This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
File:                     phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft (raw, json)
Hash identifier:          VMsl2djLfpa3O388whPOGnqWbXHcf5ojMsGXWNDjBas=
Subject key identifier:   61:D7:76:C7:77:6D:C0:15:8A:98:C4:26:C8:05:EA:BD:04:AA:30:46
Authority key identifier: A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E
Certificate issuer:       /CN=A91456E2/serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
Certificate serial:       04BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
Manifest number:          04B8
Signing time:             Thu 04 Dec 2025 22:25:56 +0000
Manifest this update:     Thu 04 Dec 2025 22:25:55 +0000
Manifest next update:     Thu 11 Dec 2025 22:25:55 +0000
Files and hashes:         1: phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl (hash: jPWmFupWK1zXTOsCjHJJIYUddXNIfzQe39EylK+1nxQ=)
                          2: 28E9FEB86F0511EDAF35FA28C4F9AE02.roa (hash: HeEMxWbEp596Nl2YyjBu7WmXC2Fx4dfVT+MEH+2m8Ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl
                          rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 22:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1213 (0x4bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456E2, serialNumber=A6120AE99AAADC00A35A0C8BF5165E0B63A38A1E
        Validity
            Not Before: Dec  4 22:25:55 2025 GMT
            Not After : Dec 11 22:25:55 2025 GMT
        Subject: CN=69320a74-0f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:32:5b:d2:8b:34:57:e3:8e:5b:9a:01:c8:
                    ed:8b:7b:f0:c9:48:ea:82:d7:df:36:94:b7:8b:5c:
                    7d:18:c7:30:d2:19:8d:db:7c:c3:e1:d1:e9:70:8c:
                    a4:4d:5d:85:0a:b3:80:ae:71:c7:f9:03:a4:48:8a:
                    bb:0f:ae:cc:84:3e:26:d5:03:9b:ea:14:30:f5:7e:
                    a7:b7:1a:73:ea:ab:09:db:88:7e:c1:ba:0d:58:d1:
                    51:1a:9d:d6:43:84:17:2f:53:db:d9:f8:0a:f2:b4:
                    49:e6:5b:8b:36:bc:85:a3:39:2d:df:1f:8a:c9:28:
                    7f:38:86:12:df:64:a2:8b:a0:d8:bc:b9:b9:2e:45:
                    77:86:65:4c:b5:c2:e8:26:a3:0a:d1:18:0e:e9:cd:
                    0f:b6:17:8f:b2:e1:f2:2a:a4:e7:0f:fc:0d:ff:8d:
                    5d:48:f0:9b:43:58:4b:43:71:bd:29:41:c7:df:84:
                    20:68:6b:55:0e:b3:da:4d:4f:32:21:4b:6f:ca:d1:
                    f6:2f:07:5d:b7:8e:65:bf:be:6b:ef:6d:b9:76:b1:
                    7c:2a:05:1a:bd:76:b7:8f:44:23:c6:e3:fc:07:04:
                    d6:7d:5a:ef:9a:c9:d9:bd:58:7d:75:aa:86:4a:01:
                    3f:30:7b:5c:cb:77:f7:b0:ae:be:b1:64:2c:3f:ff:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D7:76:C7:77:6D:C0:15:8A:98:C4:26:C8:05:EA:BD:04:AA:30:46
            X509v3 Authority Key Identifier:
                keyid:A6:12:0A:E9:9A:AA:DC:00:A3:5A:0C:8B:F5:16:5E:0B:63:A3:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phIK6Zqq3ACjWgyL9RZeC2Ojih4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456E2/A1FACBFC520511EC936AAB22C4F9AE02/phIK6Zqq3ACjWgyL9RZeC2Ojih4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:fb:0c:51:b6:7f:fe:b4:ec:d6:27:43:09:c4:62:e6:85:
         a9:a8:0c:84:0c:33:47:d7:4c:c1:08:52:4a:c2:8c:d7:a2:3d:
         ad:25:8c:63:36:3a:42:3f:17:0b:9a:e5:5d:7b:ad:f3:e9:92:
         bc:c0:5e:8f:82:f9:5a:05:42:a3:67:2f:9f:22:12:ba:5f:7c:
         00:29:7d:da:cf:de:ff:a5:91:da:cb:2e:20:9b:67:47:15:e2:
         b5:66:02:19:ca:c0:bc:ae:ce:ad:51:23:0e:9b:ad:1b:7b:ce:
         1c:fe:fa:8c:fe:e1:91:b0:79:1e:60:99:46:94:fa:b0:1b:4c:
         93:96:7c:ff:35:f0:84:a0:89:d0:73:c9:1a:ec:63:d8:95:8a:
         eb:9c:bf:52:6a:3b:13:41:b5:ae:1f:16:f0:c1:b2:bd:ae:28:
         ee:f9:fd:cf:f0:e8:8f:5f:c2:d7:23:73:3f:c1:3f:9e:85:f5:
         3e:36:b8:55:d6:9c:88:82:60:75:0d:11:58:3d:b1:63:38:28:
         4a:67:50:1c:f2:d5:33:b2:76:56:64:ad:16:8f:79:5a:1b:37:
         e2:29:77:bf:80:0b:2d:b9:1d:06:60:39:4b:48:82:b8:c7:61:
         43:26:90:38:ef:50:a6:62:95:15:40:1d:fe:8b:22:c4:ef:ae:
         d9:23:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:03:26 2025 by rpki-client