifest next update:     Sun 04 Jan 2026 17:54:35 +0000
Files and hashes:         1: N-24AKVpn6hX9211S38vQXXuqF0.crl (hash: fwEB8Ql1Rq7G2rzzq67kF80jQ2kGMcfqEv52lIaL8Hw=)
                          2: 6E570966CD1B11EA9613AA1DC4F9AE02.roa (hash: ohLcJGiw9Qpz+3q7Qq1rXsYI1VYW0bgcQ/ITvPJhtyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Jan 2026 17:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6F07, serialNumber=37EDB800A5699FA857F76D754B7F2F4175EEA85D
        Validity
            Not Before: Dec 28 17:54:35 2025 GMT
            Not After : Jan  4 17:54:35 2026 GMT
        Subject: CN=69516edc-7b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:ad:f7:3f:7b:e1:85:1d:b3:84:80:55:65:
                    d0:8d:10:25:4f:57:56:fe:f2:eb:30:05:04:52:5d:
                    39:d3:91:b7:af:53:7f:ad:e7:05:b5:cb:e5:8c:88:
                    7d:45:9a:cc:c2:5c:f1:91:31:61:66:9b:f2:4a:e8:
                    e9:05:9e:d1:3d:95:a7:5e:35:04:af:fb:8c:4b:fb:
                    3c:1e:4f:57:da:af:7e:a0:82:27:a8:2d:46:38:c1:
                    c1:78:92:7a:c9:39:17:f1:c4:18:27:a1:e3:d2:d5:
                    19:74:8d:66:82:c8:97:6b:2f:c9:c8:7b:fc:e6:19:
                    cc:fa:1e:d4:17:8c:82:d4:1e:cb:bb:eb:ca:c9:ca:
                    1b:6c:f8:86:e5:b5:2c:7d:0b:a9:02:88:bc:c3:6d:
                    a9:2d:9e:66:68:89:2b:27:e2:b6:32:72:0c:84:55:
                    e6:06:5d:b3:0a:ca:73:eb:84:aa:bc:9c:de:f5:8b:
                    0f:cb:7a:b4:ff:8a:cf:08:aa:b9:a8:bb:0d:d5:9a:
                    75:98:7f:03:29:a9:75:eb:01:f4:f3:22:17:b3:f3:
                    ae:c1:3a:d4:f7:38:e2:85:5d:6d:c2:c5:35:ea:d4:
                    3f:80:b5:d1:10:40:d0:f4:3c:53:53:18:0f:77:d1:
                    24:ad:44:e5:6f:56:d5:33:35:56:4b:3c:36:2a:2f:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:66:C6:F3:88:1F:FA:40:EA:90:95:E3:58:F9:C6:F3:73:87:66
            X509v3 Authority Key Identifier:
                keyid:37:ED:B8:00:A5:69:9F:A8:57:F7:6D:75:4B:7F:2F:41:75:EE:A8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-24AKVpn6hX9211S38vQXXuqF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6F07/C13D81D8052911EA82D74337C4F9AE02/N-24AKVpn6hX9211S38vQXXuqF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ec:1e:5b:2d:0e:bb:ab:2f:f8:ed:47:0e:22:f8:47:65:da:
         75:e3:c9:bb:f1:c3:13:9c:d6:bc:72:90:bb:ef:c3:0e:d7:55:
         e3:54:a4:c3:c1:8c:04:ad:49:86:60:61:39:45:f3:78:96:cb:
         0e:b4:4d:ab:f3:6c:ef:e3:f4:58:32:04:ff:04:68:85:4f:84:
         94:c9:9e:2b:05:77:1f:26:b2:c5:20:27:8f:04:36:c7:9b:b7:
         e3:44:c9:9b:5c:f5:07:11:60:f3:3f:b1:37:9d:30:30:10:de:
         c3:14:8c:5d:5f:7a:61:23:83:07:dd:8b:0f:de:55:7a:69:1f:
         22:57:74:4e:29:c1:77:fd:96:20:65:85:05:8d:85:6c:62:f6:
         a2:d4:65:cb:fc:3d:bf:6a:9b:01:43:2c:eb:7d:a4:6e:6b:3b:
         23:37:e2:47:cd:42:00:49:41:de:f8:5f:de:46:e3:96:58:58:
         a5:40:30:99:4c:0b:73:0e:d5:80:6f:2e:87:7e:7e:2f:35:ad:
         c1:e4:51:40:86:c5:c5:a1:6b:0a:9b:54:21:8d:c0:67:7e:ce:
         1e:21:9c:47:00:cc:10:37:b1:ea:0a:b9:87:61:e0:ce:9b:8d:
         3a:f3:47:4c:97:1f:f3:8d:bb:13:ea:82:87:45:3b:40:76:a6:
         99:b9:17:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZGMDcxMTAvBgNVBAUTKDM3RURCODAwQTU2OTlGQTg1N0Y3NkQ3NTRCN0YyRjQx
NzVFRUE4NUQwHhcNMjUxMjI4MTc1NDM1WhcNMjYwMTA0MTc1NDM1WjAYMRYwFAYD
VQQDDA02OTUxNmVkYy03YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujet9z974YUds4SAVWXQjRAlT1dW/vLrMAUEUl0505G3r1N/recFtcvljIh9
RZrMwlzxkTFhZpvySujpBZ7RPZWnXjUEr/uMS/s8Hk9X2q9+oIInqC1GOMHBeJJ6
yTkX8cQYJ6Hj0tUZdI1mgsiXay/JyHv85hnM+h7UF4yC1B7Lu+vKycobbPiG5bUs
fQupAoi8w22pLZ5maIkrJ+K2MnIMhFXmBl2zCspz64SqvJze9YsPy3q0/4rPCKq5
qLsN1Zp1mH8DKal16wH08yIXs/OuwTrU9zjihV1twsU16tQ/gLXREEDQ9DxTUxgP
d9EkrUTlb1bVMzVWSzw2Ki/34wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgUZsbz
iB/6QOqQleNY+cbzc4dmMB8GA1UdIwQYMBaAFDftuAClaZ+oV/dtdUt/L0F17qhd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkYwNy9DMTNEODFEODA1
MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42aFg5MjExUzM4dlFYWHVx
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04tMjRBS1ZwbjZoWDkyMTFTMzh2UVhYdXFGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkYwNy9DMTNEODFEODA1MjkxMUVBODJENzQzMzdDNEY5QUUwMi9OLTI0QUtWcG42
aFg5MjExUzM4dlFYWHVxRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+7B5bLQ67qy/47UcOIvhHZdp148m78cMTnNa8cpC778MO11XjVKTD
wYwErUmGYGE5RfN4lssOtE2r82zv4/RYMgT/BGiFT4SUyZ4rBXcfJrLFICePBDbH
m7fjRMmbXPUHEWDzP7E3nTAwEN7DFIxdX3phI4MH3YsP3lV6aR8iV3ROKcF3/ZYg
ZYUFjYVsYvai1GXL/D2/apsBQyzrfaRuazsjN+JHzUIASUHe+F/eRuOWWFilQDCZ
TAtzDtWAby6Hfn4vNa3B5FFAhsXFoWsKm1QhjcBnfs4eIZxHAMwQN7HqCrmHYeDO
m40680dMlx/zjbsT6oKHRTtAdqaZuRfY
-----END CERTIFICATE-----
Generated at Mon Dec 29 01:10:42 2025 by rpki-client