This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft File: phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json) Hash identifier: 5ZFGLivHRtMig9E+otfDqBNSGKISW6pbWJINOv4sHVI= Subject key identifier: 10:FF:EB:AF:B6:AF:FC:68:F4:D7:62:AA:DD:9F:51:0A:12:F2:BC:32 Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E Certificate issuer: /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft Manifest number: 04C1 Signing time: Mon 22 Dec 2025 22:57:14 +0000 Manifest this update: Mon 22 Dec 2025 22:57:14 +0000 Manifest next update: Mon 29 Dec 2025 22:57:14 +0000 Files and hashes: 1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: DbyVe2grmGwUzcEsiyFpKcVhHo42TOJFojg++3NTQbU=) 2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E Validity Not Before: Dec 22 22:57:14 2025 GMT Not After : Dec 29 22:57:14 2025 GMT Subject: CN=6949ccca-b73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:eb:a8:db:85:53:fd:93:27:ed:00:13:1f: f8:92:86:c0:2b:b9:2e:7b:b0:03:9a:80:b9:68:f9: ad:a8:49:a6:9b:d3:41:d8:50:4a:1c:76:ae:4a:7f: bd:12:af:6f:83:67:be:40:b4:1b:f6:1c:23:68:2b: cb:73:00:0f:fa:9c:a0:d1:3f:60:18:b3:d3:aa:ea: 63:27:1c:17:58:78:77:32:e9:52:37:cf:dc:9c:6d: d0:d4:a8:d6:46:2e:4b:af:f1:1a:09:34:b7:0c:3d: 27:a7:57:f5:f2:5f:e3:a2:bf:c7:97:fc:57:f7:e5: f5:76:f7:44:71:55:75:8a:8c:68:0d:ad:f1:52:78: 6f:0e:9a:08:e4:e6:d0:5f:f1:d4:aa:e7:5f:27:53: 44:cd:61:93:9b:30:82:2a:6b:a6:34:f4:c9:b7:8c: 3c:d8:86:73:7f:25:b8:5e:99:b9:ec:84:a7:a2:80: ff:2d:55:14:ca:93:8a:d1:af:86:31:1f:c7:c7:39: 5e:de:c2:9a:05:eb:4a:ab:82:3d:ff:51:8f:fd:8d: 9a:eb:d8:79:8a:2e:5e:8d:d1:7e:98:3b:ec:9b:ef: 01:35:1f:82:01:a0:ef:d7:44:da:ab:a9:82:ec:1e: 79:4d:f9:25:e4:94:38:5c:be:d4:29:b9:7d:3c:13: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FF:EB:AF:B6:AF:FC:68:F4:D7:62:AA:DD:9F:51:0A:12:F2:BC:32 X509v3 Authority Key Identifier: keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:95:20:dc:90:1f:a0:78:55:58:8f:a1:a3:61:9f:6f:8f: 98:44:f9:5f:83:1b:96:2f:1a:05:c5:a6:8e:9d:51:76:88:98: 40:bc:49:56:23:69:82:a7:ab:ac:fa:a9:ca:e3:3a:01:7b:7a: 73:95:30:20:65:be:f1:88:d3:5f:cd:e9:d1:65:96:a6:9a:9d: 1d:8b:c0:53:dd:f8:4c:71:89:6a:1b:10:29:fc:c4:db:e1:1b: 47:91:e6:0a:6d:47:6b:28:cc:dd:d4:4f:d0:43:0f:b3:b2:ca: b9:e1:35:b7:36:39:7c:14:0f:a3:a2:d5:76:89:55:12:99:c8: 02:7c:15:17:2f:10:04:04:9f:b2:aa:90:41:d8:a1:e0:b3:3d: 74:b9:20:74:2d:78:c1:85:45:db:73:ff:bc:69:20:20:24:c4: 4b:30:ba:4d:11:60:63:9c:c8:b5:25:86:73:8c:3f:89:3e:2c: 00:64:a8:dd:52:ac:20:eb:b2:67:a2:ca:a5:42:73:ec:c8:9c: 2a:f9:1f:4b:35:37:d7:84:60:1a:c5:72:93:a5:cd:f8:6f:f4: 36:10:2b:b2:2b:7a:d2:d1:26:3b:44:9f:96:4f:c8:58:da:ad: 95:f4:6f:f6:70:73:cc:b7:29:f8:52:ae:21:d2:91:1e:23:de: 92:21:f2:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2RTIxMTAvBgNVBAUTKEE2MTIwQUU5OUFBQURDMDBBMzVBMEM4QkY1MTY1RTBC NjNBMzhBMUUwHhcNMjUxMjIyMjI1NzE0WhcNMjUxMjI5MjI1NzE0WjAYMRYwFAYD VQQDDA02OTQ5Y2NjYS1iNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVrrqNuFU/2TJ+0AEx/4kobAK7kue7ADmoC5aPmtqEmmm9NB2FBKHHauSn+9 Eq9vg2e+QLQb9hwjaCvLcwAP+pyg0T9gGLPTqupjJxwXWHh3MulSN8/cnG3Q1KjW Ri5Lr/EaCTS3DD0np1f18l/jor/Hl/xX9+X1dvdEcVV1ioxoDa3xUnhvDpoI5ObQ X/HUqudfJ1NEzWGTmzCCKmumNPTJt4w82IZzfyW4Xpm57ISnooD/LVUUypOK0a+G MR/Hxzle3sKaBetKq4I9/1GP/Y2a69h5ii5ejdF+mDvsm+8BNR+CAaDv10Taq6mC 7B55Tfkl5JQ4XL7UKbl9PBO6nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBD/66+2 r/xo9Ndiqt2fUQoS8rwyMB8GA1UdIwQYMBaAFKYSCumaqtwAo1oMi/UWXgtjo4oe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZFMi9BMUZBQ0JGQzUy MDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNBQ2pXZ3lMOVJaZUMyT2pp aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoSUs2WnFxM0FDaldneUw5UlplQzJPamloNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZFMi9BMUZBQ0JGQzUyMDUxMUVDOTM2QUFCMjJDNEY5QUUwMi9waElLNlpxcTNB Q2pXZ3lMOVJaZUMyT2ppaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ/ZUg3JAfoHhVWI+ho2Gfb4+YRPlfgxuWLxoFxaaOnVF2iJhAvElW I2mCp6us+qnK4zoBe3pzlTAgZb7xiNNfzenRZZammp0di8BT3fhMcYlqGxAp/MTb 4RtHkeYKbUdrKMzd1E/QQw+zssq54TW3Njl8FA+jotV2iVUSmcgCfBUXLxAEBJ+y qpBB2KHgsz10uSB0LXjBhUXbc/+8aSAgJMRLMLpNEWBjnMi1JYZzjD+JPiwAZKjd Uqwg67JnosqlQnPsyJwq+R9LNTfXhGAaxXKTpc34b/Q2ECuyK3rS0SY7RJ+WT8hY 2q2V9G/2cHPMtyn4Uq4h0pEeI96SIfLG -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:56 2025 by rpki-client