This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: OVLQZzITgX4PLOUaEj7XAR1Z7Xzk8rihLRX4+XMCxR4= Subject key identifier: BE:98:C3:3B:7D:0F:A6:74:9D:F3:22:01:5B:CC:1B:8A:06:1A:3E:EB Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: 0140 Signing time: Tue 23 Dec 2025 03:31:19 +0000 Manifest this update: Tue 23 Dec 2025 03:31:18 +0000 Manifest next update: Tue 30 Dec 2025 03:31:18 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: d++2PAvBcaaRhHP2IRBmd+2lFRK9KNQvC2tnRv9Wwes=) 2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Dec 23 03:31:18 2025 GMT Not After : Dec 30 03:31:18 2025 GMT Subject: CN=694a0d07-a3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fd:90:c9:ec:d8:fe:94:19:b3:3f:cc:9e:4d: 61:ed:a3:34:ed:bf:06:45:64:0a:bc:f4:cc:41:42: e8:c8:cd:bb:92:ca:3f:2a:b6:cd:0e:ba:0b:22:f2: bd:5a:e0:66:71:36:74:08:87:8d:a4:ac:ba:77:ab: 55:f0:20:eb:a4:1d:e9:c4:ce:d5:f1:bb:85:d6:dd: db:0b:6a:75:e2:81:aa:a4:0b:18:a0:8a:aa:b1:fe: 48:56:e5:0c:0e:42:0e:81:75:40:c6:eb:ba:77:1b: 67:3f:9c:07:62:f3:d5:96:25:39:17:4c:ad:fd:db: cb:a2:4d:46:c7:03:91:c0:84:d2:50:b2:fe:3f:31: 23:51:f3:dc:7f:a1:39:4b:78:6f:87:63:98:80:ad: 5e:9b:b9:bc:2e:05:d5:dd:08:5b:e1:39:ac:3a:a4: db:88:89:cd:f7:21:08:a5:bd:5a:34:bd:ef:19:23: 76:87:11:da:d9:34:b5:27:3f:30:8d:83:72:2f:c2: 45:fd:4c:b6:33:5a:57:ce:9c:de:d0:af:fa:5b:06: ab:a2:e8:97:e1:9f:1f:d2:60:ef:06:60:66:85:c2: be:50:72:f2:a5:44:9a:b1:ce:53:38:37:5e:3c:3c: 0a:a5:28:60:91:d6:e1:b1:4b:d4:cb:2f:fe:9c:68: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:98:C3:3B:7D:0F:A6:74:9D:F3:22:01:5B:CC:1B:8A:06:1A:3E:EB X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ec:fc:5b:c9:42:69:ac:22:e5:f1:84:e7:d6:23:f2:a4:27: c5:bd:4b:fc:3f:b2:ac:c6:e9:30:03:de:9d:cc:33:e4:88:4d: 5f:bc:e3:3f:e8:db:70:2f:97:20:79:22:e2:36:97:1b:21:48: 5f:68:e7:9d:28:07:da:db:a2:22:e6:d8:38:92:d1:fd:e1:7e: e0:8c:5b:7f:e5:33:54:ab:90:db:70:e1:b3:16:59:6d:54:a2: 02:5e:b1:2a:44:55:60:70:97:16:dc:bb:b9:e4:de:0b:85:8c: a2:51:c3:c5:d8:c8:1c:a3:71:6a:6d:a7:d3:31:9a:84:a9:f3: 2f:bd:cc:f2:d0:2a:68:d6:47:be:39:11:d8:0c:5e:b5:f2:bc: 1e:ae:8c:56:d7:75:14:3e:f3:bb:d7:05:e7:65:b0:7e:87:75: 7b:fa:79:63:e7:ef:4c:b7:50:20:17:57:45:68:0f:25:b8:4f: ea:8c:c9:1f:4d:e7:a7:99:32:23:1d:d6:d5:94:55:0f:ff:8f: b0:13:de:92:ca:de:b8:d6:7d:bc:2a:c4:f8:67:e2:2e:91:18: 2c:30:48:c3:d0:5e:2a:39:3c:c5:57:f2:4a:c2:d8:e2:d7:9b: 88:59:9c:b0:d6:b7:b1:81:c8:f3:f6:8c:e9:fe:ed:a6:cd:1d: a9:5f:bb:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjUxMjIzMDMzMTE4WhcNMjUxMjMwMDMzMTE4WjAYMRYwFAYD VQQDDA02OTRhMGQwNy1hM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/2QyezY/pQZsz/Mnk1h7aM07b8GRWQKvPTMQULoyM27kso/KrbNDroLIvK9 WuBmcTZ0CIeNpKy6d6tV8CDrpB3pxM7V8buF1t3bC2p14oGqpAsYoIqqsf5IVuUM DkIOgXVAxuu6dxtnP5wHYvPVliU5F0yt/dvLok1GxwORwITSULL+PzEjUfPcf6E5 S3hvh2OYgK1em7m8LgXV3Qhb4TmsOqTbiInN9yEIpb1aNL3vGSN2hxHa2TS1Jz8w jYNyL8JF/Uy2M1pXzpze0K/6WwarouiX4Z8f0mDvBmBmhcK+UHLypUSasc5TODde PDwKpShgkdbhsUvUyy/+nGgqCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6Ywzt9 D6Z0nfMiAVvMG4oGGj7rMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzIwRC84ODY4QTExRTAzQTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5 aGVlc0pqeUhXMzZ2TEE1NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq7PxbyUJprCLl8YTn1iPypCfFvUv8P7KsxukwA96dzDPkiE1fvOM/ 6NtwL5cgeSLiNpcbIUhfaOedKAfa26Ii5tg4ktH94X7gjFt/5TNUq5DbcOGzFllt VKICXrEqRFVgcJcW3Lu55N4LhYyiUcPF2Mgco3FqbafTMZqEqfMvvczy0Cpo1ke+ ORHYDF618rweroxW13UUPvO71wXnZbB+h3V7+nlj5+9Mt1AgF1dFaA8luE/qjMkf TeenmTIjHdbVlFUP/4+wE96Syt641n28KsT4Z+IukRgsMEjD0F4qOTzFV/JKwtji 15uIWZyw1rexgcjz9ozp/u2mzR2pX7uD -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:15 2025 by rpki-client