This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: TfBmkS61Aaww8p7TFQQLVeoPcgV9CCaM/hUrwURIGG4= Subject key identifier: 03:A9:78:25:E3:82:53:61:16:F4:4A:DD:EA:C8:B3:7D:A5:49:5C:9A Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 274F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 272B Signing time: Mon 22 Dec 2025 15:30:21 +0000 Manifest this update: Mon 22 Dec 2025 15:30:20 +0000 Manifest next update: Mon 29 Dec 2025 15:30:20 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: IFPSrGqaYDodq53N2iQKoAHDqxLjOtfcgWM70PWBpaE=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: rWS5j2TJ+tCGGvBtanx4musy7r04IRKphVI4Md/BpKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10063 (0x274f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Dec 22 15:30:20 2025 GMT Not After : Dec 29 15:30:20 2025 GMT Subject: CN=6949640c-d128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b9:09:a8:f5:4d:0b:f4:7d:c1:54:a0:58:ba: 5d:da:95:b1:c0:2e:12:5f:2b:63:35:1f:cf:ad:27: 30:8b:24:e8:0a:75:79:77:54:89:67:a7:d7:97:05: 0f:b7:a2:be:43:5b:06:30:fa:36:f9:8c:93:4f:53: ed:66:bf:2a:ce:ec:ea:99:1c:e9:1a:80:12:62:5e: ce:d9:c3:d0:c9:2c:b4:62:76:e2:71:4f:30:a5:90: ce:ca:4d:b8:46:fa:65:ce:68:fc:54:f1:55:15:4b: 22:25:23:1a:14:64:78:29:d6:b9:f5:de:eb:5f:6a: 0b:c3:1f:18:2b:58:6b:4f:fa:c6:1f:e1:d9:e0:cf: 05:31:89:f9:c3:f8:db:da:e2:17:2c:17:bc:46:7b: 73:cf:02:b9:26:8a:b0:47:e3:f3:21:e3:53:fc:dd: 8e:d1:25:0e:10:83:0a:8f:f7:72:f4:84:fb:c9:81: dc:3e:31:b8:d3:fd:af:ae:69:dc:ef:b9:f2:a3:9e: bc:2c:ca:18:b4:b0:24:40:0b:1f:04:25:7d:68:f3: 95:a1:1d:7f:be:f3:a8:b2:45:c4:81:ab:0b:6e:ca: 57:f9:b5:a1:a6:dc:09:f3:1e:e4:c3:26:56:c9:da: 1e:dd:3d:27:fb:ff:29:d5:79:1e:3b:e0:ca:4a:6c: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A9:78:25:E3:82:53:61:16:F4:4A:DD:EA:C8:B3:7D:A5:49:5C:9A X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d7:66:31:a8:cd:cd:c0:8a:1e:c4:27:d3:08:96:f1:8f:7e: 44:b4:bd:84:1e:6b:a7:c7:99:a7:27:27:68:55:50:20:68:db: 8a:9b:31:c5:36:6d:d7:ad:5c:ce:1c:8a:72:02:dc:cb:d0:27: b1:0c:f7:0e:4d:ed:3e:f9:e2:f6:ab:cf:5e:10:01:7a:1e:59: 9d:76:97:78:2a:61:72:e4:f1:a1:df:69:a3:2d:58:c8:f3:43: 3e:9b:68:60:cc:8f:67:95:4e:cc:b5:7f:71:94:b8:44:ee:99: 7d:e7:51:67:e9:3f:0f:59:df:56:c7:39:df:e3:45:41:bf:ed: aa:4e:c6:25:cb:2d:df:2d:43:85:03:9c:ef:57:a7:65:99:e6: b1:7a:75:7e:96:de:4c:70:1d:07:7a:c3:bc:a7:09:44:8d:5b: 24:a3:da:01:aa:de:ec:78:e9:d5:5a:1e:e3:7e:c3:fe:4e:54: 93:c4:94:21:d3:60:af:1c:5d:43:bd:87:41:d5:69:35:b4:cb: 8f:0f:35:46:06:dc:c9:42:7a:b0:0a:93:6f:7e:02:cb:46:8c: 53:57:24:87:d1:f6:95:a8:99:89:5e:52:05:3a:cb:f9:8a:51: ad:52:73:2d:ad:35:58:90:76:b4:83:c0:df:3a:47:56:ec:b5: 76:f6:35:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjUxMjIyMTUzMDIwWhcNMjUxMjI5MTUzMDIwWjAYMRYwFAYD VQQDDA02OTQ5NjQwYy1kMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rkJqPVNC/R9wVSgWLpd2pWxwC4SXytjNR/PrScwiyToCnV5d1SJZ6fXlwUP t6K+Q1sGMPo2+YyTT1PtZr8qzuzqmRzpGoASYl7O2cPQySy0YnbicU8wpZDOyk24 Rvplzmj8VPFVFUsiJSMaFGR4Kda59d7rX2oLwx8YK1hrT/rGH+HZ4M8FMYn5w/jb 2uIXLBe8RntzzwK5JoqwR+PzIeNT/N2O0SUOEIMKj/dy9IT7yYHcPjG40/2vrmnc 77nyo568LMoYtLAkQAsfBCV9aPOVoR1/vvOoskXEgasLbspX+bWhptwJ8x7kwyZW ydoe3T0n+/8p1XkeO+DKSmw4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOpeCXj glNhFvRK3erIs32lSVyaMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH12YxqM3NwIoexCfTCJbxj35EtL2EHmunx5mnJydoVVAgaNuKmzHF Nm3XrVzOHIpyAtzL0CexDPcOTe0++eL2q89eEAF6Hlmddpd4KmFy5PGh32mjLVjI 80M+m2hgzI9nlU7MtX9xlLhE7pl951Fn6T8PWd9Wxznf40VBv+2qTsYlyy3fLUOF A5zvV6dlmeaxenV+lt5McB0HesO8pwlEjVsko9oBqt7seOnVWh7jfsP+TlSTxJQh 02CvHF1DvYdB1Wk1tMuPDzVGBtzJQnqwCpNvfgLLRoxTVySH0faVqJmJXlIFOsv5 ilGtUnMtrTVYkHa0g8DfOkdW7LV29jXE -----END CERTIFICATE-----Generated at Wed Dec 24 02:21:34 2025 by rpki-client