This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier: qQXbQzSCSkuKKgcVU5KNqUU4YfNqaxHt+WhfOD1umTQ=
Subject key identifier: 93:AF:C7:7A:BF:35:C6:40:FD:7B:2D:49:DA:77:4C:9B:8B:BA:F4:5C
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number: 0151
Signing time: Sun 25 Jan 2026 03:34:16 +0000
Manifest this update: Sun 25 Jan 2026 03:34:15 +0000
Manifest next update: Sun 01 Feb 2026 03:34:15 +0000
Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: vihprtcMMOXgvfS3O0AogkagUbRz7zm2Y7deKrB5Oms=)
2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Validity
Not Before: Jan 25 03:34:15 2026 GMT
Not After : Feb 1 03:34:15 2026 GMT
Subject: CN=69758f38-628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:22:85:b7:61:32:a2:9a:ef:56:44:dd:e9:
8b:ef:6e:20:99:a4:d5:e7:58:fc:43:d0:61:37:4a:
64:09:f2:4c:be:ef:cf:1f:21:2c:6b:06:63:16:61:
8f:f3:85:2b:b3:a1:0c:1c:8b:64:13:79:77:e7:17:
ee:fe:49:53:31:3d:a8:2b:eb:ea:6c:78:e3:11:7a:
71:e4:41:f1:f1:cb:6a:86:b1:a7:df:36:5f:ce:f3:
02:5f:cc:17:8b:7d:27:89:6b:c7:db:42:9f:af:fb:
4a:b2:60:5a:7f:7c:66:eb:89:23:88:63:76:91:67:
0a:2a:16:9f:01:48:db:e6:a8:e4:4f:88:fd:44:45:
84:33:cb:29:c1:01:cc:44:07:92:07:2b:7b:41:ff:
3c:b4:b7:b1:59:53:d1:04:b4:41:a3:81:93:02:dc:
f0:0b:fb:c5:da:9b:2d:8c:ff:c6:45:8a:58:3e:27:
c2:15:3f:b1:63:2c:0e:72:35:9e:75:c7:76:8e:bd:
e3:0b:78:64:bd:4d:6a:3b:c7:26:b6:9f:89:ba:5c:
cd:1b:3e:28:e0:e2:2f:2e:32:69:a1:73:8e:8c:03:
93:05:37:c6:3c:c8:71:c4:bf:99:37:88:7b:72:ce:
b9:8c:c0:e1:ce:6a:86:df:90:03:81:56:ef:77:5b:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:C7:7A:BF:35:C6:40:FD:7B:2D:49:DA:77:4C:9B:8B:BA:F4:5C
X509v3 Authority Key Identifier:
keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f9:3b:d5:84:ab:db:17:e4:33:66:83:92:26:d4:bb:1e:39:
b1:d4:bb:e1:4a:f1:e7:07:c7:2c:f8:ac:17:5e:a9:ae:5d:ca:
2e:23:48:a8:3c:43:45:f0:d0:6f:df:70:b1:8d:61:d8:81:93:
95:5a:f4:7c:39:93:28:80:e8:17:9e:b5:52:8a:a4:0c:52:c3:
0d:5b:84:d3:dc:02:d1:bf:e2:6e:b9:1e:40:50:6b:b0:d7:38:
af:a5:11:c0:50:2a:f0:b4:63:70:9c:1a:11:bb:3c:12:d8:f8:
c1:c3:1f:85:b6:e7:a2:76:5c:7e:d7:34:67:78:88:f2:7d:5e:
85:82:f9:1c:97:55:6b:c2:65:4a:19:81:d0:b8:f4:75:3b:f5:
b6:6c:dc:51:e3:cb:37:26:f0:bd:9f:ad:02:d3:6d:aa:e5:f8:
37:6d:70:61:bb:91:70:8f:05:01:20:e4:67:eb:38:29:9b:25:
08:26:c7:1f:e3:5f:48:ec:fd:a6:b0:22:5e:a1:73:78:e1:e8:
24:12:a2:3f:7c:42:bc:5e:02:bc:f0:62:36:60:9b:35:8b:41:
e3:d0:c9:0d:38:24:1d:a2:cc:0b:5c:eb:9b:d7:0f:fe:5e:6c:
a3:32:dd:8c:07:c4:63:32:7e:4d:01:15:78:9e:65:1c:4a:1e:
82:8b:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:58 2026 by rpki-client