This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File:                     p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier:          oXXO0eCUPBqvck8oNSX7bNL9MleVzPA2paaJyig6SHI=
Subject key identifier:   BA:24:B2:87:F9:D3:29:6A:B5:F8:09:53:73:D9:D7:DA:14:26:EA:05
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer:       /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number:          0137
Signing time:             Fri 05 Dec 2025 02:42:02 +0000
Manifest this update:     Fri 05 Dec 2025 02:42:01 +0000
Manifest next update:     Fri 12 Dec 2025 02:42:01 +0000
Files and hashes:         1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: Cu84xQaX5ExvXsRrVva0T38zkMMgbdP1M+4GHV12DkU=)
                          2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: r86qpGJnHjpBx0ziAsyUf7XIzN5pbk0zDUOdDMqHK3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
                          rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
        Validity
            Not Before: Dec  5 02:42:01 2025 GMT
            Not After : Dec 12 02:42:01 2025 GMT
        Subject: CN=6932467a-4451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:c9:2d:d1:67:21:e4:31:5a:75:8e:d2:79:
                    2f:c3:cb:14:28:ad:59:f4:b1:e8:af:d9:2e:cf:24:
                    a9:a3:cb:e3:da:7a:f8:c0:b9:c2:83:18:c4:fa:75:
                    94:58:d1:cf:a1:69:7e:96:12:c7:72:15:cf:45:68:
                    f9:71:6a:d0:bf:c9:5f:63:2f:e9:0c:88:c1:0d:7a:
                    9e:c3:bb:12:cb:6d:59:dc:9a:65:67:26:87:f7:32:
                    cf:6a:8f:8a:32:50:88:02:66:28:98:75:85:1d:e6:
                    88:bb:9f:36:b4:bf:d9:2d:a1:b4:eb:29:18:8e:90:
                    fd:26:bd:36:e1:9c:ee:f5:8a:6e:ef:6c:7f:47:92:
                    d1:10:bc:1f:fe:be:95:bb:6e:34:26:21:e7:60:23:
                    e3:b5:ee:3b:7f:46:6b:33:6f:3c:3f:ab:40:8f:54:
                    3c:17:11:b9:b5:72:68:d9:be:38:a4:44:c4:51:de:
                    9f:e1:5c:b4:fb:4a:0a:d3:bf:18:ac:00:6c:43:c1:
                    4e:4b:e7:ef:8a:81:2a:db:62:6c:c0:94:98:8f:91:
                    4a:35:7d:cd:0c:f1:92:d9:a1:17:58:d0:f3:85:18:
                    5f:76:0d:ab:45:5e:72:e8:ec:0f:83:b0:d9:d9:be:
                    2c:7c:46:08:d0:6f:df:8f:01:2a:cc:2e:a5:d5:57:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:24:B2:87:F9:D3:29:6A:B5:F8:09:53:73:D9:D7:DA:14:26:EA:05
            X509v3 Authority Key Identifier:
                keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:23:ba:f2:d8:81:39:62:f6:63:d2:3a:6e:c7:28:4d:3e:6f:
         24:12:7e:87:7f:14:2b:53:08:73:db:5e:53:79:f9:12:ce:3c:
         76:96:bf:0d:60:a3:74:2d:e9:d5:c4:0d:a2:f8:ea:55:b1:98:
         20:d7:34:ad:cc:07:30:fa:88:51:6f:c5:42:1f:3b:84:eb:8e:
         c9:1d:9a:dc:e2:a1:fa:e4:6c:95:02:65:1d:60:1a:81:95:a2:
         66:96:61:8c:b4:c9:09:4d:6e:b7:f6:95:5d:7c:54:a1:75:8a:
         09:21:d4:9d:80:53:1a:e6:e8:80:d6:23:a2:6d:f7:d6:69:e7:
         09:a0:f5:b2:d8:04:a9:5b:b7:fb:13:81:62:6b:9b:03:5a:10:
         a5:af:d3:66:7b:aa:ef:2c:88:f5:11:63:39:af:e9:17:5d:f2:
         6c:3b:54:6e:3a:8f:9e:b3:87:6b:8f:c6:7d:52:a5:7b:e2:fd:
         6a:00:da:9e:48:54:7a:24:2e:29:e4:b5:5b:ee:00:93:cc:c3:
         b4:3f:e3:8d:fd:0d:1a:e1:92:1f:39:36:f6:3e:47:51:8b:b8:
         14:14:9d:3a:88:5b:2f:bc:13:7d:2e:34:4d:d2:a8:c0:86:2c:
         9b:7f:2c:d1:2a:14:ee:34:d4:f2:b5:64:69:c7:81:e6:a3:38:
         91:54:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:22 2025 by rpki-client