This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: CRXLj0fCfy/JfVLZpXZod5qvy/Q3sYVzSSgic5XIx4A= Subject key identifier: 94:57:1C:7E:31:CB:DF:45:A7:4A:89:2D:FD:06:42:52:16:BB:93:8C Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: CE Signing time: Thu 25 Dec 2025 04:52:32 +0000 Manifest this update: Thu 25 Dec 2025 04:52:32 +0000 Manifest next update: Thu 01 Jan 2026 04:52:32 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: 9aRvhaM9vrnDocqZcngI83dOcWboY9ulbLF3g1ah50M=) 2: A60814E423E811F0B464ED15C4F9AE02.roa (hash: o8tRdqNOQIbG95SJjSBfAjf8aQSDYDsFIp6TlR0v9gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Dec 25 04:52:32 2025 GMT Not After : Jan 1 04:52:32 2026 GMT Subject: CN=694cc310-3462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:4c:37:f7:fa:03:f5:ab:a8:60:ff:2a:f0: b6:53:e6:95:24:5d:1b:0b:54:1c:5b:fb:79:13:5c: a9:8f:95:1d:4a:5a:2d:39:d3:d8:ee:0a:35:65:af: e9:42:27:0f:75:e8:8e:00:47:d8:05:66:92:ac:a5: 39:0f:f6:f8:24:06:17:73:58:fb:f0:ac:ff:cd:e5: af:f4:24:68:53:7b:e6:23:50:58:fd:c5:bc:24:c8: 90:bc:50:cc:f8:f1:8d:db:47:1a:8c:8d:6e:8a:02: ea:ae:b6:aa:48:2c:db:5f:c5:80:0c:31:6f:59:be: 68:72:6e:c3:01:cc:e5:54:60:fb:87:45:e5:48:7d: 02:f4:07:9b:7d:df:da:61:eb:cc:f6:b5:62:66:1f: 44:22:13:1f:17:98:a7:0c:a9:cb:ca:c4:c8:ff:40: b7:f3:a0:b0:ef:71:d6:9c:4e:9a:52:87:c5:1a:44: 45:2c:61:2b:07:8f:b4:a0:59:da:23:a1:e5:25:5d: e5:ab:76:f4:d3:ea:c7:46:5b:86:53:96:34:05:ec: 1e:56:fc:a2:cc:ae:43:4d:fe:99:f8:4e:7d:0c:10: b2:e2:63:a5:8f:5a:27:a6:21:99:a7:69:9e:dc:9c: c6:e7:dc:3d:db:fe:2b:47:54:93:72:9f:ba:c9:c2: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:1C:7E:31:CB:DF:45:A7:4A:89:2D:FD:06:42:52:16:BB:93:8C X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:24:cd:1f:21:41:e9:be:e4:c4:3a:1e:87:90:45:ba:3a:e5: 32:f7:d3:b0:f0:a9:29:4e:e9:36:bd:ad:7d:4f:10:ac:50:45: ab:c2:1b:0f:36:81:49:a7:3a:56:c5:de:f7:1d:06:ea:92:a0: b6:3f:5d:cb:b0:12:5f:8d:26:b8:c8:b6:23:dd:de:3b:fa:5f: c8:d4:bf:22:49:dc:1b:7a:1d:f2:9b:46:98:b2:7a:7a:7e:c6: 71:e1:46:7f:4d:19:99:26:25:39:62:5b:3a:2c:01:b3:5c:87: f2:c0:ff:d1:64:46:be:ab:78:8d:20:9f:c1:7d:49:f1:15:2d: af:ad:17:28:a0:5f:f3:b1:8b:be:2c:f0:c2:8a:6d:f9:6b:e1: be:a7:34:cc:46:22:78:1e:9f:84:52:2e:29:5c:d4:44:ef:a6: 60:cc:30:eb:36:b2:1d:5f:ca:37:86:ed:8f:d4:84:c3:36:56: 60:b0:a0:bd:78:1e:cb:6b:eb:65:36:f7:85:f8:99:af:39:92: a9:a8:91:1b:40:93:7f:69:fa:5d:73:7e:c1:0f:dc:4b:fa:dd: a1:d6:23:68:16:4e:de:27:83:e6:f3:4a:cd:f3:24:da:27:d5: c5:50:75:bd:d5:4b:f6:bd:b8:69:e8:03:84:af:fc:f1:17:6b: 0e:5e:29:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA4OUIxMTAvBgNVBAUTKDNDNzY4RjBDMjMyM0Q0NkQzMjFFOEFDOTkzRTc1QjBC MUI4MjFFNTQwHhcNMjUxMjI1MDQ1MjMyWhcNMjYwMTAxMDQ1MjMyWjAYMRYwFAYD VQQDDA02OTRjYzMxMC0zNDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/NMN/f6A/WrqGD/KvC2U+aVJF0bC1QcW/t5E1ypj5UdSlotOdPY7go1Za/p QicPdeiOAEfYBWaSrKU5D/b4JAYXc1j78Kz/zeWv9CRoU3vmI1BY/cW8JMiQvFDM +PGN20cajI1uigLqrraqSCzbX8WADDFvWb5ocm7DAczlVGD7h0XlSH0C9Aebfd/a YevM9rViZh9EIhMfF5inDKnLysTI/0C386Cw73HWnE6aUofFGkRFLGErB4+0oFna I6HlJV3lq3b00+rHRluGU5Y0BeweVvyizK5DTf6Z+E59DBCy4mOlj1onpiGZp2me 3JzG59w92/4rR1STcp+6ycJQWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRXHH4x y99Fp0qJLf0GQlIWu5OMMB8GA1UdIwQYMBaAFDx2jwwjI9RtMh6KyZPnWwsbgh5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDg5Qi8xQkNENDNCNkIx MTExMUVGOEUyMzA1NkZDNEY5QUUwMi9QSGFQRENNajFHMHlIb3JKay1kYkN4dUNI bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDg5Qi8xQkNENDNCNkIxMTExMUVGOEUyMzA1NkZDNEY5QUUwMi9QSGFQRENNajFH MHlIb3JKay1kYkN4dUNIbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsJM0fIUHpvuTEOh6HkEW6OuUy99Ow8KkpTuk2va19TxCsUEWrwhsP NoFJpzpWxd73HQbqkqC2P13LsBJfjSa4yLYj3d47+l/I1L8iSdwbeh3ym0aYsnp6 fsZx4UZ/TRmZJiU5Yls6LAGzXIfywP/RZEa+q3iNIJ/BfUnxFS2vrRcooF/zsYu+ LPDCim35a+G+pzTMRiJ4Hp+EUi4pXNRE76ZgzDDrNrIdX8o3hu2P1ITDNlZgsKC9 eB7La+tlNveF+JmvOZKpqJEbQJN/afpdc37BD9xL+t2h1iNoFk7eJ4Pm80rN8yTa J9XFUHW91Uv2vbhp6AOEr/zxF2sOXimW -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:47 2025 by rpki-client