This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
File:                     phmVDMpkZIerm9RKQff2ybQJs9c.mft (raw, json)
Hash identifier:          XXdEd/rqLqNFKhRHJOt/pWphYDCvC+ZbVZJIx9Km5C8=
Subject key identifier:   D1:30:D9:19:FE:F4:25:20:91:88:0C:45:3D:5F:93:D2:64:57:A2:D7
Authority key identifier: A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7
Certificate issuer:       /CN=A9138EEB/serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
Manifest number:          0130
Signing time:             Sun 25 Jan 2026 03:48:21 +0000
Manifest this update:     Sun 25 Jan 2026 03:48:20 +0000
Manifest next update:     Sun 01 Feb 2026 03:48:20 +0000
Files and hashes:         1: phmVDMpkZIerm9RKQff2ybQJs9c.crl (hash: ZTN9FiffNNfnGwh/Ad+m/a3VIRtBxMxVr/zDGCSOC+o=)
                          2: DBF621F42C7211EF8FB22F85C4F9AE02.roa (hash: RJoaBkivOrsbbGOk4+rF7GV3mPNikd+l5jkX1SaMaN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl
                          rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 03:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138EEB, serialNumber=A619950CCA646487AB9BD44A41F7F6C9B409B3D7
        Validity
            Not Before: Jan 25 03:48:20 2026 GMT
            Not After : Feb  1 03:48:20 2026 GMT
        Subject: CN=69759285-e310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:b7:7c:e9:50:40:62:47:d9:b4:dd:ec:54:
                    29:aa:cd:c8:e7:15:a6:07:49:f7:d2:98:58:a6:12:
                    ef:83:8b:fd:60:e1:b1:63:bf:4b:34:22:bd:05:99:
                    42:1c:16:b7:70:37:bf:10:c4:c5:f7:0b:ef:9e:a8:
                    33:22:12:a9:64:5e:77:42:9a:cf:9a:fd:ea:4c:27:
                    6e:d6:b5:0c:b1:15:bf:52:02:cd:1c:fa:2c:27:8e:
                    ce:87:8e:a9:04:6a:ce:c4:18:af:66:a7:5c:00:10:
                    5d:3f:bc:30:a3:66:de:4a:8a:70:db:85:2f:95:76:
                    13:ff:a0:05:a0:33:27:c8:11:db:5c:53:34:7a:8e:
                    4f:7d:e8:d7:d1:e8:5f:95:78:15:e8:0a:da:8b:f8:
                    02:d0:b8:96:6d:2f:b8:ea:54:ad:77:78:2d:c6:00:
                    03:6b:0a:e3:d5:d9:77:5f:86:c6:d0:78:a0:53:37:
                    f2:a6:47:49:7d:90:7b:6a:54:c2:e0:21:ae:6d:a2:
                    8b:b1:aa:26:cc:80:a9:e9:69:99:78:f9:42:c5:3a:
                    87:f7:34:62:74:4b:19:96:29:e1:68:90:b2:32:ca:
                    c4:54:0a:0f:31:9f:77:6e:70:9d:85:1d:10:1a:a6:
                    37:96:ea:cc:39:87:97:83:c5:87:29:98:95:56:84:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:30:D9:19:FE:F4:25:20:91:88:0C:45:3D:5F:93:D2:64:57:A2:D7
            X509v3 Authority Key Identifier:
                keyid:A6:19:95:0C:CA:64:64:87:AB:9B:D4:4A:41:F7:F6:C9:B4:09:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phmVDMpkZIerm9RKQff2ybQJs9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138EEB/F49114802BC311EFB85FFB65C4F9AE02/phmVDMpkZIerm9RKQff2ybQJs9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:e5:09:14:bd:cf:38:35:3a:fb:9e:0e:a7:25:bc:47:13:
         8e:f3:cf:74:fa:f2:1c:40:3b:41:c1:f9:4c:e1:4c:5c:1e:44:
         f8:c8:80:7b:fc:12:c8:f6:f5:fc:9c:6d:a0:9c:32:49:bd:0b:
         0f:32:45:03:96:f8:d7:7b:2d:32:28:74:ef:c3:0d:f1:6e:07:
         3b:99:ed:b8:7a:3d:d9:cb:f1:ff:87:3b:bb:ef:5d:fa:4f:97:
         dd:a3:78:98:f0:1c:14:dd:ac:51:ce:53:d5:29:5f:6e:2b:b6:
         e1:ff:55:df:54:46:06:b6:d3:18:9e:05:4b:9d:53:d1:07:01:
         59:f4:01:2b:76:b9:8a:11:3d:1a:11:f3:9c:fc:8f:fc:4e:df:
         43:c2:ea:ff:83:c3:89:63:27:d8:b7:c3:ae:ff:23:d4:16:00:
         81:6e:e1:07:6b:ec:b3:7d:a5:b7:70:cd:5f:47:77:b9:87:97:
         4c:27:88:48:ef:fc:e6:6b:b9:5e:a9:e0:e7:f8:d6:37:fe:52:
         fc:11:1b:b1:65:eb:a5:4a:c2:1d:08:06:f5:30:69:ae:6e:25:
         3f:95:4e:7d:dd:de:03:48:2a:0f:a7:10:1f:20:4b:f1:2a:b6:
         d0:39:44:23:9d:7e:83:cd:c5:88:f7:cb:60:83:d3:9f:9d:c4:
         56:97:55:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhFRUIxMTAvBgNVBAUTKEE2MTk5NTBDQ0E2NDY0ODdBQjlCRDQ0QTQxRjdGNkM5
QjQwOUIzRDcwHhcNMjYwMTI1MDM0ODIwWhcNMjYwMjAxMDM0ODIwWjAYMRYwFAYD
VQQDDA02OTc1OTI4NS1lMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5e3fOlQQGJH2bTd7FQpqs3I5xWmB0n30phYphLvg4v9YOGxY79LNCK9BZlC
HBa3cDe/EMTF9wvvnqgzIhKpZF53QprPmv3qTCdu1rUMsRW/UgLNHPosJ47Oh46p
BGrOxBivZqdcABBdP7wwo2beSopw24UvlXYT/6AFoDMnyBHbXFM0eo5PfejX0ehf
lXgV6Arai/gC0LiWbS+46lStd3gtxgADawrj1dl3X4bG0HigUzfypkdJfZB7alTC
4CGubaKLsaomzICp6WmZePlCxTqH9zRidEsZlinhaJCyMsrEVAoPMZ93bnCdhR0Q
GqY3lurMOYeXg8WHKZiVVoSVFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEw2Rn+
9CUgkYgMRT1fk9JkV6LXMB8GA1UdIwQYMBaAFKYZlQzKZGSHq5vUSkH39sm0CbPX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEVFQi9GNDkxMTQ4MDJC
QzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJZXJtOVJLUWZmMnliUUpz
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BobVZETXBrWkllcm05UktRZmYyeWJRSnM5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEVFQi9GNDkxMTQ4MDJCQzMxMUVGQjg1RkZCNjVDNEY5QUUwMi9waG1WRE1wa1pJ
ZXJtOVJLUWZmMnliUUpzOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFmuUJFL3PODU6+54OpyW8RxOO8890+vIcQDtBwflM4UxcHkT4yIB7
/BLI9vX8nG2gnDJJvQsPMkUDlvjXey0yKHTvww3xbgc7me24ej3Zy/H/hzu77136
T5fdo3iY8BwU3axRzlPVKV9uK7bh/1XfVEYGttMYngVLnVPRBwFZ9AErdrmKET0a
EfOc/I/8Tt9Dwur/g8OJYyfYt8Ou/yPUFgCBbuEHa+yzfaW3cM1fR3e5h5dMJ4hI
7/zma7leqeDn+NY3/lL8ERuxZeulSsIdCAb1MGmubiU/lU593d4DSCoPpxAfIEvx
KrbQOUQjnX6DzcWI98tgg9OfncRWl1VL
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:07 2026 by rpki-client