This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File: P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier: KeUWnywAT2LrnVPShSGU68ZQt2eblTvlq3n3vNko92g=
Subject key identifier: 46:2E:07:F9:AB:A3:27:7F:23:36:99:C9:CF:06:91:47:7E:E5:A5:AA
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer: /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial: 0821
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number: 0819
Signing time: Sat 06 Dec 2025 20:01:28 +0000
Manifest this update: Sat 06 Dec 2025 20:01:27 +0000
Manifest next update: Sat 13 Dec 2025 20:01:27 +0000
Files and hashes: 1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: DnoKfE6b0N0X8MhERK3bL97mxr/4BGLo7WOXRfVazW8=)
2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jObAEaW9jlDTMyIb6A8JZqjslqhvlPIsAzJOzv+NnRY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Validity
Not Before: Dec 6 20:01:27 2025 GMT
Not After : Dec 13 20:01:27 2025 GMT
Subject: CN=69348b98-5d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:52:2f:df:56:85:10:c3:03:33:78:37:f5:
b6:28:96:11:2d:6a:67:58:e6:bb:af:a2:57:90:ac:
47:74:47:d2:33:1d:04:41:36:8b:44:55:bc:5d:7f:
a5:12:bb:14:49:d1:c0:02:88:9d:7a:6c:db:56:92:
3d:a5:07:36:e8:de:0f:b7:45:ae:88:54:4d:bc:a9:
fc:66:73:03:a5:c8:e9:b2:8e:ae:58:a4:3f:75:4d:
9d:8f:21:86:d3:54:9b:62:9b:f9:b0:cb:c4:32:1b:
64:e2:06:6c:df:35:b8:a0:2b:cd:ba:eb:1b:d0:32:
1c:8e:17:67:e2:2c:f6:c8:27:db:ff:8b:e1:12:5d:
1e:0e:12:2e:6f:10:36:70:cf:0e:39:f3:c8:d4:72:
41:3f:ed:59:87:32:2e:3b:df:ff:88:42:a4:fe:c1:
c1:4d:3a:39:33:a1:c9:94:50:f8:7c:41:5f:78:98:
1d:2a:94:4b:c3:95:70:75:ce:9c:a5:64:0e:ce:c6:
53:dd:08:70:a8:a4:6c:68:d6:52:f4:7d:05:3a:07:
8d:9b:d6:02:db:9a:dd:da:b1:22:cc:6b:5b:18:f2:
ab:c5:f2:ba:91:99:11:0e:8e:a4:bc:c3:58:c6:34:
eb:ca:1c:e0:8a:58:f8:f8:a5:fb:56:d1:a0:48:f0:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:07:F9:AB:A3:27:7F:23:36:99:C9:CF:06:91:47:7E:E5:A5:AA
X509v3 Authority Key Identifier:
keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:b8:a7:28:20:46:48:71:67:d7:ee:f2:7a:98:f1:f2:ab:
62:45:0f:2d:da:46:f8:42:3f:58:4e:8c:9e:f6:f5:d8:a0:ce:
34:95:23:46:96:38:fe:f0:ad:c7:c8:d4:13:b2:85:42:15:95:
4d:cf:87:63:eb:d2:db:60:7b:46:f3:cf:26:7f:27:7e:d2:fd:
0e:0d:bd:6c:60:60:f8:51:d7:7e:9d:05:0d:61:f7:01:60:68:
1b:e5:83:6b:18:86:20:d2:54:ef:41:bb:14:7f:0d:96:6b:11:
17:0f:75:29:d1:f3:8c:e1:06:01:6e:35:65:ac:12:de:13:16:
40:54:38:bf:4d:54:a3:2c:1a:6b:47:3f:68:70:2a:eb:fc:8d:
fc:97:2c:df:02:a9:f5:f7:15:c7:cc:13:d2:fd:d2:fb:63:6d:
d8:61:5a:de:2d:45:96:7d:7e:5b:09:83:c3:2e:7e:9e:1d:73:
89:69:9d:32:31:4e:7a:29:9a:4f:44:11:cd:4e:dd:3d:d0:d6:
b5:46:89:1f:22:8f:a2:9a:4f:d4:2c:6b:bb:93:73:17:92:b2:
42:bf:e9:04:2b:9c:77:25:82:64:40:8e:29:ca:69:e1:1f:8f:
0e:31:fb:fa:1e:e8:88:4c:d5:63:d7:42:74:e8:6d:8e:26:63:
ba:7a:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:29 2025 by rpki-client