This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: 4EjHYbWg1+lc8D75NCaLOiqUUX9YVWohPRGub0q+je0= Subject key identifier: 89:2E:41:F8:06:ED:B0:F2:21:D5:A9:99:C1:4A:28:20:7E:CB:CA:2B Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: 013F Signing time: Sun 21 Dec 2025 03:42:00 +0000 Manifest this update: Sun 21 Dec 2025 03:41:59 +0000 Manifest next update: Sun 28 Dec 2025 03:41:59 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: JxWWZOXRarnEsnGV423nhPej2wmlSrLyqXPjWTatTuU=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Dec 21 03:41:59 2025 GMT Not After : Dec 28 03:41:59 2025 GMT Subject: CN=69476c88-c7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:fe:b5:6d:bb:cf:63:92:5c:d3:95:99:c9: ee:04:3d:f6:0a:44:2a:c1:d0:2a:68:f7:d0:6a:cf: c6:38:24:fe:54:81:62:ef:bb:a7:62:60:fd:ea:54: bf:b8:29:28:6c:40:7e:8d:5a:1c:7f:4e:96:ce:43: e5:61:89:49:13:23:6c:bc:72:57:7e:b2:d1:f2:ec: f0:11:db:a3:c6:9e:f8:6f:b4:32:f4:16:ee:95:b7: 44:c5:4c:70:f5:23:f9:b4:85:38:4e:f7:1d:58:2b: 81:57:29:e4:9e:f6:d7:47:23:6f:da:a4:3f:3e:3c: 23:25:e8:ce:d2:e0:01:0f:4a:84:ae:3a:87:f0:10: bd:77:02:c3:41:04:be:cd:58:9f:24:8f:e4:24:6c: 76:5c:38:26:ee:19:92:95:8a:42:34:3e:5c:73:8e: ce:13:d3:dd:37:71:89:83:5b:4e:27:8d:23:4a:0a: 65:9a:85:2a:5c:e9:da:08:56:41:ce:6c:52:a3:26: 12:46:b4:da:88:e7:6a:cb:78:d3:48:bc:26:24:aa: 71:c3:53:cc:07:9a:d2:40:5b:4f:03:9f:eb:aa:84: 76:c1:2e:48:15:26:e7:6d:c4:4f:57:34:db:1e:96: b5:2f:79:5f:f1:c5:c7:f4:79:c8:3c:a0:4f:fb:85: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:41:F8:06:ED:B0:F2:21:D5:A9:99:C1:4A:28:20:7E:CB:CA:2B X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:d0:62:52:f9:33:b0:32:71:ed:41:5b:93:78:4e:65:34: c4:74:f3:ce:76:6d:3a:ea:ca:35:4a:0b:c9:28:1a:12:17:c8: 43:74:78:71:05:34:53:c8:39:d1:36:a5:8c:b1:e4:05:d4:69: bb:88:ae:4a:8c:93:5b:29:9e:41:4d:b4:f2:21:ab:45:88:e8: f9:6e:12:db:25:52:50:27:0b:5c:0b:d1:2c:c7:f0:e5:a5:0f: 78:0c:b6:b6:9d:65:e9:eb:07:3c:ae:11:b2:b4:d4:01:75:13: e5:40:b2:f0:8a:f8:77:8b:e3:6f:ff:60:b5:03:a2:d5:0c:b4: e8:4f:15:42:17:fd:6c:87:14:07:c3:fe:17:0e:7a:60:01:53: 02:dc:72:b8:7e:49:fd:15:33:90:17:27:3f:bd:48:2a:4c:76: a1:f8:d9:69:ba:ce:c6:6b:9a:f0:e7:49:9b:9d:52:4e:18:da: 23:0e:b9:81:30:d1:40:e7:92:33:33:74:a6:7d:c0:a3:4f:34: 34:44:82:4b:9c:08:99:31:73:43:f9:49:a9:59:c9:31:7b:fa: 33:c8:e2:4b:94:3b:78:fc:f0:34:f2:ec:79:b4:36:92:f8:15: 6b:32:8f:b9:b8:7b:c9:65:63:ae:8a:bc:86:20:ca:5a:c5:89: 69:3c:b2:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUxMjIxMDM0MTU5WhcNMjUxMjI4MDM0MTU5WjAYMRYwFAYD VQQDDA02OTQ3NmM4OC1jN2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAj+tW27z2OSXNOVmcnuBD32CkQqwdAqaPfQas/GOCT+VIFi77unYmD96lS/ uCkobEB+jVocf06WzkPlYYlJEyNsvHJXfrLR8uzwEdujxp74b7Qy9BbulbdExUxw 9SP5tIU4TvcdWCuBVynknvbXRyNv2qQ/PjwjJejO0uABD0qErjqH8BC9dwLDQQS+ zVifJI/kJGx2XDgm7hmSlYpCND5cc47OE9PdN3GJg1tOJ40jSgplmoUqXOnaCFZB zmxSoyYSRrTaiOdqy3jTSLwmJKpxw1PMB5rSQFtPA5/rqoR2wS5IFSbnbcRPVzTb Hpa1L3lf8cXH9HnIPKBP+4WBXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkuQfgG 7bDyIdWpmcFKKCB+y8orMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdjNBiUvkzsDJx7UFbk3hOZTTEdPPOdm066so1SgvJKBoSF8hDdHhx BTRTyDnRNqWMseQF1Gm7iK5KjJNbKZ5BTbTyIatFiOj5bhLbJVJQJwtcC9Esx/Dl pQ94DLa2nWXp6wc8rhGytNQBdRPlQLLwivh3i+Nv/2C1A6LVDLToTxVCF/1shxQH w/4XDnpgAVMC3HK4fkn9FTOQFyc/vUgqTHah+Nlpus7Ga5rw50mbnVJOGNojDrmB MNFA55IzM3SmfcCjTzQ0RIJLnAiZMXND+UmpWckxe/ozyOJLlDt4/PA08ux5tDaS +BVrMo+5uHvJZWOuiryGIMpaxYlpPLLj -----END CERTIFICATE-----Generated at Sun Dec 21 12:49:53 2025 by rpki-client