This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
File:                     phcu6-H80al4zKRn4bWKMLN5Ues.mft (raw, json)
Hash identifier:          1zCzhSSp+yllcpXeqP56/WkEMtw8qM+HBySc+L4yxD8=
Subject key identifier:   31:17:D0:D3:0D:E8:21:CD:64:1F:28:08:DD:0B:5C:3A:A3:56:B3:9B
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Certificate issuer:       /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
Manifest number:          EC
Signing time:             Fri 05 Dec 2025 04:11:21 +0000
Manifest this update:     Fri 05 Dec 2025 04:11:20 +0000
Manifest next update:     Fri 12 Dec 2025 04:11:20 +0000
Files and hashes:         1: phcu6-H80al4zKRn4bWKMLN5Ues.crl (hash: qEQVkzJXA9/DOFzdJpYpk81zILfGdZ9pJpz/hhyeJTs=)
                          2: CF6B95A22B0611F095AFC61DC4F9AE02.roa (hash: Z/zRPe2DhnITKsdqsZS/1BdNv028Ed4X3nLcFzmMS/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
                          rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 04:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
        Validity
            Not Before: Dec  5 04:11:20 2025 GMT
            Not After : Dec 12 04:11:20 2025 GMT
        Subject: CN=69325b68-51f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:df:44:1c:5e:01:f3:43:da:33:31:a0:68:
                    ca:7b:47:e8:7a:28:3a:4f:94:28:a4:70:66:e9:40:
                    12:ac:cc:d0:f6:3a:a2:e4:fc:9d:0e:d0:55:99:89:
                    3c:c6:b1:62:25:73:30:a9:52:42:7f:0d:5c:e6:21:
                    dc:14:ec:55:d2:1f:a8:8f:ee:f2:59:38:c9:e8:ec:
                    8c:ab:2c:3b:15:7a:38:0a:99:c4:0a:50:5a:9b:f2:
                    0d:6f:28:ab:19:93:c0:4a:00:ef:bf:27:ca:2f:b2:
                    53:97:01:a6:0e:a0:2c:6b:13:1a:4c:76:64:34:07:
                    69:88:a2:5c:c7:0d:7c:46:57:9e:f2:bf:68:59:53:
                    7b:33:81:fb:38:55:f7:20:66:fc:62:e8:26:c1:8f:
                    c8:b0:a0:f6:f0:72:dd:75:36:63:2e:94:a4:94:94:
                    27:af:c2:63:4b:24:d9:11:65:0b:c0:f7:b9:e1:bc:
                    a8:d4:a3:6e:a9:74:c7:48:11:f9:38:a8:e9:a8:92:
                    e5:62:43:94:ad:0d:f2:0c:51:23:29:ab:69:c0:00:
                    d4:95:c1:06:dd:fa:18:00:96:55:ef:fb:b2:71:a4:
                    7a:9e:a6:7e:80:e4:ec:70:eb:29:26:a8:93:b7:79:
                    3c:cf:4a:5e:67:ae:4e:87:90:4d:e9:e7:72:80:8c:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:D0:D3:0D:E8:21:CD:64:1F:28:08:DD:0B:5C:3A:A3:56:B3:9B
            X509v3 Authority Key Identifier:
                keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:37:36:b9:c7:0b:51:6a:f4:5c:10:78:f8:5d:a5:24:e8:39:
         3c:64:c0:44:7d:8f:7a:3e:38:5a:08:e5:c4:df:bf:ed:57:e1:
         5c:35:67:4e:2c:0b:69:1a:b1:7b:e8:6f:ee:6d:0e:3e:5e:5b:
         5a:a2:16:58:ad:46:ac:66:d1:1e:39:d0:10:57:4d:ac:33:a5:
         d6:ec:a3:24:68:ee:69:3e:3d:31:24:5e:67:25:ff:bb:61:6d:
         ba:8d:6c:83:98:7c:9b:95:8f:30:b0:39:32:ab:64:f9:f6:da:
         86:68:5f:43:72:23:0a:7a:ce:dc:93:43:de:2a:17:05:33:ca:
         41:9b:0f:50:9b:13:8b:8a:f5:ac:42:e0:80:58:47:78:8f:bf:
         37:56:f1:95:15:5a:13:f9:62:a0:97:62:1c:6e:e5:0e:fc:ab:
         e5:0f:bc:c3:20:51:bb:e3:28:ff:92:0b:39:e9:63:94:91:67:
         c8:17:67:33:5a:cc:da:79:ad:81:bf:ac:fc:f2:d4:20:08:40:
         59:38:ff:9c:4a:2b:f2:c4:38:1e:fd:50:2b:14:e6:7d:58:ab:
         70:e6:9e:65:38:e4:33:5c:f5:45:d0:b3:89:67:4f:c2:3a:eb:
         19:35:be:ae:3e:66:74:5c:c6:8b:aa:1a:26:a2:0e:37:87:60:
         69:49:66:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCOUExMTAvBgNVBAUTKEE2MTcyRUVCRTFGQ0QxQTk3OENDQTQ2N0UxQjU4QTMw
QjM3OTUxRUIwHhcNMjUxMjA1MDQxMTIwWhcNMjUxMjEyMDQxMTIwWjAYMRYwFAYD
VQQDEw02OTMyNWI2OC01MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq//fRBxeAfND2jMxoGjKe0foeig6T5QopHBm6UASrMzQ9jqi5PydDtBVmYk8
xrFiJXMwqVJCfw1c5iHcFOxV0h+oj+7yWTjJ6OyMqyw7FXo4CpnEClBam/INbyir
GZPASgDvvyfKL7JTlwGmDqAsaxMaTHZkNAdpiKJcxw18Rlee8r9oWVN7M4H7OFX3
IGb8YugmwY/IsKD28HLddTZjLpSklJQnr8JjSyTZEWULwPe54byo1KNuqXTHSBH5
OKjpqJLlYkOUrQ3yDFEjKatpwADUlcEG3foYAJZV7/uycaR6nqZ+gOTscOspJqiT
t3k8z0peZ65Oh5BN6edygIxcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEX0NMN
6CHNZB8oCN0LXDqjVrObMB8GA1UdIwQYMBaAFKYXLuvh/NGpeMykZ+G1ijCzeVHr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI5QS80OUNEMDMwNENG
RjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9waGN1Ni1IODBhbDR6S1JuNGJXS01MTjVV
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BoY3U2LUg4MGFsNHpLUm40YldLTUxONVVlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkI5QS80OUNEMDMwNENGRjMxMUVGOTA2MkU1MjFDNEY5QUUwMi9waGN1Ni1IODBh
bDR6S1JuNGJXS01MTjVVZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANNza5xwtRavRcEHj4XaUk6Dk8ZMBEfY96PjhaCOXE37/tV+FcNWdO
LAtpGrF76G/ubQ4+XltaohZYrUasZtEeOdAQV02sM6XW7KMkaO5pPj0xJF5nJf+7
YW26jWyDmHyblY8wsDkyq2T59tqGaF9DciMKes7ck0PeKhcFM8pBmw9QmxOLivWs
QuCAWEd4j783VvGVFVoT+WKgl2IcbuUO/KvlD7zDIFG74yj/kgs56WOUkWfIF2cz
Wszaea2Bv6z88tQgCEBZOP+cSivyxDge/VArFOZ9WKtw5p5lOOQzXPVF0LOJZ0/C
OusZNb6uPmZ0XMaLqhomog43h2BpSWaq
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:21:16 2025 by rpki-client