This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json)
Hash identifier: hyyjYE5PNhYytRgHEnxK56l7vrVhIfUqJ49RbIylRWg=
Subject key identifier: F3:93:C2:76:71:37:8A:94:2C:7E:9C:15:0C:05:F3:10:12:98:F8:23
Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Certificate serial: 2A91
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
Manifest number: 2A86
Signing time: Sat 14 Feb 2026 14:23:06 +0000
Manifest this update: Sat 14 Feb 2026 14:23:05 +0000
Manifest next update: Sat 21 Feb 2026 14:23:05 +0000
Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: MUQF8oLVQ6JUSM3KNenmWf0eOzVs1zqQ6MmraWCPBKM=)
2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: symelOI4KiPwqS+zxOG2abXkQkOu/9Ecrvxkqaxc9Us=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 14:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10897 (0x2a91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A
Validity
Not Before: Feb 14 14:23:05 2026 GMT
Not After : Feb 21 14:23:05 2026 GMT
Subject: CN=6990854a-5f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:2a:53:11:d2:64:c2:ab:50:88:50:c7:89:
4a:e7:8a:21:1c:49:ef:e4:89:13:35:00:91:4c:06:
ea:3d:db:c7:07:6b:36:c2:6c:f7:42:c7:76:62:bd:
e6:ab:ab:f8:d7:33:34:f3:28:a6:06:de:fb:e9:37:
1a:29:94:de:35:8c:38:e4:dc:56:a9:2c:bb:12:8a:
bb:b3:c8:54:90:79:26:fe:25:a1:c0:c4:81:8d:e2:
63:a4:fe:f0:eb:2a:d1:92:af:6b:ac:40:fb:0a:13:
da:75:70:40:2e:97:f4:9b:40:d6:2b:be:59:82:7a:
39:f9:1a:74:8b:bb:67:48:57:8f:58:86:80:ab:c5:
0f:33:94:68:30:42:a3:22:d9:9e:90:9a:74:c1:f5:
6d:a2:0e:43:7e:ad:f1:f8:e4:9d:22:9b:5e:95:19:
3f:d2:9c:72:df:e1:18:d1:d0:87:e3:d1:bc:a9:31:
5f:46:9e:7a:c9:a3:04:aa:6d:43:c4:31:3e:7f:84:
ef:c8:d1:93:1f:07:3d:b6:c7:33:65:62:13:c5:72:
f0:a1:70:f0:0e:e8:99:c5:b2:cc:a3:c8:9c:85:fb:
0c:e0:7d:ce:a7:da:fb:8f:19:6a:9c:34:60:15:4c:
dd:4d:7a:02:a0:87:e5:76:23:17:83:b6:b0:af:7a:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:C2:76:71:37:8A:94:2C:7E:9C:15:0C:05:F3:10:12:98:F8:23
X509v3 Authority Key Identifier:
keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:38:f7:93:2c:90:5d:43:df:b1:ed:4a:cd:16:59:66:1d:
b5:29:10:3e:6f:42:35:f9:70:38:c3:33:14:41:88:2b:65:8d:
74:86:44:f1:c0:73:4f:f1:b4:88:d0:88:f9:6f:a5:8b:be:2a:
1b:36:b5:47:90:58:5e:20:70:99:9c:8b:a1:11:e0:fd:b9:08:
df:e7:88:cb:e2:68:b5:25:ae:75:71:75:81:d1:84:5c:b5:5c:
63:83:c5:b8:60:10:08:3a:7c:ba:99:dc:c4:a8:f9:c7:bf:f5:
74:f5:bd:db:9d:d3:95:18:ee:06:71:11:be:47:0e:1e:8b:80:
4d:7a:29:05:8e:f0:7d:69:63:f8:77:b9:90:3c:59:bf:23:1e:
bd:29:42:51:98:73:98:11:e2:db:59:0f:81:1d:14:20:46:97:
f4:41:f6:21:5e:38:13:08:e3:d8:43:d9:45:8e:97:85:e9:df:
db:6f:eb:2a:46:04:67:40:20:10:44:53:5a:52:95:e1:56:38:
78:9f:61:a5:81:5b:c0:77:8f:62:97:7d:04:97:22:2d:a6:57:
0a:ea:61:b3:a7:02:ef:7c:37:e4:67:e0:88:d8:37:16:ee:9a:
0d:23:25:39:4e:03:3e:a0:89:ca:54:85:53:0a:d7:50:69:2c:
aa:fe:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 12:54:28 2026 by rpki-client