This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft File: Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft (raw, json) Hash identifier: xxWEB9plCf0alwCTzLCoH4EmzsaTuZ+q8kh9qZ2OscU= Subject key identifier: D8:83:CC:D4:8D:23:71:2F:4C:11:33:A2:DD:61:E4:6B:29:B1:E3:65 Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft Manifest number: 022B Signing time: Tue 23 Dec 2025 01:04:14 +0000 Manifest this update: Tue 23 Dec 2025 01:04:14 +0000 Manifest next update: Tue 30 Dec 2025 01:04:14 +0000 Files and hashes: 1: Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl (hash: 50JLzCZE4DyqHVV8SviUHrKJ/xs/8POJMw6Bzic1+zU=) 2: F56B35708C0011ED836F0539C4F9AE02.roa (hash: UfZMrxaB0qz4pcGB9q6XltymVUTNDZVQp2pT7h14Zqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: Dec 23 01:04:14 2025 GMT Not After : Dec 30 01:04:14 2025 GMT Subject: CN=6949ea8e-cf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:42:69:10:a4:83:6e:bf:4a:41:44:97:5a: 40:aa:be:bf:36:23:9f:c9:a6:37:01:22:24:b5:7c: 2e:fb:b6:4e:bf:4f:63:87:54:cd:6c:f3:14:90:83: 5f:8f:c4:73:8d:5f:93:bb:78:ea:0b:da:5c:d3:9a: 4d:a1:3c:1d:f6:56:c0:fe:49:7d:15:44:e8:26:44: 7e:2d:19:8f:10:b3:38:4b:8a:44:a1:59:df:66:11: 82:bf:e0:f5:81:34:9b:c6:7b:7b:cc:41:86:51:07: 58:ab:2a:b0:c9:e1:fb:ea:3b:34:e3:32:0c:e2:61: 80:ec:29:99:fe:a4:53:56:1b:fb:b1:73:50:4e:a6: 21:a6:6a:87:7a:eb:ef:cf:40:8b:29:73:41:e6:81: a8:77:10:5a:26:30:02:45:ee:74:ae:7e:23:de:98: 90:77:2e:73:8d:3c:ca:fa:53:64:56:8f:99:bc:0b: 6c:69:22:63:01:d2:4a:b8:29:af:4f:6b:ae:f4:9b: 18:0e:da:55:ff:c6:25:9b:36:1f:aa:2a:99:a1:ac: 0b:01:45:df:39:6b:e8:da:1d:c0:10:52:b5:5c:df: 5f:a0:38:f5:75:4e:3d:81:a3:77:fc:91:fa:fd:a8: c3:b0:2f:fa:22:fb:1b:23:09:40:30:5d:dc:02:03: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:CC:D4:8D:23:71:2F:4C:11:33:A2:DD:61:E4:6B:29:B1:E3:65 X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a1:6b:cc:28:d6:30:de:10:4b:d7:28:24:12:89:ef:db:50: f7:85:33:48:42:db:e8:c3:19:3e:ef:1d:1d:cc:a4:80:c0:f9: d9:59:4c:69:ce:34:31:af:8e:6e:b3:03:2c:91:73:08:b7:58: 89:24:f7:9f:01:da:e5:ff:d3:63:76:f6:5e:93:f7:34:ac:ba: 78:fd:d9:85:be:16:ce:8c:54:89:87:0d:6c:a8:d7:19:68:be: 5c:25:9c:3b:ac:71:1b:7c:2a:44:8d:19:cc:56:e2:2d:29:6c: c8:cd:34:23:cf:92:55:ac:df:61:9e:05:8c:3f:23:52:76:d9: d7:73:eb:28:86:82:ef:40:7b:27:91:26:2b:dc:de:1d:21:91: c3:45:eb:ae:d6:f4:31:f6:f3:29:e9:ba:a7:c2:0d:df:33:42: e3:ed:40:ad:63:20:72:72:10:8d:d4:03:19:18:46:6d:1a:6e: 2e:4f:50:b4:91:cc:4b:67:68:19:29:84:20:40:8f:60:c4:fd: ab:74:e6:c9:90:80:a1:d1:de:e9:29:f0:1d:6f:bc:2d:0f:da: 7e:79:2f:fc:8c:ff:87:23:52:92:c4:d7:dc:c6:ab:b0:1e:96: 0e:ea:77:68:f1:fa:70:e5:81:5b:84:00:34:9f:db:ee:6b:86: 4f:03:cb:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjUxMjIzMDEwNDE0WhcNMjUxMjMwMDEwNDE0WjAYMRYwFAYD VQQDDA02OTQ5ZWE4ZS1jZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1FCaRCkg26/SkFEl1pAqr6/NiOfyaY3ASIktXwu+7ZOv09jh1TNbPMUkINf j8RzjV+Tu3jqC9pc05pNoTwd9lbA/kl9FUToJkR+LRmPELM4S4pEoVnfZhGCv+D1 gTSbxnt7zEGGUQdYqyqwyeH76js04zIM4mGA7CmZ/qRTVhv7sXNQTqYhpmqHeuvv z0CLKXNB5oGodxBaJjACRe50rn4j3piQdy5zjTzK+lNkVo+ZvAtsaSJjAdJKuCmv T2uu9JsYDtpV/8YlmzYfqiqZoawLAUXfOWvo2h3AEFK1XN9foDj1dU49gaN3/JH6 /ajDsC/6IvsbIwlAMF3cAgOp/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiDzNSN I3EvTBEzot1h5GspseNlMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0I4Qi9ERDA0NzNGQThCRkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZN bmhiTE00SlVEVVlpTmdJVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqoWvMKNYw3hBL1ygkEonv21D3hTNIQtvowxk+7x0dzKSAwPnZWUxp zjQxr45uswMskXMIt1iJJPefAdrl/9NjdvZek/c0rLp4/dmFvhbOjFSJhw1sqNcZ aL5cJZw7rHEbfCpEjRnMVuItKWzIzTQjz5JVrN9hngWMPyNSdtnXc+sohoLvQHsn kSYr3N4dIZHDReuu1vQx9vMp6bqnwg3fM0Lj7UCtYyBychCN1AMZGEZtGm4uT1C0 kcxLZ2gZKYQgQI9gxP2rdObJkICh0d7pKfAdb7wtD9p+eS/8jP+HI1KSxNfcxquw HpYO6ndo8fpw5YFbhAA0n9vua4ZPA8ua -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:22 2025 by rpki-client