This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json)
Hash identifier: KXkcHFEU9pXr8pZqG6h/KzBHWQNYD4ku4YwUHdnwHds=
Subject key identifier: 4B:9A:60:E2:CD:F6:66:47:25:68:E3:EC:35:8D:BA:4A:22:50:AB:37
Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
Manifest number: 011C
Signing time: Sun 15 Feb 2026 04:53:18 +0000
Manifest this update: Sun 15 Feb 2026 04:53:17 +0000
Manifest next update: Sun 22 Feb 2026 04:53:17 +0000
Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: t72ldrbsPIxZPE8bgmu5RSeecI92Ndjxc3iNzNDAq9c=)
2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: gFJfC0bItrBd113l2fr+RXunsEK2SI34GEF/xaXg74s=)
3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: r3ab2hXEUx4DTxPcSBrvJTxlFoImKdTbWENPYxt4ZVo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 04:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1
Validity
Not Before: Feb 15 04:53:17 2026 GMT
Not After : Feb 22 04:53:17 2026 GMT
Subject: CN=6991513d-5b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:49:c3:6e:06:2f:dc:4e:bd:e7:49:56:94:
9f:d2:7b:b7:37:bf:ec:a2:5d:31:f7:4e:01:d2:0b:
2e:ea:54:34:dd:cf:62:c5:49:bc:bf:2d:6e:48:0a:
b1:a1:15:e5:a7:b2:fa:c7:2f:19:f2:6d:cd:74:49:
8a:c0:78:78:83:4a:1a:74:3f:1e:eb:ae:48:52:0a:
5f:32:96:18:d6:a7:bf:69:a3:32:b5:62:87:4d:a2:
f1:69:f4:7f:d8:62:ea:a1:bf:c2:a7:ef:c1:f0:81:
d0:3a:7a:6a:f7:c5:68:51:dc:00:0e:08:b0:0f:a8:
aa:24:11:3b:e1:be:4a:7c:8c:57:a8:4c:d9:c2:a6:
45:0e:59:c9:87:a6:fe:85:7c:c7:19:20:41:21:8f:
c6:62:d4:e2:19:c3:6f:a0:01:bd:80:16:95:2d:1f:
ea:f6:f7:60:a4:ab:3a:c2:5f:0e:5e:31:ba:ee:1d:
44:8e:b0:ca:ea:f1:8f:93:52:87:9a:8a:cd:f4:3b:
6a:14:a4:f6:60:77:eb:ed:7b:bc:d8:f0:18:55:a5:
e3:7c:0b:0d:e7:6f:9e:33:17:c3:ac:aa:49:44:07:
d6:b5:53:79:bf:7a:35:0f:51:38:8a:d4:79:cc:1c:
ac:39:31:c5:a6:8e:4e:ab:aa:e3:d8:c7:22:20:6a:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:60:E2:CD:F6:66:47:25:68:E3:EC:35:8D:BA:4A:22:50:AB:37
X509v3 Authority Key Identifier:
keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:27:0e:0b:80:35:83:57:5d:b5:5b:93:0c:d8:48:87:71:
72:6c:9e:78:d5:8b:6f:f8:d3:79:98:0c:4f:52:64:a3:8a:bb:
38:70:a4:68:c0:07:55:3e:a0:f9:d4:8d:e4:17:3a:9b:a5:dd:
e4:28:91:03:d1:bf:ba:a2:25:3f:f8:78:26:d5:af:30:79:ca:
ed:67:8e:3e:95:f1:08:bc:c5:54:6a:a1:83:5e:11:f9:46:a0:
9d:09:fc:27:43:71:20:a5:ea:1f:66:ed:d7:97:71:9e:9c:7d:
6d:c5:10:81:a6:d2:f5:ef:7a:78:2f:f0:14:7a:3b:11:c4:8c:
7e:f0:f2:11:da:4a:2e:85:80:29:75:9f:d1:9d:9a:67:a4:37:
f8:d6:15:1d:9b:0d:b6:f6:76:ed:4a:cf:fa:c8:d3:ee:d4:48:
c0:42:b2:9a:d3:2b:8a:e9:93:6e:88:a8:64:63:19:a4:56:aa:
d9:d3:1b:99:aa:70:37:64:27:1d:89:64:ae:65:e5:93:7c:d3:
9a:9e:4a:13:c0:1f:02:c4:43:17:16:b4:d5:59:0e:0d:ad:ed:
8c:a9:ef:b4:9d:d3:60:94:02:a7:18:6e:7b:cb:ee:40:7f:4d:
4e:ab:84:93:ad:28:6a:fd:fa:f5:ea:75:32:5d:c4:cf:7d:89:
60:a4:98:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD
MUQyRDQ4RjEwHhcNMjYwMjE1MDQ1MzE3WhcNMjYwMjIyMDQ1MzE3WjAYMRYwFAYD
VQQDDA02OTkxNTEzZC01YjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlFRJw24GL9xOvedJVpSf0nu3N7/sol0x904B0gsu6lQ03c9ixUm8vy1uSAqx
oRXlp7L6xy8Z8m3NdEmKwHh4g0oadD8e665IUgpfMpYY1qe/aaMytWKHTaLxafR/
2GLqob/Cp+/B8IHQOnpq98VoUdwADgiwD6iqJBE74b5KfIxXqEzZwqZFDlnJh6b+
hXzHGSBBIY/GYtTiGcNvoAG9gBaVLR/q9vdgpKs6wl8OXjG67h1EjrDK6vGPk1KH
morN9DtqFKT2YHfr7Xu82PAYVaXjfAsN52+eMxfDrKpJRAfWtVN5v3o1D1E4itR5
zBysOTHFpo5Oq6rj2MciIGqEFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuaYOLN
9mZHJWjj7DWNukoiUKs3MB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB
QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl
ZkVqS0RGM05LNmJCMHRTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAo/ycOC4A1g1ddtVuTDNhIh3FybJ541Ytv+NN5mAxPUmSjirs4cKRo
wAdVPqD51I3kFzqbpd3kKJED0b+6oiU/+Hgm1a8wecrtZ44+lfEIvMVUaqGDXhH5
RqCdCfwnQ3EgpeofZu3Xl3GenH1txRCBptL173p4L/AUejsRxIx+8PIR2kouhYAp
dZ/RnZpnpDf41hUdmw229nbtSs/6yNPu1EjAQrKa0yuK6ZNuiKhkYxmkVqrZ0xuZ
qnA3ZCcdiWSuZeWTfNOankoTwB8CxEMXFrTVWQ4Nre2Mqe+0ndNglAKnGG57y+5A
f01Oq4STrShq/fr16nUyXcTPfYlgpJgr
-----END CERTIFICATE-----
Generated at Mon Feb 16 08:08:12 2026 by rpki-client