This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft File: PHUP1suMdwFoHlNr3WtxXxkrivk.mft (raw, json) Hash identifier: BWCiI2uqS32fOT0WodIIjsLmSlENr1yA9GVw8LcwlEw= Subject key identifier: 71:74:3D:19:7D:70:2D:A8:3D:7D:7A:0F:3F:EA:AD:92:20:D2:7F:BD Authority key identifier: 3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 Certificate issuer: /CN=A914233F/serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft Manifest number: 01B2 Signing time: Fri 05 Dec 2025 01:27:21 +0000 Manifest this update: Fri 05 Dec 2025 01:27:20 +0000 Manifest next update: Fri 12 Dec 2025 01:27:20 +0000 Files and hashes: 1: PHUP1suMdwFoHlNr3WtxXxkrivk.crl (hash: Ihp44SZ05luA+NXPruXeAcNhl5UFze6Q2qXq9ThMifI=) 2: D2AD84364AE411EE95B72651C4F9AE02.roa (hash: PXugVBDjMMSZngC/IAk1O9uisIYx3s5Ti9BVaDUEHRI=) 3: D1DA657E4AE411EE95B72651C4F9AE02.roa (hash: rYuzAQ2V3DCYFm8hLaFsEVJnKAGKcFikbLAjBKDZ9TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914233F, serialNumber=3C750FD6CB8C7701681E536BDD6B715F192B8AF9 Validity Not Before: Dec 5 01:27:20 2025 GMT Not After : Dec 12 01:27:20 2025 GMT Subject: CN=693234f9-89d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:db:ff:d0:f9:43:f9:1a:a8:99:5e:c1:d0: c8:56:2d:c6:d4:f6:2c:db:79:a5:1c:36:22:c8:21: c0:35:ac:29:de:0e:f5:cb:94:07:ce:32:e9:58:8f: 2c:53:a8:63:04:d2:23:17:d5:a1:d7:08:fd:cb:89: 7c:09:72:74:e5:b4:91:19:0c:66:0c:77:8b:f5:ec: 18:c5:d0:81:cc:ce:90:fb:3d:54:88:97:55:38:e5: 0d:c0:54:f5:ec:b0:89:30:ec:bb:83:25:48:09:18: 06:cb:7c:fb:9d:90:e5:ce:bb:7c:f5:c6:98:ad:51: ce:f6:ef:64:11:2d:a0:03:0a:73:40:0e:4e:18:99: aa:80:f5:f9:49:82:71:a1:90:ab:3f:18:9f:44:cd: d5:90:f9:fc:ef:01:7c:e6:38:ac:57:05:73:bb:b1: d3:25:a1:50:18:51:c0:dc:f1:2e:8b:74:5b:cb:94: 66:53:91:7d:14:d9:f3:11:8a:a4:83:4a:c0:23:67: a5:a4:d1:92:fa:8e:e4:fd:4b:1d:93:8d:95:a8:c0: 30:55:0f:e5:b0:7a:00:2c:51:ce:7e:dc:43:6e:e5: 4b:fe:fc:2f:37:f7:fb:4e:68:7e:f8:14:41:a9:a7: cd:9b:a5:63:e6:1c:f2:45:c6:1e:b4:ef:42:3d:35: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:74:3D:19:7D:70:2D:A8:3D:7D:7A:0F:3F:EA:AD:92:20:D2:7F:BD X509v3 Authority Key Identifier: keyid:3C:75:0F:D6:CB:8C:77:01:68:1E:53:6B:DD:6B:71:5F:19:2B:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHUP1suMdwFoHlNr3WtxXxkrivk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914233F/85C20BDA463C11EE9B789139C4F9AE02/PHUP1suMdwFoHlNr3WtxXxkrivk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1e:e7:30:0c:ec:60:7b:25:40:e9:3b:b6:e6:b6:99:4a:81: 39:c2:5c:29:f3:e7:b4:cd:ed:bf:22:a2:6b:05:f5:02:d1:9c: f6:97:1b:b8:db:d6:2a:0a:69:65:c6:9d:42:cc:a2:5b:f8:77: 17:1f:bd:2c:d9:86:84:31:19:ed:0a:10:7d:38:93:10:08:52: 91:e2:2f:54:10:03:96:16:75:0f:48:19:eb:88:c7:b5:ab:44: 6a:67:f2:b2:b3:23:d2:87:c1:bf:90:7e:89:8f:a8:04:e5:26: 8b:96:73:fc:e2:1c:96:13:88:5e:79:e8:25:d0:0c:f3:bd:e7: 91:1c:48:ba:37:5b:77:c3:25:60:93:9e:0c:f4:b6:05:87:f8: 68:e4:1b:b6:40:14:b9:9d:3b:b6:c7:15:0b:b6:31:cf:36:fe: 5a:dc:28:83:ab:0d:62:5c:0a:ae:b6:47:f3:1d:b1:a5:b4:9f: e7:51:c3:1e:f7:44:27:f6:f0:11:41:ac:6d:a9:8a:72:d4:d5: 37:8f:43:59:82:db:5a:92:25:61:60:01:4e:b5:63:5d:a0:ee: 06:2e:5a:a6:10:0f:5b:56:0a:5f:7e:54:7a:c3:c2:a0:13:ad: ff:b2:f9:49:1d:9a:b8:66:8f:41:72:fe:99:58:25:e9:72:7f: ef:0c:e7:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzM0YxMTAvBgNVBAUTKDNDNzUwRkQ2Q0I4Qzc3MDE2ODFFNTM2QkRENkI3MTVG MTkyQjhBRjkwHhcNMjUxMjA1MDEyNzIwWhcNMjUxMjEyMDEyNzIwWjAYMRYwFAYD VQQDEw02OTMyMzRmOS04OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYzb/9D5Q/kaqJlewdDIVi3G1PYs23mlHDYiyCHANawp3g71y5QHzjLpWI8s U6hjBNIjF9Wh1wj9y4l8CXJ05bSRGQxmDHeL9ewYxdCBzM6Q+z1UiJdVOOUNwFT1 7LCJMOy7gyVICRgGy3z7nZDlzrt89caYrVHO9u9kES2gAwpzQA5OGJmqgPX5SYJx oZCrPxifRM3VkPn87wF85jisVwVzu7HTJaFQGFHA3PEui3Rby5RmU5F9FNnzEYqk g0rAI2elpNGS+o7k/Usdk42VqMAwVQ/lsHoALFHOftxDbuVL/vwvN/f7Tmh++BRB qafNm6Vj5hzyRcYetO9CPTVdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF0PRl9 cC2oPX16Dz/qrZIg0n+9MB8GA1UdIwQYMBaAFDx1D9bLjHcBaB5Ta91rcV8ZK4r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjMzRi84NUMyMEJEQTQ2 M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3Rm9IbE5yM1d0eFh4a3Jp dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BIVVAxc3VNZHdGb0hsTnIzV3R4WHhrcml2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjMzRi84NUMyMEJEQTQ2M0MxMUVFOUI3ODkxMzlDNEY5QUUwMi9QSFVQMXN1TWR3 Rm9IbE5yM1d0eFh4a3JpdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbHucwDOxgeyVA6Tu25raZSoE5wlwp8+e0ze2/IqJrBfUC0Zz2lxu4 29YqCmllxp1CzKJb+HcXH70s2YaEMRntChB9OJMQCFKR4i9UEAOWFnUPSBnriMe1 q0RqZ/KysyPSh8G/kH6Jj6gE5SaLlnP84hyWE4heeegl0AzzveeRHEi6N1t3wyVg k54M9LYFh/ho5Bu2QBS5nTu2xxULtjHPNv5a3CiDqw1iXAqutkfzHbGltJ/nUcMe 90Qn9vARQaxtqYpy1NU3j0NZgttakiVhYAFOtWNdoO4GLlqmEA9bVgpfflR6w8Kg E63/svlJHZq4Zo9Bcv6ZWCXpcn/vDOfE -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:41 2025 by rpki-client