This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          3BtvPBYqZqmYyALrDSv1QPUwWXILFel6kivQnPGlW4A=
Subject key identifier:   D4:46:C0:91:63:8C:46:B9:6D:54:C9:35:C3:D7:C2:CF:E0:33:64:77
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          F3
Signing time:             Fri 19 Dec 2025 05:12:37 +0000
Manifest this update:     Fri 19 Dec 2025 05:12:37 +0000
Manifest next update:     Fri 26 Dec 2025 05:12:37 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: LVr9uf0dEmhewQYIl4HFysxfR8dIh7hcaKjPZ5maXXI=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 05:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Dec 19 05:12:37 2025 GMT
            Not After : Dec 26 05:12:37 2025 GMT
        Subject: CN=6944dec5-cbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:ec:a7:e7:ab:57:95:79:e8:dc:2d:75:9c:
                    cf:39:7c:a4:3b:6f:27:d2:43:ef:07:bf:2a:ab:e1:
                    8b:fd:56:e5:95:1d:11:e0:fa:b7:1b:0e:90:f9:3f:
                    fd:3a:03:72:1a:b8:ac:01:60:02:6f:c8:2c:c9:80:
                    18:08:44:e2:1b:0a:48:59:66:01:40:e6:24:4d:d8:
                    65:37:8b:fd:65:7c:f0:d2:75:01:d6:10:b5:fe:19:
                    09:b9:d7:36:83:1a:fb:63:98:01:b7:34:b8:9b:a2:
                    8b:0c:5e:87:44:28:ee:da:37:8b:3a:f3:5c:42:de:
                    40:c2:18:a2:ea:3b:bd:9b:76:0e:41:1c:4c:fb:23:
                    dc:f1:df:a4:02:a6:30:d7:ab:44:59:99:34:7d:47:
                    0b:02:a6:72:b1:f2:5e:de:4d:89:d8:47:6e:38:5d:
                    cc:c1:32:6f:33:bf:fa:66:70:65:0b:c3:f6:14:0c:
                    f8:74:13:28:1e:f2:f9:4c:d6:8c:26:4c:fb:c0:d6:
                    cc:d1:09:7b:4a:6f:17:b2:22:6a:3f:3b:23:2a:96:
                    e8:b8:1b:72:40:6a:46:98:1a:48:a0:20:31:c6:8e:
                    25:75:3f:8e:97:c4:b8:93:15:f4:84:1b:4b:bd:15:
                    87:bd:bd:ec:d6:02:f9:f3:c2:51:d4:83:07:16:51:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:C0:91:63:8C:46:B9:6D:54:C9:35:C3:D7:C2:CF:E0:33:64:77
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:73:ce:c7:cd:46:ac:74:be:a8:d6:5d:67:17:d2:fc:c9:9e:
         87:c5:2c:91:87:8e:36:c8:8f:5e:26:e6:1f:cc:32:ab:aa:1d:
         28:e6:06:37:38:20:79:c4:ff:1f:a3:aa:51:c9:84:8f:9a:c5:
         0c:cd:87:95:a2:7e:a0:01:96:5a:5b:1e:8e:17:c8:69:d3:67:
         47:94:66:f1:95:c0:97:3c:a9:75:96:60:70:f8:14:43:ac:11:
         59:18:e3:45:d9:a8:b6:a1:98:42:4d:47:53:52:e7:32:f2:78:
         12:03:e6:db:0e:25:a3:86:47:6c:0b:1c:bb:f3:1b:22:14:ab:
         12:e2:6b:91:9f:b0:3b:7e:35:f8:eb:47:b4:10:12:08:b6:98:
         b1:2f:18:be:a5:cc:62:bf:f8:ef:12:1b:da:b0:ad:a9:98:91:
         b9:08:97:b9:d8:f6:ea:84:59:8e:5a:b5:48:50:d2:17:e8:0c:
         21:81:fc:19:65:dd:0d:3a:da:4d:32:37:ae:ac:4e:a4:8b:65:
         4e:f4:87:d4:76:1c:dc:59:de:33:04:56:db:28:d2:91:8e:33:
         a5:20:bc:22:4e:3e:8b:3e:fb:97:ea:59:99:cf:04:52:e8:fb:
         ba:dd:90:de:b2:04:10:1c:d4:a9:95:83:83:12:84:b4:43:0a:
         79:77:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:41:10 2025 by rpki-client