This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: 66A4sFgM/w1F30LAFXou97vVBwzICUYAX8M98c5CKaw= Subject key identifier: 15:BA:21:F1:74:6C:B2:EF:80:05:5E:08:17:22:0D:E2:90:A1:D8:D2 Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0A7A Signing time: Mon 22 Dec 2025 21:48:37 +0000 Manifest this update: Mon 22 Dec 2025 21:48:36 +0000 Manifest next update: Mon 29 Dec 2025 21:48:36 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: lRt1JhI0z4Q5AqcVrK1BgQkrgye2Niy3LEu87gghGSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Dec 22 21:48:36 2025 GMT Not After : Dec 29 21:48:36 2025 GMT Subject: CN=6949bcb5-d359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:25:06:09:b8:50:54:a6:2c:3f:b3:32:93:30: a0:d7:39:b7:f9:f6:93:73:fd:c5:25:24:84:bb:1a: 86:ff:72:73:e9:3c:aa:8d:e6:5c:17:10:2e:ad:26: cc:84:17:8c:31:d0:a5:c5:9d:76:3f:f3:3b:b5:99: 4d:03:34:dd:1d:3c:3e:87:29:11:95:43:97:2e:31: 0a:95:95:7d:1d:93:07:65:1a:09:96:dc:b8:e0:8b: bd:61:97:fb:18:33:05:ab:18:d7:88:56:ee:02:fd: a1:4b:ec:22:e6:33:a6:75:b6:30:d5:13:a0:61:35: 16:1a:2e:18:6d:f9:c6:e2:62:ca:66:a9:fb:92:90: cf:a5:88:b2:71:a8:96:e6:ca:ea:c8:e7:9b:3f:72: 47:fb:a6:2e:fc:b5:2b:43:e1:4a:17:32:01:89:fc: 09:42:a7:48:3a:02:4f:36:e9:55:ca:bc:61:58:7d: d1:0f:a8:ef:bb:49:15:67:04:a4:18:2c:d2:9a:3b: 64:d5:f0:c6:7c:43:c9:57:cc:04:cd:cb:32:21:62: ad:75:2b:bb:ba:4c:e5:dd:eb:fe:c0:7d:5e:44:9f: 84:29:42:fe:73:ce:7f:73:99:d6:d1:be:bb:5e:c1: cd:22:95:6d:ef:35:08:6a:dd:56:df:03:02:3c:c4: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BA:21:F1:74:6C:B2:EF:80:05:5E:08:17:22:0D:E2:90:A1:D8:D2 X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:3e:ed:ab:f7:7b:c2:ba:fc:cb:6c:6d:84:22:86:d4:30:66: 3f:60:13:cc:29:40:12:b5:d0:3f:b6:2b:68:4c:68:6f:94:5b: d7:c1:07:69:c8:46:9b:d2:04:12:6f:2e:70:5f:c6:42:6f:7c: 3a:d6:ac:ff:28:84:8a:ad:b2:fc:33:07:64:03:cd:d9:95:0b: 27:bf:c9:1e:11:af:f6:b3:8e:5f:4d:26:d6:83:c7:38:b9:44: 3f:6b:2f:42:d9:45:7c:6e:a5:72:2a:43:72:03:8c:39:9f:4d: b6:48:bf:8b:86:9c:cf:2e:4c:26:a8:2c:a5:ac:35:db:94:d2: 7e:84:93:e2:e0:3e:b5:a3:d5:46:78:54:f8:29:6e:33:42:a6: 9d:71:da:12:5a:4c:7c:30:48:68:10:4b:04:24:74:e0:88:b5: f3:fe:00:0e:76:8f:66:53:c4:a6:79:dd:05:ac:a4:fc:75:f2: e5:37:44:93:3f:bf:ea:75:57:13:8f:47:1b:a0:47:3f:ec:39: 25:c6:9c:e2:01:86:b1:17:42:4c:00:ac:a8:d0:92:ae:12:86: e9:91:dc:75:81:20:fb:d1:62:bf:b0:be:64:c8:9b:89:d9:1a: 4a:d1:47:62:d9:f6:ed:f6:92:20:9a:13:bf:40:60:3e:07:61: 6b:72:df:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjUxMjIyMjE0ODM2WhcNMjUxMjI5MjE0ODM2WjAYMRYwFAYD VQQDDA02OTQ5YmNiNS1kMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCUGCbhQVKYsP7MykzCg1zm3+faTc/3FJSSEuxqG/3Jz6TyqjeZcFxAurSbM hBeMMdClxZ12P/M7tZlNAzTdHTw+hykRlUOXLjEKlZV9HZMHZRoJlty44Iu9YZf7 GDMFqxjXiFbuAv2hS+wi5jOmdbYw1ROgYTUWGi4YbfnG4mLKZqn7kpDPpYiycaiW 5srqyOebP3JH+6Yu/LUrQ+FKFzIBifwJQqdIOgJPNulVyrxhWH3RD6jvu0kVZwSk GCzSmjtk1fDGfEPJV8wEzcsyIWKtdSu7ukzl3ev+wH1eRJ+EKUL+c85/c5nW0b67 XsHNIpVt7zUIat1W3wMCPMRlzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBW6IfF0 bLLvgAVeCBciDeKQodjSMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8Pu2r93vCuvzLbG2EIobUMGY/YBPMKUAStdA/titoTGhvlFvXwQdp yEab0gQSby5wX8ZCb3w61qz/KISKrbL8MwdkA83ZlQsnv8keEa/2s45fTSbWg8c4 uUQ/ay9C2UV8bqVyKkNyA4w5n022SL+LhpzPLkwmqCylrDXblNJ+hJPi4D61o9VG eFT4KW4zQqadcdoSWkx8MEhoEEsEJHTgiLXz/gAOdo9mU8Smed0FrKT8dfLlN0ST P7/qdVcTj0cboEc/7DklxpziAYaxF0JMAKyo0JKuEobpkdx1gSD70WK/sL5kyJuJ 2RpK0Udi2fbt9pIgmhO/QGA+B2Frct+/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:13 2025 by rpki-client