This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json)
Hash identifier: 6STeOovo1lGNnwcQFqmVPlUt54Zf2Qp4qHXPBk7ocAA=
Subject key identifier: 46:FE:E0:38:D5:48:E8:6B:0F:DD:15:D7:36:21:A2:85:F1:BF:EC:51
Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
Manifest number: 01C0
Signing time: Thu 01 Jan 2026 02:40:04 +0000
Manifest this update: Thu 01 Jan 2026 02:40:04 +0000
Manifest next update: Thu 08 Jan 2026 02:40:04 +0000
Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: X774PiiWNiI+FxpFH13m8YSyyG3tBJkq7L5aT1AAgeU=)
2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: PXugVBDjMMSZngC/IAk1O9uisIYx3s5Ti9BVaDUEHRI=)
3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: rYuzAQ2V3DCYFm8hLaFsEVJnKAGKcFikbLAjBKDZ9TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 02:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9
Validity
Not Before: Jan 1 02:40:04 2026 GMT
Not After : Jan 8 02:40:04 2026 GMT
Subject: CN=6955de84-26ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5c:4a:77:13:93:83:2e:7f:f1:94:94:c0:c5:
06:c4:8a:84:2c:ea:5e:83:b5:88:83:34:33:46:70:
10:97:6d:74:0a:78:0d:1b:fa:00:82:13:81:db:ee:
ab:70:ea:fe:7c:61:f4:51:c6:d6:ca:92:b3:26:8e:
46:32:0a:54:16:47:80:74:b3:d8:ad:b6:0f:8b:0f:
39:78:66:e7:fe:48:68:d1:ea:2a:cb:2e:ed:1c:fb:
79:f4:1e:02:b7:33:9b:c2:d9:b0:6d:4f:01:a5:c2:
da:1f:f6:71:53:ad:09:70:31:ff:1c:ff:d8:fc:e1:
71:23:12:30:a9:48:5d:e9:c6:4d:9a:ab:c0:f3:c2:
59:98:5b:b0:73:46:66:aa:f7:d0:01:c0:ad:b2:e0:
5f:e7:82:b9:d5:ab:bf:f1:1e:17:45:14:35:58:af:
81:ab:42:71:d8:ec:17:05:a4:1d:00:ca:14:ac:23:
db:40:c7:af:1d:6b:89:1b:3b:1f:76:2f:8a:a8:de:
3d:92:a8:e5:e6:e2:ab:4a:1a:4b:5a:8d:14:86:7a:
c6:30:04:45:18:54:3f:a5:22:1e:f8:50:f2:79:06:
a1:7a:ad:f5:36:dd:ce:6e:8e:3c:97:2f:48:81:ed:
85:5e:5a:39:ab:e2:02:6d:5a:96:d3:55:0d:e9:52:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:E0:38:D5:48:E8:6B:0F:DD:15:D7:36:21:A2:85:F1:BF:EC:51
X509v3 Authority Key Identifier:
keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6f:89:e6:c5:ef:ef:fe:5d:b9:6a:d6:2a:b0:8d:18:38:98:
f6:d8:68:99:30:e2:24:b3:b8:f9:30:10:e3:4f:7f:6f:c5:7e:
3d:6d:53:41:9c:2b:a0:a3:3b:e8:05:bf:31:ff:6c:23:a3:46:
17:6c:2c:56:3a:de:d4:20:cf:41:a8:a0:7d:00:b3:16:1c:b7:
f8:ef:0c:26:5f:0b:cc:6f:2a:78:5e:16:36:77:29:eb:ce:ec:
27:35:b1:f1:74:50:ab:73:ec:56:23:cc:a2:bd:f8:f0:8d:36:
1b:9a:53:aa:f3:2e:d8:7c:4a:61:74:38:66:bd:14:c0:bc:13:
67:db:f3:cc:38:85:4f:ce:10:ae:ca:30:47:73:2b:56:3f:95:
73:2e:3a:be:20:e8:06:25:6b:bd:ea:94:9d:5e:85:44:ad:c5:
4c:83:5d:01:ca:88:f2:3e:c3:99:75:b5:1c:15:71:cf:df:30:
cb:4c:26:a5:f9:5a:94:81:22:4e:7b:15:42:35:60:82:65:5e:
34:0f:c4:22:ad:75:5b:6d:3f:11:b8:90:01:2b:67:13:c9:7e:
72:c9:c7:48:34:5e:5c:82:fb:81:52:85:ce:97:6e:55:57:22:
db:d7:22:7a:0d:dd:9d:72:ce:67:7e:a4:50:7d:ca:72:a3:74:
7d:30:14:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG
MTkyQjhBRjkwHhcNMjYwMTAxMDI0MDA0WhcNMjYwMTA4MDI0MDA0WjAYMRYwFAYD
VQQDDA02OTU1ZGU4NC0yNmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+FxKdxOTgy5/8ZSUwMUGxIqELOpeg7WIgzQzRnAQl210CngNG/oAghOB2+6r
cOr+fGH0UcbWypKzJo5GMgpUFkeAdLPYrbYPiw85eGbn/kho0eoqyy7tHPt59B4C
tzObwtmwbU8BpcLaH/ZxU60JcDH/HP/Y/OFxIxIwqUhd6cZNmqvA88JZmFuwc0Zm
qvfQAcCtsuBf54K51au/8R4XRRQ1WK+Bq0Jx2OwXBaQdAMoUrCPbQMevHWuJGzsf
di+KqN49kqjl5uKrShpLWo0UhnrGMARFGFQ/pSIe+FDyeQaheq31Nt3Obo48ly9I
ge2FXlo5q+ICbVqW01UN6VLbUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb+4DjV
SOhrD90V1zYhooXxv+xRMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2
M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3
Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtb4nmxe/v/l25atYqsI0YOJj22GiZMOIks7j5MBDjT39vxX49bVNB
nCugozvoBb8x/2wjo0YXbCxWOt7UIM9BqKB9ALMWHLf47wwmXwvMbyp4XhY2dynr
zuwnNbHxdFCrc+xWI8yivfjwjTYbmlOq8y7YfEphdDhmvRTAvBNn2/PMOIVPzhCu
yjBHcytWP5VzLjq+IOgGJWu96pSdXoVErcVMg10ByojyPsOZdbUcFXHP3zDLTCal
+VqUgSJOexVCNWCCZV40D8QirXVbbT8RuJABK2cTyX5yycdINF5cgvuBUoXOl25V
VyLb1yJ6Dd2dcs5nfqRQfcpyo3R9MBSV
-----END CERTIFICATE-----
Generated at Fri Jan 2 23:23:08 2026 by rpki-client