This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
File:                     8znaYdk6SUE-kH_FvRavlo3-mtA.mft (raw, json)
Hash identifier:          rdc8wtxxNpQvyjuuwzlkB4hQE08GmDcQyH0A/AEH1Go=
Subject key identifier:   34:4F:F2:5C:16:F9:80:43:B7:D9:52:F2:02:A0:78:26:7C:BE:1B:6B
Authority key identifier: F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0
Certificate issuer:       /CN=A913277C/serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
Manifest number:          021E
Signing time:             Fri 19 Dec 2025 01:37:38 +0000
Manifest this update:     Fri 19 Dec 2025 01:37:38 +0000
Manifest next update:     Fri 26 Dec 2025 01:37:38 +0000
Files and hashes:         1: 8znaYdk6SUE-kH_FvRavlo3-mtA.crl (hash: awn9s1LaKEdZsZKwc+ct2x4AOGjdXWkGJLtXzaP3ayY=)
                          2: 2737D20ED68411F0863107146AD3641D.roa (hash: W0ftfyUpGNJPK7aKdKdH7F5x28CQmHb8ftVhpHYN7OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl
                          rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 01:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913277C, serialNumber=F339DA61D93A49413E907FC5BD16AF968DFE9AD0
        Validity
            Not Before: Dec 19 01:37:38 2025 GMT
            Not After : Dec 26 01:37:38 2025 GMT
        Subject: CN=6944ac62-cd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:b0:e0:75:e9:42:7a:1e:da:7c:88:ba:2b:
                    3c:5c:5c:58:50:51:c9:cd:c3:fb:50:2d:97:e8:d8:
                    c3:81:23:d5:49:d7:99:36:24:3c:97:59:19:ab:31:
                    50:5a:e7:cd:80:14:d6:b3:d4:ba:dd:78:ad:32:e7:
                    03:9f:00:22:c7:d8:fc:5a:26:58:71:05:86:ff:93:
                    60:2d:e0:2d:a6:fb:88:88:80:fd:d5:7b:c3:61:2d:
                    a1:26:d2:38:ae:5a:eb:e9:c0:02:3f:71:aa:67:6b:
                    e9:4a:55:d2:d4:91:f4:69:f4:82:12:74:fb:0c:0e:
                    a9:7c:75:51:58:0b:26:77:8c:0e:8c:bd:1c:ed:88:
                    ba:ae:bd:69:4e:39:b3:a0:44:e2:6f:ab:12:c9:12:
                    33:0f:34:d0:21:44:c1:f8:a1:5f:13:b6:94:d7:eb:
                    85:e5:40:49:f2:42:03:8f:16:f3:39:7c:9e:42:2c:
                    d8:a8:b4:32:e0:97:43:f9:fa:82:fc:11:a1:9d:f4:
                    02:5b:52:55:6c:66:e2:fb:d5:25:ed:f4:6b:81:8b:
                    c1:7c:0d:a7:63:5c:02:7b:b5:d7:23:68:33:9a:b3:
                    9b:7f:8b:ec:22:88:21:7b:75:0a:2f:58:12:58:6c:
                    08:11:91:0c:21:05:ef:43:4a:e2:05:b2:c5:91:bf:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4F:F2:5C:16:F9:80:43:B7:D9:52:F2:02:A0:78:26:7C:BE:1B:6B
            X509v3 Authority Key Identifier:
                keyid:F3:39:DA:61:D9:3A:49:41:3E:90:7F:C5:BD:16:AF:96:8D:FE:9A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8znaYdk6SUE-kH_FvRavlo3-mtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/8znaYdk6SUE-kH_FvRavlo3-mtA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:73:f5:fa:7e:8c:cb:42:62:08:f8:ce:68:c6:50:ce:69:
         b9:f2:0e:ce:72:51:27:91:27:89:fd:a7:fe:03:43:46:5b:7d:
         e9:08:3a:cf:56:e7:82:1b:29:97:bb:d6:62:78:b2:35:8c:0c:
         ec:8a:40:c4:6f:63:5b:7e:b7:82:ff:e7:42:0d:db:e6:e1:92:
         ba:4b:44:89:4e:8e:e4:2e:e1:3c:4f:0d:cb:f1:cf:28:c5:e7:
         40:43:ec:b3:ee:63:c9:af:41:83:95:40:b9:5f:c3:94:a9:fe:
         79:4d:91:46:85:fa:e6:fb:d5:06:11:5f:87:3d:2b:28:4b:2e:
         d1:51:c7:ec:5a:5b:06:fa:62:33:d4:98:b5:74:1e:5b:9b:f1:
         3b:7c:99:02:b5:a7:04:2e:fa:18:f0:b9:81:4b:e2:53:cc:66:
         dc:b3:2c:dd:1f:72:39:9f:a4:29:7a:19:b4:7e:29:e1:ed:b4:
         c4:9c:56:86:9c:8e:18:22:01:76:4d:c6:52:3a:a8:bb:b4:34:
         30:39:75:66:a0:d7:e0:0e:81:3d:a4:15:22:1c:21:ba:7a:70:
         68:10:f0:c1:8a:e9:5c:f5:71:b1:c0:de:c6:53:f2:ac:ad:a0:
         47:60:e7:d5:cd:26:47:dc:5d:1f:59:1d:7a:9a:65:d8:b4:e9:
         1b:9d:ab:6d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Mjc3QzExMC8GA1UEBRMoRjMzOURBNjFEOTNBNDk0MTNFOTA3RkM1QkQxNkFGOTY4
REZFOUFEMDAeFw0yNTEyMTkwMTM3MzhaFw0yNTEyMjYwMTM3MzhaMBgxFjAUBgNV
BAMMDTY5NDRhYzYyLWNkOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCkQ7DgdelCeh7afIi6KzxcXFhQUcnNw/tQLZfo2MOBI9VJ15k2JDyXWRmrMVBa
582AFNaz1LrdeK0y5wOfACLH2PxaJlhxBYb/k2At4C2m+4iIgP3Ve8NhLaEm0jiu
WuvpwAI/capna+lKVdLUkfRp9IISdPsMDql8dVFYCyZ3jA6MvRztiLquvWlOObOg
ROJvqxLJEjMPNNAhRMH4oV8TtpTX64XlQEnyQgOPFvM5fJ5CLNiotDLgl0P5+oL8
EaGd9AJbUlVsZuL71SXt9GuBi8F8DadjXAJ7tdcjaDOas5t/i+wiiCF7dQovWBJY
bAgRkQwhBe9DSuIFssWRv2hrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNE/yXBb5
gEO32VLyAqB4Jny+G2swHwYDVR0jBBgwFoAU8znaYdk6SUE+kH/FvRavlo3+mtAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNzdDL0I5N0M3Mzk2QzlG
MjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VFLWtIX0Z2UmF2bG8zLW10
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHpuYVlkazZTVUUta0hfRnZSYXZsbzMtbXRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy
NzdDL0I5N0M3Mzk2QzlGMjExRURBMUQ5OUU2NUM0RjlBRTAyLzh6bmFZZGs2U1VF
LWtIX0Z2UmF2bG8zLW10QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIrNc/X6fozLQmII+M5oxlDOabnyDs5yUSeRJ4n9p/4DQ0ZbfekIOs9W
54IbKZe71mJ4sjWMDOyKQMRvY1t+t4L/50IN2+bhkrpLRIlOjuQu4TxPDcvxzyjF
50BD7LPuY8mvQYOVQLlfw5Sp/nlNkUaF+ub71QYRX4c9KyhLLtFRx+xaWwb6YjPU
mLV0Hlub8Tt8mQK1pwQu+hjwuYFL4lPMZtyzLN0fcjmfpCl6GbR+KeHttMScVoac
jhgiAXZNxlI6qLu0NDA5dWag1+AOgT2kFSIcIbp6cGgQ8MGK6Vz1cbHA3sZT8qyt
oEdg59XNJkfcXR9ZHXqaZdi06Rudq20=
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:32 2025 by rpki-client