This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json)
Hash identifier: cLWwNswO4Xnq3v8Nx0FSNfUjGYxAHfvz7Mc42piLWIQ=
Subject key identifier: 9F:33:81:42:60:77:78:16:B0:75:4D:50:6B:93:E5:50:C3:DC:8C:D8
Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Certificate serial: 1E8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
Manifest number: 1E73
Signing time: Sun 14 Dec 2025 15:57:00 +0000
Manifest this update: Sun 14 Dec 2025 15:57:00 +0000
Manifest next update: Sun 21 Dec 2025 15:57:00 +0000
Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: dD0ymCpFGVpr/5t+fCNDPwbPg8nkdpO/LEdmpmcEno8=)
2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 15:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7820 (0x1e8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D
Validity
Not Before: Dec 14 15:57:00 2025 GMT
Not After : Dec 21 15:57:00 2025 GMT
Subject: CN=693ede4c-7ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:10:fd:b4:83:8d:e2:80:19:37:a5:a6:a6:
97:93:3e:05:28:f1:d3:f4:50:cd:44:b9:a1:6b:a7:
19:f2:09:d9:60:c7:ed:8a:5c:5e:78:41:c3:6c:6a:
90:5b:60:11:86:a7:77:c3:6a:dc:46:e7:fd:cf:ab:
87:0d:96:d8:77:30:97:95:38:9f:46:7d:d0:79:bf:
4d:21:0c:af:e1:3d:62:46:33:8d:b7:cd:bf:dd:b2:
6b:74:8f:63:6a:3f:58:2c:f0:1e:9c:9e:c9:13:40:
e2:1c:cb:c8:37:49:91:0e:9f:28:52:a8:a8:7c:0a:
8e:ce:d6:06:7e:85:b5:03:53:37:62:d4:6a:e2:42:
b1:6d:dd:ba:10:6e:62:45:97:6e:10:a1:b3:b6:c7:
13:8b:70:a2:e3:60:db:a4:82:47:d5:6e:1e:fa:38:
0a:1c:c8:8b:c1:6d:00:33:f9:59:7b:27:b3:4b:91:
5d:62:be:e4:26:45:07:14:85:02:59:66:71:a4:d7:
f4:cc:41:5a:41:51:49:db:53:3d:4e:92:aa:69:dc:
23:27:35:2b:18:24:b0:a6:ce:8c:fa:16:50:02:2e:
ec:79:3a:e3:cc:d7:ed:6d:5e:e9:01:ce:cd:d0:32:
4b:a4:14:1a:bb:57:c2:78:4c:ba:06:f3:f4:ab:c7:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:81:42:60:77:78:16:B0:75:4D:50:6B:93:E5:50:C3:DC:8C:D8
X509v3 Authority Key Identifier:
keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:c5:01:bc:14:aa:1a:9f:de:0d:78:4d:e2:8b:6e:4e:2b:
4c:91:78:cc:7f:2e:d7:32:a0:0c:f4:f6:c5:fd:e3:35:a8:49:
fa:54:ab:0f:06:e3:85:01:f2:88:09:cc:f3:a8:f3:66:17:b6:
ac:62:fb:10:91:b9:83:92:f4:26:c9:8c:76:08:3e:3e:da:2e:
8a:07:ac:f5:9d:94:a1:67:34:73:7b:a3:ee:98:1c:b7:b7:6f:
23:b6:d8:23:e3:96:9f:80:dd:42:e8:1d:1f:21:e6:8e:4a:02:
c5:ed:fb:07:dc:cf:fa:1e:79:26:a9:e0:4b:d6:28:09:23:b6:
0d:45:6a:7b:8b:68:95:3c:d9:67:3d:97:d0:1a:88:bb:1d:13:
78:44:e4:63:4d:81:49:77:01:90:97:3d:e8:30:ab:38:48:8b:
48:77:8c:5c:7f:17:2d:e7:6a:f8:3d:be:24:f1:02:48:2e:7d:
7b:a2:37:9b:79:1c:83:ff:f6:42:4b:93:f0:f6:d2:b8:ac:ba:
1f:5b:4e:e4:53:be:b1:64:5f:8c:3f:33:b9:ff:5d:3f:18:d9:
8a:b6:3f:81:34:5a:73:17:7f:41:2a:3d:f9:7f:92:ee:8b:2d:
a2:46:ed:81:0c:0a:7f:ba:9b:47:78:27:9a:40:5f:44:85:8c:
ca:3e:b3:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx
QURCQzQxMkQwHhcNMjUxMjE0MTU1NzAwWhcNMjUxMjIxMTU1NzAwWjAYMRYwFAYD
VQQDDA02OTNlZGU0Yy03ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTIQ/bSDjeKAGTelpqaXkz4FKPHT9FDNRLmha6cZ8gnZYMftilxeeEHDbGqQ
W2ARhqd3w2rcRuf9z6uHDZbYdzCXlTifRn3Qeb9NIQyv4T1iRjONt82/3bJrdI9j
aj9YLPAenJ7JE0DiHMvIN0mRDp8oUqiofAqOztYGfoW1A1M3YtRq4kKxbd26EG5i
RZduEKGztscTi3Ci42DbpIJH1W4e+jgKHMiLwW0AM/lZeyezS5FdYr7kJkUHFIUC
WWZxpNf0zEFaQVFJ21M9TpKqadwjJzUrGCSwps6M+hZQAi7seTrjzNftbV7pAc7N
0DJLpBQau1fCeEy6BvP0q8clkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8zgUJg
d3gWsHVNUGuT5VDD3IzYMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC
OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT
MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDccUBvBSqGp/eDXhN4otuTitMkXjMfy7XMqAM9PbF/eM1qEn6VKsP
BuOFAfKICczzqPNmF7asYvsQkbmDkvQmyYx2CD4+2i6KB6z1nZShZzRze6PumBy3
t28jttgj45afgN1C6B0fIeaOSgLF7fsH3M/6HnkmqeBL1igJI7YNRWp7i2iVPNln
PZfQGoi7HRN4RORjTYFJdwGQlz3oMKs4SItId4xcfxct52r4Pb4k8QJILn17ojeb
eRyD//ZCS5Pw9tK4rLofW07kU76xZF+MPzO5/10/GNmKtj+BNFpzF39BKj35f5Lu
iy2iRu2BDAp/uptHeCeaQF9EhYzKPrPC
-----END CERTIFICATE-----
Generated at Tue Dec 16 12:34:17 2025 by rpki-client