This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft File: PyDCnh1-UV3z49hapE51H4Fycxo.mft (raw, json) Hash identifier: HQCKGg4GpkkwK+6I+xqtp8nwUW4nWZtd15hhwTZbKHU= Subject key identifier: AA:DD:3F:C5:9A:66:C3:28:A3:A1:06:B7:86:20:31:ED:27:37:AD:5E Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft Manifest number: 019A Signing time: Tue 23 Dec 2025 02:25:19 +0000 Manifest this update: Tue 23 Dec 2025 02:25:18 +0000 Manifest next update: Tue 30 Dec 2025 02:25:18 +0000 Files and hashes: 1: PyDCnh1-UV3z49hapE51H4Fycxo.crl (hash: uZNXOJE4YtgYNH3RI95T1klLFvLoIlC6Ih/MHg/IamA=) 2: 503E43126E5E11EEB39D9E48C4F9AE02.roa (hash: L+aSJH2lWC1anAfV1QDeoFg2+6ljff+C6eVKVad/Lj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Dec 23 02:25:18 2025 GMT Not After : Dec 30 02:25:18 2025 GMT Subject: CN=6949fd8e-086d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:97:17:8d:ee:27:c5:7e:87:30:45:09:83: a4:08:2a:2e:8b:65:77:98:ed:0b:9b:68:11:24:86: 7b:00:d9:4d:19:0e:74:f5:ed:6f:0a:38:b0:fb:d1: 5d:eb:a8:ce:7b:8c:84:64:58:0e:45:60:19:f2:5e: 7d:0e:67:a8:ce:00:d4:bc:59:ef:17:c6:39:30:1a: a1:bb:91:a5:50:fd:4d:8a:e8:a0:a1:d7:0f:30:8f: 44:24:bc:eb:22:38:5f:1a:32:01:6d:53:e1:c2:0d: b6:7f:2f:98:32:d8:fd:8b:64:ba:32:b2:5a:a9:49: cd:fc:0a:ff:33:cf:48:69:cc:85:2f:4c:d7:e5:94: 11:44:ee:d4:fc:5c:c1:55:20:27:61:fb:33:6c:8f: bd:af:aa:85:db:18:a7:5a:20:32:d9:1d:44:54:ea: 19:ee:83:30:eb:11:67:81:23:b7:86:b6:58:2c:85: 8b:68:df:82:bb:74:e4:be:0a:a4:b3:c2:54:87:af: 28:55:e5:98:25:29:4a:0d:b3:bf:ec:fd:42:f4:ae: e6:c4:9e:ff:12:2c:3e:06:81:8c:fc:03:e7:a8:6d: e7:88:ac:e8:aa:fc:6d:16:1e:b1:95:69:f9:64:cb: 2d:9c:38:62:ff:9a:5c:ec:1f:b9:8a:73:be:13:6d: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DD:3F:C5:9A:66:C3:28:A3:A1:06:B7:86:20:31:ED:27:37:AD:5E X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:38:d0:38:fa:49:47:9e:bb:62:e2:50:03:7d:d6:88:3f:a4: 20:2e:da:f6:ef:3d:8e:9a:72:81:a4:8f:d5:25:8b:dd:ce:4f: a9:40:97:95:57:07:59:9b:97:f8:09:32:b6:2a:e7:d9:b5:3f: 85:a4:70:1d:f3:dc:e6:a3:b1:a9:8a:99:ee:73:b6:6e:33:e6: 8a:89:b9:37:06:09:55:15:fd:24:7f:bf:9c:01:86:cd:b5:fb: 51:e9:28:7f:8f:75:c8:6d:d5:58:de:45:24:c7:e0:a7:50:30: 04:22:d3:7c:81:c6:1c:28:a3:7c:bb:42:c8:06:9e:35:30:c9: 95:c9:90:8d:45:32:93:89:7a:f5:13:2b:55:66:55:f3:33:ae: c6:92:45:4a:f6:43:d4:3c:84:c3:11:e4:57:7a:a8:ca:69:d1: 3c:c7:2b:1a:14:3c:50:11:51:41:8e:05:f2:61:36:f0:c9:e4: 36:67:99:47:e8:3f:2b:ff:42:be:fc:5b:12:4a:ce:a5:66:2f: 25:ea:d5:89:c3:c3:09:02:c5:f8:6c:1d:1c:fb:d9:4b:90:89: bc:57:2b:ec:2a:c9:88:29:24:b3:9c:bf:3d:bf:ba:bf:88:3a: 36:b8:f3:2a:75:cc:9b:e4:a5:e9:f1:c4:70:ff:c9:c7:fb:2f: e3:fe:0a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjUxMjIzMDIyNTE4WhcNMjUxMjMwMDIyNTE4WjAYMRYwFAYD VQQDDA02OTQ5ZmQ4ZS0wODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRCXF43uJ8V+hzBFCYOkCCoui2V3mO0Lm2gRJIZ7ANlNGQ509e1vCjiw+9Fd 66jOe4yEZFgORWAZ8l59DmeozgDUvFnvF8Y5MBqhu5GlUP1NiuigodcPMI9EJLzr IjhfGjIBbVPhwg22fy+YMtj9i2S6MrJaqUnN/Ar/M89IacyFL0zX5ZQRRO7U/FzB VSAnYfszbI+9r6qF2xinWiAy2R1EVOoZ7oMw6xFngSO3hrZYLIWLaN+Cu3Tkvgqk s8JUh68oVeWYJSlKDbO/7P1C9K7mxJ7/Eiw+BoGM/APnqG3niKzoqvxtFh6xlWn5 ZMstnDhi/5pc7B+5inO+E20GKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrdP8Wa ZsMoo6EGt4YgMe0nN61eMB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVW M3o0OWhhcEU1MUg0RnljeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYONA4+klHnrti4lADfdaIP6QgLtr27z2OmnKBpI/VJYvdzk+pQJeV VwdZm5f4CTK2KufZtT+FpHAd89zmo7Gpipnuc7ZuM+aKibk3BglVFf0kf7+cAYbN tftR6Sh/j3XIbdVY3kUkx+CnUDAEItN8gcYcKKN8u0LIBp41MMmVyZCNRTKTiXr1 EytVZlXzM67GkkVK9kPUPITDEeRXeqjKadE8xysaFDxQEVFBjgXyYTbwyeQ2Z5lH 6D8r/0K+/FsSSs6lZi8l6tWJw8MJAsX4bB0c+9lLkIm8VyvsKsmIKSSznL89v7q/ iDo2uPMqdcyb5KXp8cRw/8nH+y/j/grR -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:46 2025 by rpki-client