This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json)
Hash identifier: IJujni+1NGrCFYZ/7c/IcgZsM1837cg+4P3vMKK0hz8=
Subject key identifier: E8:A9:4F:9E:A3:74:D8:2F:5E:8C:D0:C9:F6:43:47:57:57:61:98:FC
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
Manifest number: 01C2
Signing time: Sun 15 Feb 2026 03:05:00 +0000
Manifest this update: Sun 15 Feb 2026 03:05:00 +0000
Manifest next update: Sun 22 Feb 2026 03:05:00 +0000
Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: uM8XvFKLv/Fb9yCFMJgrZS8Rgjj8IhpDpXhXbEZJpsY=)
2: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=)
3: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=)
4: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=)
5: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=)
6: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Feb 2026 03:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Validity
Not Before: Feb 15 03:05:00 2026 GMT
Not After : Feb 22 03:05:00 2026 GMT
Subject: CN=699137dc-6049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:a4:ca:5a:64:0f:71:68:0c:4b:0d:f4:30:
a6:70:45:c1:44:9a:e5:f1:f1:0d:4b:31:f1:fe:14:
f1:83:50:45:61:2f:97:f3:a3:7e:56:5f:e9:7f:be:
5c:bf:a7:2c:37:5a:9e:20:e9:7f:45:31:b0:83:2f:
b8:9f:d7:a0:eb:dc:56:3c:68:0f:54:8f:ef:9d:f6:
aa:6c:0b:92:ed:83:22:54:45:52:8e:5f:90:cc:7b:
d9:32:0f:1b:b5:3c:34:c0:9d:55:c5:a4:a8:93:f0:
e8:60:4a:1f:1d:7d:46:f0:d2:a0:37:85:44:00:68:
a9:a1:00:94:3c:99:e7:61:84:c2:39:83:0c:73:b8:
90:49:ba:de:f0:29:11:23:8e:40:d8:20:69:9f:6e:
07:71:2b:65:77:c7:c7:06:c6:a7:e4:d8:33:0f:04:
7c:19:6f:ef:37:5a:62:30:c5:81:70:4f:50:77:da:
a3:c9:57:43:bd:bc:c0:f6:87:97:82:6d:b7:45:0c:
52:16:9c:a9:6b:b2:bf:1a:66:2b:99:4a:8a:a3:36:
02:3f:e9:ef:52:73:d6:69:90:9a:c9:fe:c7:54:b7:
b0:7c:59:12:2f:2b:56:55:bb:82:c1:8d:01:a5:6b:
0a:01:13:1b:49:78:a5:6e:88:d5:71:1e:61:7c:8e:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:4F:9E:A3:74:D8:2F:5E:8C:D0:C9:F6:43:47:57:57:61:98:FC
X509v3 Authority Key Identifier:
keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:b0:62:bb:9e:84:b7:4e:3a:d0:96:da:0e:64:35:41:2d:
87:93:35:1c:81:32:9a:2a:14:36:a7:03:86:2e:6a:72:01:a9:
af:62:6d:d8:dd:98:95:63:11:22:dc:26:34:47:d2:77:af:03:
76:bd:7f:2c:3d:bd:2e:49:a1:42:f4:94:e7:76:50:9e:4b:54:
db:9a:ec:04:18:7c:a3:0c:f1:90:ea:f3:8c:14:e0:95:7e:8e:
0b:97:83:5b:bd:7c:87:40:93:d4:89:f8:01:16:a2:8f:4e:79:
f6:15:72:4c:73:ba:c5:3d:7c:55:d8:b3:e5:06:dd:55:aa:b7:
5c:cd:18:64:64:c8:c2:a1:0f:19:96:dc:a4:a5:53:79:5d:6a:
b3:83:db:6c:70:43:c7:e4:f0:a5:e0:b4:0c:02:6d:6a:63:9a:
f8:6b:01:d8:af:dc:04:11:c1:35:0f:f8:5f:62:34:c1:12:f5:
bf:0e:e5:cf:6b:46:eb:81:f3:0b:3f:63:00:7d:8d:da:84:76:
ef:44:a6:88:19:19:98:16:23:67:ed:eb:93:41:ed:ed:86:e9:
cc:8d:e8:9f:3e:fe:51:53:c2:7a:c6:f7:3c:18:95:6f:b2:59:
9c:c0:1d:aa:5b:e0:04:10:e8:cc:40:02:ac:17:e1:e7:77:af:
8c:04:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:08:14 2026 by rpki-client