This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json)
Hash identifier: eKlYgiYLymkSa0IBcjS3AF/zSD6aGSEr9cHkZ/cSykM=
Subject key identifier: 79:2D:1C:C7:15:3E:CE:F6:41:EB:F1:EB:AB:E5:50:11:F8:80:1E:BC
Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
Manifest number: 01A1
Signing time: Sun 25 Jan 2026 02:41:03 +0000
Manifest this update: Sun 25 Jan 2026 02:41:02 +0000
Manifest next update: Sun 01 Feb 2026 02:41:02 +0000
Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: MdJxXR0VSNggtXkByc4MdAzNFdKnvZGKFZD7So2NXH4=)
2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: xgn6YFodSwG53m6eg/xtI2yxGIZ8r5pFU5yp73kfgi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BCAC, serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A
Validity
Not Before: Jan 25 02:41:02 2026 GMT
Not After : Feb 1 02:41:02 2026 GMT
Subject: CN=697582bf-3b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:8b:4b:42:51:99:de:e1:c8:82:d1:59:72:
a1:0e:59:29:2e:4f:0c:e2:dc:58:b7:97:90:0a:bf:
a7:33:cb:8b:30:96:a0:aa:80:8f:93:9b:95:01:4b:
05:b3:57:44:10:68:28:e9:83:ed:d8:f4:3e:6a:03:
f2:c1:9d:a8:fc:22:73:db:5c:c6:d4:f9:43:42:25:
90:82:e1:7f:60:0f:83:d1:e1:84:33:30:6f:85:9b:
1c:f2:d6:5d:97:6a:ee:f8:ac:56:e5:32:a1:2a:73:
b8:8c:d8:63:64:0a:31:aa:b7:3a:bb:14:55:43:36:
70:d1:d7:6c:eb:3d:5f:79:ec:f1:86:83:1f:48:6f:
7a:30:1e:5e:25:c8:d9:5c:c4:6b:70:f0:6d:bf:32:
05:81:30:e3:84:cc:a9:8b:34:e2:cd:bd:72:4d:66:
05:21:c4:0e:ba:d0:8a:d2:9e:02:9a:9e:0f:9b:a3:
f5:aa:4e:7c:d4:e4:77:3d:90:ff:43:d5:28:ec:a5:
0d:d6:b4:c8:be:42:9b:5b:20:d3:83:82:e2:2a:a1:
7f:21:50:58:f8:24:c2:04:d6:3e:eb:13:30:89:51:
45:fe:71:35:6c:8a:4d:00:ae:2a:6e:cc:c7:96:5f:
a6:6a:c4:da:1f:0e:0d:d5:c0:80:0f:45:fe:87:3c:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2D:1C:C7:15:3E:CE:F6:41:EB:F1:EB:AB:E5:50:11:F8:80:1E:BC
X509v3 Authority Key Identifier:
keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:32:67:c5:9a:f6:4b:89:a8:71:91:d8:4a:0e:4b:8d:d7:
88:4b:ff:25:77:63:34:37:aa:87:3e:86:77:e5:93:f5:29:d3:
14:1e:bf:70:1a:7b:ef:c8:66:1f:2c:f2:85:15:2b:17:40:29:
09:32:c9:96:31:8f:e9:08:9a:25:d5:5e:38:57:d5:5d:7f:e1:
a2:37:9b:1a:aa:5b:75:09:0f:3b:93:29:72:d0:08:c0:73:f8:
2b:b4:e5:29:11:4e:59:c4:ca:11:01:05:86:f5:2f:c5:78:65:
dd:b6:71:4d:35:85:3f:96:87:27:d7:d4:1c:44:dc:d0:bd:41:
d8:7d:2d:1d:69:17:7a:75:27:a0:b4:ff:8d:8e:3b:36:cd:15:
29:27:88:d6:55:28:95:1d:f6:3c:d5:82:5c:37:bf:26:d6:b9:
ef:fd:08:82:25:89:4a:b6:fd:9d:66:95:43:9f:1d:39:d0:7f:
75:20:10:c5:0b:a0:3d:63:c1:51:45:f5:90:c8:e0:d3:d9:80:
79:5c:3e:4e:ae:a3:84:cc:09:88:a0:9a:42:0c:0c:17:38:a2:
cc:ea:97:64:86:da:b9:a6:58:75:8e:9b:e2:5f:86:0d:9b:49:
26:55:d9:9d:0c:df:8f:c7:00:21:b4:4b:44:88:aa:14:43:fa:
e8:55:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:19 2026 by rpki-client