This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json) Hash identifier: Q73gPYjkztnHQxKjO3/smZ0R4MxRbnesfOI8+/i2uHQ= Subject key identifier: 29:25:C6:4A:DF:BC:48:49:74:6F:F6:AB:ED:B4:F3:18:E8:8E:BD:B9 Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft Manifest number: 0821 Signing time: Mon 22 Dec 2025 20:14:51 +0000 Manifest this update: Mon 22 Dec 2025 20:14:50 +0000 Manifest next update: Mon 29 Dec 2025 20:14:50 +0000 Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: 8NkbownRrI9qjD7Qr4Y4mKKUWjY89y7FWZtCXeH15sE=) 2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jObAEaW9jlDTMyIb6A8JZqjslqhvlPIsAzJOzv+NnRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094 Validity Not Before: Dec 22 20:14:50 2025 GMT Not After : Dec 29 20:14:50 2025 GMT Subject: CN=6949a6bb-5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:51:b3:fc:05:c2:7d:8c:43:a7:6e:56:77: 48:07:64:3d:b9:96:e5:d1:ba:e4:10:cc:e6:7e:c7: d9:8e:67:79:1d:e9:b9:73:5d:52:be:58:0e:51:63: 4d:3d:76:df:ea:ad:fe:50:c0:4a:5a:7f:20:4e:b7: f1:16:dc:85:c0:ca:f1:a6:87:7d:fa:8d:d7:44:8e: f7:84:d9:31:74:78:e8:b1:83:58:96:1a:53:f9:d7: c2:98:f0:4e:ea:20:35:e0:d1:19:f0:06:b5:3a:6d: ef:bd:cf:73:04:07:64:15:48:af:89:0a:92:d9:e7: 82:24:46:c8:94:b2:3f:e8:89:1b:3b:b4:64:08:5f: bf:08:05:5f:8d:f5:60:d7:43:b6:45:21:51:09:61: 59:94:9c:9f:06:69:8c:5a:11:cd:7d:3a:40:ba:fd: 2b:b2:ea:ac:c2:10:1c:50:13:37:1b:4f:29:08:7c: 3d:4a:d9:7d:a5:55:43:19:cc:dc:21:91:0a:c0:8c: c8:d2:f8:99:02:0c:6f:0b:5a:fe:00:d6:cc:79:75: 7f:3f:4a:da:e5:3b:32:fa:24:bd:e5:08:e1:1c:9f: 80:6c:3d:1a:41:51:d8:00:c9:87:d7:4a:03:3a:96: 64:9f:a3:ad:6a:72:7f:ae:fe:a7:5a:73:a0:e3:81: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:25:C6:4A:DF:BC:48:49:74:6F:F6:AB:ED:B4:F3:18:E8:8E:BD:B9 X509v3 Authority Key Identifier: keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:47:87:b0:1d:61:3d:0e:1e:6a:a6:bc:97:d1:cb:25:99:e6: a2:9d:57:9d:fe:56:4d:d3:e4:69:28:7b:22:55:55:a2:ed:a4: 56:c9:64:3d:14:9a:71:c3:d5:32:5b:32:a9:6a:8d:62:57:b4: 43:75:fe:ec:cd:30:e4:80:71:97:3c:00:9f:40:bc:37:30:04: b4:40:98:b5:1e:7f:3d:f7:20:97:53:54:cf:e1:21:d9:bd:71: 7e:9e:9b:bc:7d:9b:3e:fa:0c:19:18:6f:02:b4:6b:12:cc:d6: b5:3f:fd:bb:63:ee:60:63:11:19:b2:26:0b:04:8c:df:24:f7: 8c:6b:f7:9f:bc:e3:6f:03:54:f1:b7:33:d9:96:27:29:9c:16: fa:32:29:57:60:f6:0e:ff:dc:55:12:83:43:d9:eb:69:4f:c9: ae:95:57:1b:c0:d6:04:5e:74:44:82:8b:d3:24:97:ab:85:78: f8:3b:e7:ec:15:d6:5e:97:f7:32:df:69:94:26:dd:65:dc:06: 17:8b:47:59:5b:c0:2b:d9:d0:89:ba:19:1c:8b:99:0f:02:f6: 89:fc:05:c6:0e:49:7a:55:13:06:c4:6b:4f:98:f7:02:f3:49: f2:78:c9:d9:48:b5:16:a9:83:f0:ad:35:19:d8:50:61:62:ce: 0c:e1:6d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk4OEYxMTAvBgNVBAUTKDNGRTYwMzFGMjU1NjdBNDU0N0NERTE3MzFBMkQ4MTRE Qjg2RTIwOTQwHhcNMjUxMjIyMjAxNDUwWhcNMjUxMjI5MjAxNDUwWjAYMRYwFAYD VQQDDA02OTQ5YTZiYi01ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoVRs/wFwn2MQ6duVndIB2Q9uZbl0brkEMzmfsfZjmd5Hem5c11SvlgOUWNN PXbf6q3+UMBKWn8gTrfxFtyFwMrxpod9+o3XRI73hNkxdHjosYNYlhpT+dfCmPBO 6iA14NEZ8Aa1Om3vvc9zBAdkFUiviQqS2eeCJEbIlLI/6IkbO7RkCF+/CAVfjfVg 10O2RSFRCWFZlJyfBmmMWhHNfTpAuv0rsuqswhAcUBM3G08pCHw9Stl9pVVDGczc IZEKwIzI0viZAgxvC1r+ANbMeXV/P0ra5Tsy+iS95QjhHJ+AbD0aQVHYAMmH10oD OpZkn6OtanJ/rv6nWnOg44HZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCklxkrf vEhJdG/2q+208xjojr25MB8GA1UdIwQYMBaAFD/mAx8lVnpFR83hcxotgU24biCU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTg4Ri8xOTI0N0ZCQUZF MjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2VrVkh6ZUZ6R2kyQlRiaHVJ SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AtWURIeVZXZWtWSHplRnpHaTJCVGJodUlKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTg4Ri8xOTI0N0ZCQUZFMjUxMUVBOUNDMTBDNENDNEY5QUUwMi9QLVlESHlWV2Vr Vkh6ZUZ6R2kyQlRiaHVJSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbR4ewHWE9Dh5qpryX0cslmeainVed/lZN0+RpKHsiVVWi7aRWyWQ9 FJpxw9UyWzKpao1iV7RDdf7szTDkgHGXPACfQLw3MAS0QJi1Hn899yCXU1TP4SHZ vXF+npu8fZs++gwZGG8CtGsSzNa1P/27Y+5gYxEZsiYLBIzfJPeMa/efvONvA1Tx tzPZlicpnBb6MilXYPYO/9xVEoND2etpT8mulVcbwNYEXnREgovTJJerhXj4O+fs FdZel/cy32mUJt1l3AYXi0dZW8Ar2dCJuhkci5kPAvaJ/AXGDkl6VRMGxGtPmPcC 80nyeMnZSLUWqYPwrTUZ2FBhYs4M4W0T -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:17 2025 by rpki-client