This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft File: 8znaYdk6SUE-kH_FvRavlo3-mtA.mft (raw, json) Hash identifier: FDi8j8qZWp2ziULavztWYgpyAS7HcplSeA9IBqs3bfo= Subject key identifier: 73:0F:1D:9A:21:DB:36:F2:B3:94:FD:D9:76:0E:83:AC:8C:AC:8E:57 Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0 Certificate issuer: /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft Manifest number: 0222 Signing time: Tue 23 Dec 2025 01:25:33 +0000 Manifest this update: Tue 23 Dec 2025 01:25:32 +0000 Manifest next update: Tue 30 Dec 2025 01:25:32 +0000 Files and hashes: 1: 8znaYdk6SUE-kH_FvRavlo3-mtA.crl (hash: emXiAXChqxzxuSX3FP8vdAhPAXvimSe3o1MITcWzFGc=) 2: 2737D20ED68411F0863107146AD3641D.roa (hash: W0ftfyUpGNJPK7aKdKdH7F5x28CQmHb8ftVhpHYN7OU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0 Validity Not Before: Dec 23 01:25:32 2025 GMT Not After : Dec 30 01:25:32 2025 GMT Subject: CN=6949ef8d-4052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:db:95:03:64:07:18:62:9d:94:36:9a:9d: 88:21:1c:77:e6:28:ea:5f:6c:6a:5a:06:97:e1:1f: 30:9d:a9:60:56:30:0f:f1:cb:18:a8:b8:ca:fa:10: e0:ae:f4:bf:09:17:4f:94:ea:22:57:63:da:ae:31: 4a:5f:b9:45:5b:95:6b:b1:a5:b0:2a:18:d6:34:b1: 33:22:d1:81:40:b8:93:ce:40:0e:3c:5f:98:9a:86: 08:10:84:18:0f:64:f7:fb:ba:68:de:de:15:97:52: 42:52:f1:c5:50:c2:a8:f6:db:5f:87:42:e9:db:9a: c7:16:80:dc:10:b4:21:95:8d:88:cc:68:16:6d:21: 35:22:4f:34:19:30:4b:60:87:e7:65:c4:2b:b6:9c: d2:79:e4:7c:ce:ce:36:68:32:dc:5c:45:bb:57:e2: 23:2b:9e:9b:0d:f4:d0:76:e4:ca:15:db:76:e5:b3: 40:e6:a5:8a:67:97:7a:dc:8f:20:85:6f:22:ea:76: 31:29:7a:b9:88:9c:3c:04:a5:78:2d:6a:62:e4:e6: ba:56:9d:5e:2b:b2:63:10:b8:b6:5c:31:70:32:82: 69:11:27:89:41:07:53:14:d3:19:f5:71:68:93:8c: f9:f7:77:55:13:1f:15:78:3d:70:19:55:ee:ea:b4: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:1D:9A:21:DB:36:F2:B3:94:FD:D9:76:0E:83:AC:8C:AC:8E:57 X509v3 Authority Key Identifier: keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3d:82:0e:66:d3:7c:11:66:56:d7:cc:d9:07:b3:71:c2:4b: 66:ce:36:cc:fe:23:de:86:5e:00:26:6b:6b:2b:f4:02:4a:6b: 69:f1:3a:d6:da:9e:a5:36:a4:b6:5a:84:d5:5f:62:c8:0f:89: 6c:3f:81:21:61:00:fc:4a:53:d5:46:98:6f:68:62:58:9b:4c: ae:53:33:2f:fb:8f:ff:a8:50:4d:31:10:42:f2:06:e6:9b:f7: bf:37:17:35:fe:83:c8:54:1d:f2:50:ed:00:2f:09:2d:81:bd: 62:31:5c:0d:27:c8:25:bd:67:bc:23:ca:66:d1:5d:18:4b:5c: 4c:bf:72:24:11:3e:99:ac:34:9d:b5:82:1b:c4:2f:c0:08:ee: 7b:3c:f9:74:4c:24:33:09:73:24:db:11:18:69:b8:c9:67:d5: 26:3d:94:ba:9c:68:8a:84:ca:1b:b3:99:88:fe:2a:dc:50:ba: 62:41:fc:b0:88:b3:cd:3c:0d:b9:95:11:06:20:4e:a9:ea:d8: dd:f0:15:a9:03:2a:e1:46:c3:a7:f9:b0:25:c0:61:04:27:15: 98:97:97:3f:5d:3a:db:5c:cd:e3:14:b4:1e:36:cb:d8:75:70: 79:56:40:41:02:3c:81:58:8e:83:5d:7c:a2:18:1e:32:09:6a: 76:12:2f:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Mjc3QzExMC8GA1UEBRMoRjMzOURBNjFEOTNBNDk0MTNFOTA3RkM1QkQxNkFGOTY4 REZFOUFEMDAeFw0yNTEyMjMwMTI1MzJaFw0yNTEyMzAwMTI1MzJaMBgxFjAUBgNV BAMMDTY5NDllZjhkLTQwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoYNuVA2QHGGKdlDaanYghHHfmKOpfbGpaBpfhHzCdqWBWMA/xyxiouMr6EOCu 9L8JF0+U6iJXY9quMUpfuUVblWuxpbAqGNY0sTMi0YFAuJPOQA48X5iahggQhBgP ZPf7umje3hWXUkJS8cVQwqj221+HQunbmscWgNwQtCGVjYjMaBZtITUiTzQZMEtg h+dlxCu2nNJ55HzOzjZoMtxcRbtX4iMrnpsN9NB25MoV23bls0DmpYpnl3rcjyCF byLqdjEpermInDwEpXgtamLk5rpWnV4rsmMQuLZcMXAygmkRJ4lBB1MU0xn1cWiT jPn3d1UTHxV4PXAZVe7qtMGvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcw8dmiHb NvKzlP3Zdg6DrIysjlcwHwYDVR0jBBgwFoAU8znaYdk6SUE+kH/FvRavlo3+mtAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNzdDL0I5N0M3Mzk2QzlG MjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VFLWtIX0Z2UmF2bG8zLW10 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHpuYVlkazZTVUUta0hfRnZSYXZsbzMtbXRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NzdDL0I5N0M3Mzk2QzlGMjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VF LWtIX0Z2UmF2bG8zLW10QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEo9gg5m03wRZlbXzNkHs3HCS2bONsz+I96GXgAma2sr9AJKa2nxOtba nqU2pLZahNVfYsgPiWw/gSFhAPxKU9VGmG9oYlibTK5TMy/7j/+oUE0xEELyBuab 9783FzX+g8hUHfJQ7QAvCS2BvWIxXA0nyCW9Z7wjymbRXRhLXEy/ciQRPpmsNJ21 ghvEL8AI7ns8+XRMJDMJcyTbERhpuMln1SY9lLqcaIqEyhuzmYj+KtxQumJB/LCI s808DbmVEQYgTqnq2N3wFakDKuFGw6f5sCXAYQQnFZiXlz9dOttczeMUtB42y9h1 cHlWQEECPIFYjoNdfKIYHjIJanYSLwU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:04 2025 by rpki-client