This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json)
Hash identifier: Obt4Q2V9ntAPFMfxuvtlV6VTKv/dGCOUZWgUsdlYPPk=
Subject key identifier: 27:54:EE:14:69:50:AC:70:4B:46:3F:D3:96:BB:ED:80:32:D7:E5:F6
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
Manifest number: 069E
Signing time: Mon 02 Feb 2026 22:00:05 +0000
Manifest this update: Mon 02 Feb 2026 22:00:05 +0000
Manifest next update: Mon 09 Feb 2026 22:00:05 +0000
Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: himGkHnERMg22c2J9yQ8v/5JGpwu30mpR5NW6W7YqJg=)
2: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: IsFTUXxsw7oP6sOsJZN0fFgsJ2mQPRr349bOV7EbeEQ=)
3: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: X78yiDFZ0fXzQyDjcs0YvWLWmr93tmYzmKmek1pTunw=)
4: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: m0D2GQEuEloT+9a5hd4XJIXteBt7D/lUYhm6KRzzdn0=)
5: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=)
6: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: k5QsNW2UHXx3nyL0zXl6ErEpAH+UnqW9IYvw+MU5620=)
7: 68219776A41311EBBF911855C4F9AE02.roa (hash: d0b5vUBWzMm2pz0E2OMmgEy+tuggoWEtsruTL8xevaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 22:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Feb 2 22:00:05 2026 GMT
Not After : Feb 9 22:00:05 2026 GMT
Subject: CN=69811e65-2128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:61:00:8d:13:25:05:be:60:17:ab:93:fc:
e8:48:05:33:62:c9:49:38:3b:bf:5f:ce:ce:42:da:
73:74:b6:dd:1a:70:bf:91:26:7e:6b:17:e0:31:14:
5d:d1:e6:e9:8f:bc:ca:8a:a2:08:1e:78:fc:0c:30:
9b:88:5b:f7:46:e6:69:15:cd:a1:3e:db:2c:ed:49:
98:e6:85:f0:33:4a:24:63:29:6e:40:a0:72:1f:b7:
5d:2e:1b:45:ce:a6:71:1d:94:10:0c:2a:18:1c:ee:
b1:77:96:a8:44:6e:0b:a8:81:9e:46:aa:72:7d:76:
82:b7:53:fa:79:37:89:73:16:47:fa:a4:19:02:6d:
c1:86:6c:6a:23:42:ef:bb:6c:57:d2:a3:6e:d8:de:
ec:86:46:fa:72:98:2b:50:87:db:8c:64:a6:76:41:
a3:f5:8b:cd:37:c7:fe:19:14:2a:71:74:fc:9b:0e:
0b:4d:41:0d:0c:0d:73:37:0d:7e:f1:f0:d1:71:f2:
ea:3e:89:fa:75:99:58:17:5c:3a:7d:59:85:87:89:
93:d9:2c:e6:06:0f:67:46:1f:77:ce:b3:56:f7:55:
d6:05:39:26:52:49:51:15:e5:5b:23:9b:3c:4d:9a:
a7:82:18:24:e8:98:3d:3f:00:26:88:84:60:b2:cb:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:EE:14:69:50:AC:70:4B:46:3F:D3:96:BB:ED:80:32:D7:E5:F6
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:66:69:ce:aa:d6:d4:85:9d:d2:d8:75:90:ed:35:2e:d4:
bd:2f:c7:a7:52:94:3d:ec:56:2c:da:49:22:7e:76:9b:86:0a:
51:77:18:3d:65:49:14:d0:19:e3:2e:17:4c:c8:f0:b0:3e:d6:
c2:62:2e:76:2b:be:ee:d9:d9:f2:25:ba:aa:3c:b5:ad:a4:1a:
03:88:0f:50:dc:91:1c:80:43:c1:aa:1a:3c:e6:8b:92:c7:59:
50:53:39:13:a3:70:17:d8:c4:63:3a:19:4e:c3:92:3e:72:49:
8a:e9:08:ae:91:e1:79:14:5f:28:cb:fc:d3:a5:08:ac:87:e4:
1f:51:8f:2d:03:bb:82:bd:02:d4:fb:9d:e4:0e:eb:30:b6:74:
f9:f1:90:c1:99:50:68:26:63:ba:71:5b:b8:b9:a6:26:2d:e0:
b8:f0:44:e7:2d:c0:4c:34:5d:d1:1c:e7:d5:50:44:24:bf:04:
06:31:e1:af:fc:ed:6c:0d:2e:79:d8:ce:7b:f0:9c:fd:16:e1:
00:f0:77:5c:c3:1c:6d:3f:be:bf:b4:cf:73:6b:5d:77:9f:8c:
15:fa:2b:70:09:3e:4a:73:96:7b:bb:5b:ea:af:05:50:6c:40:
c1:ff:8a:c5:a5:30:5f:8d:d5:86:01:6a:f0:6d:d3:65:a2:6b:
30:51:a9:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz
MzIwODJDNTkwHhcNMjYwMjAyMjIwMDA1WhcNMjYwMjA5MjIwMDA1WjAYMRYwFAYD
VQQDDA02OTgxMWU2NS0yMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAig9hAI0TJQW+YBerk/zoSAUzYslJODu/X87OQtpzdLbdGnC/kSZ+axfgMRRd
0ebpj7zKiqIIHnj8DDCbiFv3RuZpFc2hPtss7UmY5oXwM0okYyluQKByH7ddLhtF
zqZxHZQQDCoYHO6xd5aoRG4LqIGeRqpyfXaCt1P6eTeJcxZH+qQZAm3BhmxqI0Lv
u2xX0qNu2N7shkb6cpgrUIfbjGSmdkGj9YvNN8f+GRQqcXT8mw4LTUENDA1zNw1+
8fDRcfLqPon6dZlYF1w6fVmFh4mT2SzmBg9nRh93zrNW91XWBTkmUklRFeVbI5s8
TZqnghgk6Jg9PwAmiIRgssuLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCdU7hRp
UKxwS0Y/05a77YAy1+X2MB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw
NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ
dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTFWZpzqrW1IWd0th1kO01LtS9L8enUpQ97FYs2kkifnabhgpRdxg9
ZUkU0BnjLhdMyPCwPtbCYi52K77u2dnyJbqqPLWtpBoDiA9Q3JEcgEPBqho85ouS
x1lQUzkTo3AX2MRjOhlOw5I+ckmK6QiukeF5FF8oy/zTpQish+QfUY8tA7uCvQLU
+53kDuswtnT58ZDBmVBoJmO6cVu4uaYmLeC48ETnLcBMNF3RHOfVUEQkvwQGMeGv
/O1sDS552M578Jz9FuEA8HdcwxxtP76/tM9za113n4wV+itwCT5Kc5Z7u1vqrwVQ
bEDB/4rFpTBfjdWGAWrwbdNlomswUamR
-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:08 2026 by rpki-client