This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier: 5XiNf1YpbuaOXCyz40w/7feDtYmOyafEIdvJlW/O854=
Subject key identifier: 90:1F:6D:42:83:01:C6:CD:E1:01:99:AE:4A:45:B1:15:2A:C6:27:20
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial: 04C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number: 04BF
Signing time: Thu 18 Dec 2025 23:12:25 +0000
Manifest this update: Thu 18 Dec 2025 23:12:25 +0000
Manifest next update: Thu 25 Dec 2025 23:12:25 +0000
Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: koNfSue1Um+TmVxOfwhw4V5PGA/ImdSdLPLOhaadqCE=)
2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Validity
Not Before: Dec 18 23:12:25 2025 GMT
Not After : Dec 25 23:12:25 2025 GMT
Subject: CN=69448a59-d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:a8:13:71:c8:3e:a9:87:6e:77:60:25:b4:
67:66:50:08:28:4a:90:24:34:bc:7e:7f:95:f7:a3:
68:8b:22:71:e4:18:97:ff:21:e0:3b:4e:de:f5:59:
c4:89:7e:f9:c2:19:96:4b:33:93:36:dc:d8:61:f0:
c7:3b:70:29:ea:2d:6b:52:ac:94:22:25:37:3c:1f:
01:0c:34:ed:e1:da:d3:6d:31:56:21:de:33:b7:69:
6f:77:80:e4:8e:13:96:85:01:62:a7:8d:d1:63:64:
b7:5d:29:e1:53:7a:e8:0e:93:6d:06:a5:99:cd:46:
98:ca:45:16:17:0e:28:5d:55:83:15:52:ba:1c:14:
41:18:5b:3c:26:99:60:7e:a6:1d:9a:c6:78:fb:22:
2f:89:cd:15:4e:b5:54:5b:b5:2a:19:ca:71:4a:e1:
e0:00:7f:59:ae:17:02:7c:66:78:78:c4:98:bd:f7:
84:43:2e:7a:38:5f:f1:0d:11:f7:c6:89:30:7c:04:
68:32:b7:06:fe:c3:1e:61:4e:3f:0c:35:15:ae:69:
b3:fc:66:7f:a7:83:44:16:b9:e7:30:fb:06:9b:04:
b0:11:e2:2a:ce:a2:b9:56:b1:63:16:a0:53:0a:74:
ec:04:4b:1b:2c:2f:6f:41:fc:eb:23:84:5c:a9:69:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:6D:42:83:01:C6:CD:E1:01:99:AE:4A:45:B1:15:2A:C6:27:20
X509v3 Authority Key Identifier:
keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:2a:7f:1e:9f:1e:7b:8b:af:75:da:3f:da:02:52:90:4f:
b1:a6:5e:13:ad:3a:c4:ef:a4:83:62:71:f8:4b:d4:4c:b4:68:
3e:ed:d3:13:a0:2d:b9:ce:b2:ba:33:39:ff:6f:77:a8:bc:26:
cb:8a:10:23:fc:ee:78:f5:c5:9b:16:52:b1:dd:c8:f6:e8:dc:
62:57:45:93:e8:89:a7:1e:cb:dd:42:56:a0:29:f1:3f:42:94:
60:25:d4:54:3a:6c:fd:fe:8b:e0:4e:97:5a:d0:44:23:37:94:
fe:29:c5:99:1a:02:b1:e1:04:48:61:3c:57:18:e7:eb:39:65:
da:9c:b3:1c:62:d4:0a:44:22:bd:4e:15:d1:8c:63:05:43:18:
ff:83:34:30:b1:c7:13:ea:e9:6d:f7:5a:e6:21:c5:a3:02:6a:
93:98:a4:6c:43:17:fb:0e:e3:fa:e0:a1:a6:5c:ba:34:85:c7:
9f:92:05:83:03:c4:56:5c:00:f4:a3:ef:eb:b6:67:64:73:4e:
ec:6d:01:a1:43:a2:43:e3:4c:ee:d4:2f:42:60:9e:1b:8c:b8:
67:66:be:68:b3:40:15:f0:5c:99:a2:d7:54:cc:db:dd:ad:e7:
b6:2d:40:f9:e7:5c:12:ce:f8:6f:13:05:7e:99:72:5a:85:03:
fe:b8:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:40 2025 by rpki-client