This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier: ZOw6hz5JLv2KVHI5rb5FOwS0vGLDMTLFN/8Qwl+lXd0=
Subject key identifier: 53:22:12:39:25:5F:85:5B:34:FE:B1:21:E6:C0:B0:96:2F:59:68:B3
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial: 1EA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number: 1E88
Signing time: Sat 24 Jan 2026 15:52:43 +0000
Manifest this update: Sat 24 Jan 2026 15:52:43 +0000
Manifest next update: Sat 31 Jan 2026 15:52:43 +0000
Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: oh5pKbbZK2yEzn7KzzRoVNaXXRIns5qXKwtd4S/Ln8I=)
2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7841 (0x1ea1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Validity
Not Before: Jan 24 15:52:43 2026 GMT
Not After : Jan 31 15:52:43 2026 GMT
Subject: CN=6974eacb-b8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:6d:3c:43:39:67:17:3d:d3:22:c8:07:97:
5d:7d:9b:89:b0:f0:cc:7b:69:9c:f8:b4:83:41:c7:
c1:0e:91:d4:2d:b4:1c:be:33:c9:b9:3a:dd:ac:aa:
67:a4:84:d9:9b:ef:6f:b3:9c:df:0f:b4:ea:81:96:
ee:e5:47:2f:eb:e6:c7:c6:96:9b:a1:de:d6:9a:71:
86:fb:b7:80:20:9c:71:ec:58:eb:6b:30:42:2c:f3:
50:63:84:32:b1:07:98:a5:cc:d6:9a:f3:06:d5:8e:
17:c6:6a:cd:5c:1e:42:e6:0c:9d:04:05:fb:b2:5c:
d8:67:c2:73:98:9b:c4:3b:d5:cf:03:bf:13:ab:f0:
39:76:9e:da:10:a7:9f:4c:24:c2:c7:f1:ea:40:bb:
7d:17:49:74:c3:67:61:8c:9a:8f:91:c9:45:45:14:
5c:dd:1d:b2:a7:81:4e:68:61:8f:6c:80:89:4b:69:
71:c7:6d:4d:df:ad:4e:bf:a3:b1:bb:91:c7:4d:6c:
35:2d:9d:f7:31:b9:29:b7:f0:f5:25:d0:01:dd:fc:
17:28:b5:14:08:64:66:7d:59:0a:fb:3f:57:72:41:
f4:a4:e4:7b:91:14:de:11:43:ec:5e:9b:5b:96:9f:
20:6d:a2:0d:49:c6:4b:3d:6d:57:3a:b8:cb:83:be:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:12:39:25:5F:85:5B:34:FE:B1:21:E6:C0:B0:96:2F:59:68:B3
X509v3 Authority Key Identifier:
keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:53:89:5b:a4:11:ea:7a:2c:75:24:4c:50:8e:bd:bc:fb:
1c:3f:55:fc:0f:b5:6d:dc:5b:a7:50:97:aa:13:fc:8c:c1:40:
bc:2a:73:46:ea:ad:ff:d2:6c:51:95:18:39:c0:62:6c:1a:93:
9c:a1:b1:3f:02:b0:e4:69:7d:9e:96:d2:4d:ce:86:ad:73:a2:
07:a8:a6:0c:ea:c9:c7:ec:fa:2a:49:5b:db:9a:81:ae:04:67:
41:6b:a4:55:85:fb:1c:25:a2:20:49:7f:78:1f:4b:9b:e4:20:
3b:ce:b4:f1:e4:b2:46:8b:b9:65:5c:ca:e1:af:02:98:eb:bf:
ed:8c:02:aa:66:6b:01:35:40:4d:f9:e7:81:d8:b0:49:c4:9e:
70:e1:96:06:3b:fd:ef:41:43:d1:37:e0:ed:96:39:c2:d7:d2:
7f:f0:a0:ac:67:dc:39:44:84:28:2a:34:60:71:ee:b2:06:f2:
e6:e4:97:09:5b:f4:78:a4:21:50:82:6e:44:14:dc:d2:a0:35:
67:89:d8:b7:f3:b9:e9:91:56:6c:64:d1:53:28:e2:bf:48:f3:
0a:3a:94:c7:8a:fa:3f:63:61:ac:0c:93:d2:dd:ae:4e:8d:7e:
f8:21:21:7d:22:3f:c8:a4:d8:f3:0f:8f:e1:6d:6b:73:ae:18:
9f:0f:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:23 2026 by rpki-client