This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: jxj5X4JYY7e1YnPIomZItv0DFNdlKfzg9a3ue4cHfS4= Subject key identifier: 07:4A:A0:1D:57:8E:40:2D:60:D8:D3:E9:20:D3:16:0B:B0:25:67:9F Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 2723 Signing time: Sat 06 Dec 2025 15:25:52 +0000 Manifest this update: Sat 06 Dec 2025 15:25:51 +0000 Manifest next update: Sat 13 Dec 2025 15:25:51 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: w9uF3XfcxCirkWMXAcRWztxX+A7r0GCJbIARbqWVV3Q=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: rWS5j2TJ+tCGGvBtanx4musy7r04IRKphVI4Md/BpKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10055 (0x2747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C, serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Dec 6 15:25:51 2025 GMT Not After : Dec 13 15:25:51 2025 GMT Subject: CN=69344aff-28d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:72:91:cf:21:37:c9:c1:44:6c:aa:26:eb: 82:05:39:3c:f0:5d:62:b6:b1:e2:fa:fc:fc:c9:c7: 51:65:bc:03:aa:6f:7a:d9:d2:c7:9a:ea:7c:a2:cb: af:b5:7e:ec:a9:bb:e2:f0:d8:2f:b0:94:ea:58:92: 4e:24:c5:ac:b1:86:e5:7e:5d:65:62:e6:d9:b7:42: 07:e7:f1:b0:c4:a0:1e:38:a6:b7:42:c0:b9:03:bb: 74:ad:c9:04:ac:94:7d:db:00:4d:51:fc:af:fb:87: 22:b4:88:a1:2a:94:33:d4:91:e9:d7:8f:b6:a4:00: 3e:eb:6d:b1:6d:e2:f2:4a:85:7b:8d:0b:98:02:f4: 72:ef:c0:00:42:10:3d:e1:9e:73:6e:cb:da:9b:44: ba:d8:66:4e:98:d6:24:1d:1d:a2:5f:ed:f5:14:bf: 86:fc:fd:b4:eb:0f:d7:c6:56:e4:8d:1b:3d:78:40: d9:85:6f:74:2c:34:24:d2:71:ac:f7:be:68:01:69: a1:67:26:fa:37:a6:d3:03:55:67:c6:23:26:2f:0e: 7f:fe:fc:fd:aa:a2:07:95:f6:b6:a1:a0:9f:45:5c: 0b:39:c1:7f:b7:1f:76:02:fd:3c:a9:b0:bc:a7:a3: 9e:58:31:30:32:35:0c:6e:5f:34:62:ca:3a:90:04: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:A0:1D:57:8E:40:2D:60:D8:D3:E9:20:D3:16:0B:B0:25:67:9F X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2c:4a:53:8e:64:32:66:91:70:79:83:e5:d4:e2:dd:ee:39: 53:31:1f:c6:46:45:f7:26:49:00:75:ae:11:00:b4:26:38:ae: d1:65:14:3c:a2:5c:da:9f:12:1d:f5:e8:c2:ee:c4:de:8d:d0: 94:64:2f:9d:23:7f:b9:69:49:41:0f:ff:8e:ea:95:b6:92:07: 19:fd:30:a8:c7:bc:0e:77:72:02:52:07:ea:15:f9:1e:20:90: 10:9c:09:81:dd:c0:67:56:b0:2c:e4:cb:90:68:24:00:2a:e3: 38:87:86:5a:31:68:e3:4e:09:04:3a:30:ef:de:9d:95:94:46: 13:ca:72:6e:f4:c1:4f:52:22:e5:63:68:d9:f8:bf:12:b3:0e: bf:da:9f:b3:87:fb:13:07:25:3b:e7:39:80:b8:f7:89:78:2f: 24:c3:14:38:c4:96:29:33:b9:cb:c8:af:37:86:23:60:f9:4b: 09:65:e4:12:55:24:67:dd:19:e6:02:0f:29:c0:93:66:80:a9: c4:89:51:b1:cb:39:aa:f3:36:e6:86:6c:a6:45:6f:7c:9c:04: 1d:dc:44:e6:52:7b:59:95:dd:11:d6:1a:67:62:89:7a:73:5c: 97:e8:35:ec:0d:8c:5c:b2:54:5e:03:64:c3:b0:40:66:e0:03: e8:e8:da:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjUxMjA2MTUyNTUxWhcNMjUxMjEzMTUyNTUxWjAYMRYwFAYD VQQDEw02OTM0NGFmZi0yOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkdykc8hN8nBRGyqJuuCBTk88F1itrHi+vz8ycdRZbwDqm962dLHmup8osuv tX7sqbvi8NgvsJTqWJJOJMWssYblfl1lYubZt0IH5/GwxKAeOKa3QsC5A7t0rckE rJR92wBNUfyv+4citIihKpQz1JHp14+2pAA+622xbeLySoV7jQuYAvRy78AAQhA9 4Z5zbsvam0S62GZOmNYkHR2iX+31FL+G/P206w/XxlbkjRs9eEDZhW90LDQk0nGs 975oAWmhZyb6N6bTA1VnxiMmLw5//vz9qqIHlfa2oaCfRVwLOcF/tx92Av08qbC8 p6OeWDEwMjUMbl80Yso6kAQP2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdKoB1X jkAtYNjT6SDTFguwJWefMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcLEpTjmQyZpFweYPl1OLd7jlTMR/GRkX3JkkAda4RALQmOK7RZRQ8 olzanxId9ejC7sTejdCUZC+dI3+5aUlBD/+O6pW2kgcZ/TCox7wOd3ICUgfqFfke IJAQnAmB3cBnVrAs5MuQaCQAKuM4h4ZaMWjjTgkEOjDv3p2VlEYTynJu9MFPUiLl Y2jZ+L8Ssw6/2p+zh/sTByU75zmAuPeJeC8kwxQ4xJYpM7nLyK83hiNg+UsJZeQS VSRn3RnmAg8pwJNmgKnEiVGxyzmq8zbmhmymRW98nAQd3ETmUntZld0R1hpnYol6 c1yX6DXsDYxcslReA2TDsEBm4APo6Npm -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:42 2025 by rpki-client