This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
File: 8znaYdk6SUE-kH_FvRavlo3-mtA.mft (raw, json)
Hash identifier: p9JNWqF4RTbT2/7WbxdaACzkcKzTs6rNGr2mpo+XFQs=
Subject key identifier: 10:A8:D1:8C:09:39:3D:76:E0:14:B5:F4:D4:6D:0C:66:9B:2F:57:81
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Certificate issuer: /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
Manifest number: 020B
Signing time: Fri 05 Dec 2025 00:46:15 +0000
Manifest this update: Fri 05 Dec 2025 00:46:14 +0000
Manifest next update: Fri 12 Dec 2025 00:46:14 +0000
Files and hashes: 1: 8znaYdk6SUE-kH_FvRavlo3-mtA.crl (hash: 0rqII5avu6Fg36LDsBpSroyFqs4l7LajVXYnt/fx+SE=)
2: 7D77C698C05811F0BB78EE39C4F9AE02.roa (hash: jngcGens1UYCV2H59yZoYaDxMRp+Ya48t4t39KSQ5AY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Validity
Not Before: Dec 5 00:46:14 2025 GMT
Not After : Dec 12 00:46:14 2025 GMT
Subject: CN=69322b57-1e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:dc:9e:28:7b:26:27:29:f1:c3:c4:45:0a:
85:9c:2c:67:5a:f3:73:94:a0:fa:ba:19:6a:20:34:
81:94:b1:66:9c:7b:b7:87:1a:7d:3e:c3:d1:0e:76:
98:95:b6:85:79:00:b7:92:ca:11:fe:e7:fe:02:c7:
87:61:79:4d:2a:1f:a5:05:cc:1a:5b:41:51:df:bf:
c1:47:0d:5b:7e:0b:4f:6e:22:59:c8:69:a4:75:01:
80:07:ed:e1:92:ca:74:0e:c6:1e:2f:d8:0a:08:19:
6c:a4:9d:60:6c:a6:61:cb:9e:dc:d8:ef:99:30:92:
30:b6:57:99:03:45:74:85:d4:6f:e4:64:c6:45:3c:
08:ca:37:7f:4b:d5:8b:13:d4:6d:30:28:eb:fb:28:
da:e3:59:a0:5a:35:6d:c5:ca:c3:36:15:26:de:ca:
0b:2a:07:0e:1c:28:54:d5:11:a8:03:6e:e2:9c:e3:
95:8c:f1:1a:d4:c8:eb:af:23:f0:ee:11:f7:4a:db:
c7:0b:53:9c:ca:0a:b0:6e:58:6e:cf:bb:67:84:8d:
1b:5e:a7:90:32:1b:48:52:db:44:3d:33:45:7f:2f:
d8:29:98:4a:c6:3b:a8:d6:a0:fd:d9:bd:66:f0:81:
19:4b:31:8b:7b:c7:35:45:e1:49:59:5c:7e:fc:6a:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:D1:8C:09:39:3D:76:E0:14:B5:F4:D4:6D:0C:66:9B:2F:57:81
X509v3 Authority Key Identifier:
keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:04:ab:b7:78:6c:7c:29:a8:50:22:36:b1:c0:db:fd:c1:bf:
bb:a9:82:5e:bf:d0:c3:04:e6:9f:33:ca:e2:80:da:b2:72:7c:
78:fe:9f:2e:df:da:c0:eb:53:29:bb:52:ce:5a:ca:62:f1:7f:
5b:e8:51:35:57:f7:59:fb:16:be:2a:64:00:6d:e5:91:32:8b:
1f:1e:60:76:8a:ec:70:bb:14:a0:a6:6b:48:01:45:94:f0:da:
04:8c:63:cb:c4:6f:d3:2f:27:e5:60:d8:35:09:da:1b:c2:b3:
1a:89:57:f3:cf:45:38:29:21:4d:0c:88:2c:66:db:81:e6:06:
ce:90:b9:32:ce:9f:0c:01:f6:f7:16:58:5b:16:61:2a:cf:d9:
91:41:61:50:d9:cc:b5:a0:50:28:1e:29:73:db:9f:f8:44:0e:
55:eb:70:56:2d:bf:b0:6c:93:58:5b:23:20:cf:e8:03:a9:a8:
7e:a1:3e:6c:7c:5d:09:c2:60:b7:91:ce:a6:bc:e6:69:02:3b:
2a:e6:44:e8:6d:97:d6:b0:4d:ae:0c:43:54:03:50:5b:dd:05:
a5:57:72:90:ad:ee:6b:c0:7f:9a:ee:cc:42:d8:97:f6:c2:92:
82:bd:d0:3f:1f:7b:87:6e:09:86:ad:11:c7:4e:d2:c2:f6:3b:
d5:09:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:45:19 2025 by rpki-client