This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: lHe6jWJLSr6tGrkVzL49xRthbTvS70wAh/KAu3DHUy0= Subject key identifier: AB:0C:B2:7E:64:6A:25:0E:BA:82:FD:26:6C:28:BD:AF:89:FD:51:C7 Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 01BB Signing time: Tue 23 Dec 2025 02:08:38 +0000 Manifest this update: Tue 23 Dec 2025 02:08:37 +0000 Manifest next update: Tue 30 Dec 2025 02:08:37 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: 2YwCpAuNEhHq0wGO9hycwk388ucjDnKwd+3DIjc44YU=) 2: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: rYuzAQ2V3DCYFm8hLaFsEVJnKAGKcFikbLAjBKDZ9TQ=) 3: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: PXugVBDjMMSZngC/IAk1O9uisIYx3s5Ti9BVaDUEHRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Dec 23 02:08:37 2025 GMT Not After : Dec 30 02:08:37 2025 GMT Subject: CN=6949f9a6-2668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:9f:1f:eb:26:82:e1:54:bc:92:59:b4:86: 05:fe:56:65:7e:99:cf:85:a0:e0:83:51:9b:2d:10: 76:5c:66:91:57:06:3a:25:ff:91:ec:46:f6:58:d6: ef:e4:67:7d:5c:3a:82:71:59:77:9b:3e:86:01:7f: 18:18:dc:5d:1c:2a:a8:cf:20:0c:41:33:d7:74:39: dc:fc:22:e2:c2:51:82:3d:00:af:fe:16:40:9e:00: 76:ea:55:0f:fa:96:f0:ec:ac:b9:8b:73:e6:20:3e: 20:f1:50:6d:38:27:4a:2c:57:1c:d3:a2:2c:07:0e: e3:86:22:2a:f5:60:a5:67:a7:b7:97:a4:ca:54:0b: 88:cb:a5:d3:c9:7f:3e:cf:ac:94:b6:20:f5:00:3c: a3:e1:b6:66:c8:36:5c:2a:58:50:0c:0f:f7:24:95: 77:5f:40:01:4f:87:12:1d:16:85:9b:8f:b0:32:65: 69:e8:42:a2:ba:1b:c0:53:45:b4:cd:aa:cd:cb:52: ce:8e:9a:b4:c3:c4:df:7a:46:01:27:6c:8b:58:db: 8e:03:e9:3f:30:a3:0f:e0:e2:da:1d:3c:39:65:50: 8b:08:09:fa:fd:9d:b4:9f:0d:dc:3d:02:eb:9a:7c: c0:ea:7e:18:10:1d:b4:ee:17:c3:d8:57:2c:02:56: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:B2:7E:64:6A:25:0E:BA:82:FD:26:6C:28:BD:AF:89:FD:51:C7 X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9e:3b:2e:0d:82:ef:d6:d8:fd:52:94:83:67:29:d5:52:38: bc:d7:02:a9:e4:54:f0:da:87:fa:2e:f2:99:25:7d:90:85:ae: ee:b4:58:51:c8:b7:0a:31:33:f9:7e:95:3d:9c:42:5a:0b:27: 95:e9:c9:3b:cb:08:c4:cd:d3:64:6b:30:89:cc:3f:94:6b:06: a1:16:35:b3:5f:09:d2:16:84:1a:7b:6f:d2:d5:3a:c2:d4:aa: 27:61:2f:de:ec:67:c7:8e:cb:be:3f:14:ff:49:ea:58:5b:42: 8b:8d:4e:7f:57:a2:eb:f5:d5:9b:03:89:37:62:36:ca:92:86: b7:45:05:78:18:3a:82:18:16:26:60:56:ff:72:98:59:ac:16: d3:ad:57:45:ee:25:dc:56:5d:bd:d3:19:b1:74:8a:11:b2:db: b9:f5:16:b5:5b:91:c2:54:5f:b1:ee:b5:8e:24:98:f1:90:0a: d4:86:4f:e5:c1:c0:3a:a6:79:f5:de:c6:7a:78:c9:3b:9e:81: 35:93:c1:ea:3e:21:3f:a9:c3:ab:cd:26:8b:8d:9c:44:09:3b: 14:1e:ec:a1:ec:8f:c7:42:d8:9c:9e:97:15:c5:8a:a9:f3:2e: 7c:89:d8:0c:a0:23:65:bd:8b:2e:1c:aa:df:f1:88:6e:b5:f6: cd:cc:61:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjUxMjIzMDIwODM3WhcNMjUxMjMwMDIwODM3WjAYMRYwFAYD VQQDDA02OTQ5ZjlhNi0yNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWmfH+smguFUvJJZtIYF/lZlfpnPhaDgg1GbLRB2XGaRVwY6Jf+R7Eb2WNbv 5Gd9XDqCcVl3mz6GAX8YGNxdHCqozyAMQTPXdDnc/CLiwlGCPQCv/hZAngB26lUP +pbw7Ky5i3PmID4g8VBtOCdKLFcc06IsBw7jhiIq9WClZ6e3l6TKVAuIy6XTyX8+ z6yUtiD1ADyj4bZmyDZcKlhQDA/3JJV3X0ABT4cSHRaFm4+wMmVp6EKiuhvAU0W0 zarNy1LOjpq0w8TfekYBJ2yLWNuOA+k/MKMP4OLaHTw5ZVCLCAn6/Z20nw3cPQLr mnzA6n4YEB207hfD2FcsAlbQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsMsn5k aiUOuoL9Jmwova+J/VHHMB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHnjsuDYLv1tj9UpSDZynVUji81wKp5FTw2of6LvKZJX2Qha7utFhR yLcKMTP5fpU9nEJaCyeV6ck7ywjEzdNkazCJzD+UawahFjWzXwnSFoQae2/S1TrC 1KonYS/e7GfHjsu+PxT/SepYW0KLjU5/V6Lr9dWbA4k3YjbKkoa3RQV4GDqCGBYm YFb/cphZrBbTrVdF7iXcVl290xmxdIoRstu59Ra1W5HCVF+x7rWOJJjxkArUhk/l wcA6pnn13sZ6eMk7noE1k8HqPiE/qcOrzSaLjZxECTsUHuyh7I/HQticnpcVxYqp 8y58idgMoCNlvYsuHKrf8YhutfbNzGFk -----END CERTIFICATE-----Generated at Tue Dec 23 11:22:48 2025 by rpki-client