This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json)
Hash identifier: RVScs4g439hKqcscMWC40eAjxWI30tgftLi7dN6gBz4=
Subject key identifier: BB:09:F2:28:4B:8F:65:1A:B0:A6:E1:AA:1E:B4:DC:9F:CA:B3:71:E1
Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
Manifest number: 01FD
Signing time: Fri 19 Dec 2025 01:46:12 +0000
Manifest this update: Fri 19 Dec 2025 01:46:11 +0000
Manifest next update: Fri 26 Dec 2025 01:46:11 +0000
Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: 3J7pH4TKyLmlOojtJlvo9D7vlvHc5ZA1Of7tS6KyjCo=)
2: E761FB80118C11F0B9B8B26AC4F9AE02.roa (hash: /75uDbvkq2hvW+aFsSWLKYWGONv7oOopY70G/Ex1fRM=)
3: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: PhSrarlCbMwPtvT6PCvMaDG4Ioq8bEIWBn8LLBxKEUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18
Validity
Not Before: Dec 19 01:46:11 2025 GMT
Not After : Dec 26 01:46:11 2025 GMT
Subject: CN=6944ae64-4bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:d4:27:90:59:59:c0:ef:9a:27:3f:97:e3:
56:eb:f5:d1:f3:b5:9a:38:7b:1a:4e:91:92:ef:7a:
fe:98:8c:df:b9:63:0a:ba:54:aa:6c:56:71:14:16:
4b:07:7a:fe:11:f8:86:92:48:6f:50:15:b7:d3:56:
c4:41:b3:a2:78:9c:cd:3e:4d:62:81:20:1a:87:97:
cf:e1:09:4b:65:55:bd:e5:2f:fd:5e:4d:b6:36:d8:
6f:9c:b7:1a:00:5b:27:f4:b9:a3:fa:e8:8e:f6:98:
d4:7f:c6:02:cc:96:44:0c:9b:95:18:96:ce:2d:4b:
48:a0:2d:d5:ec:3b:44:37:3f:5a:85:bd:c4:58:38:
63:99:dd:6b:e4:81:7b:60:e6:58:12:48:40:4a:e1:
aa:b4:76:0c:13:a7:45:c5:90:23:85:98:96:67:7f:
37:43:cc:ae:28:ba:a4:c0:2c:7a:67:26:0c:10:f4:
1e:23:fe:6d:e1:dc:5b:80:ec:b9:e7:e7:4e:88:ee:
d0:95:14:4c:b8:e9:e1:aa:8d:e5:2e:73:ca:3c:f7:
fd:ef:0f:99:5d:80:54:40:ee:9a:45:77:a6:d9:ee:
14:af:85:b6:67:ad:1a:bc:07:82:95:38:ed:8f:39:
73:3a:3a:b5:c4:c4:a2:7c:31:a3:b6:67:cd:15:dc:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:F2:28:4B:8F:65:1A:B0:A6:E1:AA:1E:B4:DC:9F:CA:B3:71:E1
X509v3 Authority Key Identifier:
keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b9:33:94:2f:ea:73:61:bf:b0:96:de:0b:2a:02:c5:d5:82:
ed:3a:3e:a3:83:d9:cd:a3:a3:81:07:c7:1b:3a:02:bf:1b:f7:
e6:d3:2e:d4:e8:cf:3e:3a:6b:93:cd:e4:82:73:00:22:78:ba:
de:d1:53:a9:41:18:19:0c:a6:61:1a:3c:e3:6d:23:30:99:71:
61:1c:84:a7:bc:04:4d:d1:e4:31:47:72:46:7d:16:ee:ce:d1:
80:85:9b:82:cb:45:24:12:58:cf:01:b2:9f:2d:e8:3d:53:c8:
02:ca:34:9e:11:c1:ae:ff:54:28:35:c7:8b:53:62:29:9f:6b:
0b:1d:14:7b:4e:6e:fc:1b:fc:ea:6d:38:59:71:5d:2d:45:19:
07:cb:55:f7:05:53:c0:ce:67:e4:ce:9d:6b:db:7d:94:fc:eb:
a1:ba:01:86:26:cd:96:51:c9:08:f7:a1:08:21:8b:eb:a1:ec:
34:40:bb:a7:83:ac:cd:be:00:96:a0:49:c3:38:5d:01:ed:f3:
94:49:7d:fa:a3:e9:75:79:9b:b9:25:c7:36:67:9c:9f:f7:88:
fb:a0:b7:bd:b7:72:85:f7:ff:3e:bb:74:6b:57:a7:88:ce:f4:
db:27:db:0b:80:68:b4:26:79:14:f4:16:97:57:01:6e:d0:70:
28:ab:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:41:34 2025 by rpki-client