This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
File: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft (raw, json)
Hash identifier: XQFssO0X0TJ2tyytX8BVOKwxA7sn4oHhdJiK85Z0TFQ=
Subject key identifier: 5B:4A:1A:02:92:8C:53:C0:05:35:F3:B5:D1:9F:91:9C:AF:09:70:15
Authority key identifier: E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
Certificate issuer: /CN=A918D96C/serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Certificate serial: 34FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
Manifest number: 34FF
Signing time: Sat 24 Jan 2026 14:46:30 +0000
Manifest this update: Sat 24 Jan 2026 14:46:30 +0000
Manifest next update: Sat 31 Jan 2026 14:46:30 +0000
Files and hashes: 1: 4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl (hash: lUnAhAFtzQkONrNEncDZEJMyl5ZeUgGoWXQSzltZH7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D96C, serialNumber=E08D6C7FE35FE36642FE6F66CCDA2866A66242F1
Validity
Not Before: Jan 24 14:46:30 2026 GMT
Not After : Jan 31 14:46:30 2026 GMT
Subject: CN=6974db46-cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:bf:82:c5:3b:ed:47:92:86:50:c5:a8:0a:
f5:40:e9:01:6d:6e:41:11:a9:72:a1:9d:da:03:33:
83:35:ec:5a:1b:60:a7:04:58:15:75:01:52:8e:c9:
e9:fc:59:35:17:73:64:c8:08:7f:4a:a5:9c:fa:db:
2f:27:ff:05:12:56:35:67:dc:5d:f2:fe:10:48:f6:
8d:9b:e4:10:cf:d2:77:ed:0d:34:27:7a:fb:1b:dd:
38:b8:dd:39:01:8b:4e:07:13:63:47:7f:69:10:1d:
76:d7:f2:3a:c2:3b:b5:a2:fd:52:cc:2b:73:ae:6a:
f4:02:50:c1:69:bc:9f:3d:58:ed:a9:29:d6:80:cf:
a9:de:2e:a3:6b:fd:67:fe:2f:8b:22:4d:bd:3f:8f:
e2:a2:4a:a7:33:07:6a:ac:a4:e0:8b:e1:92:f1:5a:
a9:40:67:e6:b9:7f:48:3f:f0:9e:a6:b2:4a:78:f6:
4f:01:fe:17:30:f0:46:6b:1d:92:de:14:ac:f4:8a:
88:52:bd:0e:ab:89:e1:ff:e4:8d:55:43:b2:f0:00:
12:c4:79:b6:c7:bd:22:53:07:42:bb:1a:82:aa:ed:
a9:89:57:91:a6:82:8f:c1:5a:c2:99:08:c7:76:fc:
c8:d1:69:fc:61:50:b6:25:3e:21:3f:4d:ef:b0:56:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:1A:02:92:8C:53:C0:05:35:F3:B5:D1:9F:91:9C:AF:09:70:15
X509v3 Authority Key Identifier:
keyid:E0:8D:6C:7F:E3:5F:E3:66:42:FE:6F:66:CC:DA:28:66:A6:62:42:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D96C/A42E37FE1D9611E29C5F4A7F08B02CD2/4I1sf-Nf42ZC_m9mzNooZqZiQvE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:dc:ff:aa:ac:2b:11:70:f3:08:06:8b:58:b6:27:fe:88:
4d:8e:72:42:dd:d8:f9:72:41:c5:b0:42:64:11:c0:4c:04:0a:
07:d9:6a:9e:5a:4f:d4:30:83:b0:6f:46:99:9f:e4:9b:87:c8:
58:ae:08:c3:3b:bf:9e:63:d8:cb:bd:30:e8:cb:1e:29:bd:3a:
2c:65:e1:e3:dd:cb:7b:df:1a:db:46:51:ff:b1:5c:d0:80:5d:
78:f2:ca:6a:60:0d:72:6a:18:15:bd:2e:56:7b:50:de:b0:16:
85:ef:8c:1f:23:9c:5f:3f:36:72:96:be:60:f4:bd:ed:6a:52:
49:4e:09:5b:c6:35:b5:32:ad:f7:64:05:86:e4:9f:84:1d:6a:
02:05:54:a5:5d:8e:75:f5:4a:6c:f5:3d:7e:60:34:7f:ec:02:
b5:07:1f:90:62:b6:c9:30:83:50:d5:bc:9b:06:67:24:21:85:
d7:8a:e0:e5:08:bd:7f:e2:a4:3a:7a:1a:63:f1:d2:0e:8c:21:
56:28:c3:6c:f2:eb:4f:54:fd:b7:69:eb:ba:40:b6:47:8d:cf:
8f:c1:b2:da:83:3e:55:20:56:8d:ab:b2:73:93:33:4b:04:e6:
25:67:19:08:f9:13:13:8b:f1:0a:59:f7:ae:74:39:8d:0b:b8:
10:85:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:23 2026 by rpki-client