This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier: +dMC/8tk3X6DcLKvYgW5V14LnaHLchiq+ZYBz+qm6wk=
Subject key identifier: 11:09:41:E7:89:14:61:86:EC:18:14:A7:09:92:40:9F:E8:3E:61:AA
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial: D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number: CC
Signing time: Sat 07 Feb 2026 05:45:35 +0000
Manifest this update: Sat 07 Feb 2026 05:45:35 +0000
Manifest next update: Sat 14 Feb 2026 05:45:35 +0000
Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: I2gUci89C1IIpmM+9RXdn/a8dfsTXgQ+egKe3MH38gU=)
2: 5042D03ED2EF11EFBA610425C4F9AE02.roa (hash: WZrBwoOurpDQ7WWhSutjgFaenWEpcVR+50/xxPnjbM0=)
3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: kIQgeEH3cWGmbVTGuCqHD9A6uxzSFfhUI3qigsLKKDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Feb 2026 05:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Validity
Not Before: Feb 7 05:45:35 2026 GMT
Not After : Feb 14 05:45:35 2026 GMT
Subject: CN=6986d17f-8240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:b4:fe:1c:6d:11:49:6f:db:e8:16:3d:f2:
22:3c:9b:71:c4:1a:37:3e:5a:97:ff:40:ff:6a:9b:
0e:42:61:15:6c:55:1e:bb:ed:7e:f9:e6:19:63:ea:
b1:24:cd:79:da:00:dc:51:ba:25:5d:1f:1e:e5:42:
91:e3:b1:da:24:4e:e8:13:11:2b:9a:f4:c1:0b:72:
5e:d4:c6:ea:c5:12:6c:23:64:00:8c:50:cd:3e:7c:
e1:98:f5:00:43:11:58:e8:c2:b5:3d:fb:44:2b:40:
72:77:20:3f:58:e1:79:62:75:80:3d:50:be:d0:19:
c3:3a:94:39:e0:2f:a9:bf:a7:61:a5:40:ce:35:32:
c8:3c:c5:a7:a4:75:ef:f6:7f:f3:05:35:49:26:a6:
26:78:fe:97:70:44:a1:68:87:e8:92:d0:8f:d1:9d:
05:ec:03:3e:80:63:48:7b:3e:6e:02:59:97:64:e1:
ef:5a:03:23:92:0e:59:9d:88:28:4c:f7:ad:e2:10:
57:56:0b:75:33:ae:bc:cc:06:01:dd:19:9e:3d:ad:
50:ec:6a:c6:e9:a9:fc:ce:db:38:8b:5c:0f:e2:5c:
17:a9:90:53:aa:f4:7a:ce:32:51:2e:1c:45:76:f8:
2f:c7:74:46:d7:4c:54:e1:db:70:56:bc:c9:c7:71:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:41:E7:89:14:61:86:EC:18:14:A7:09:92:40:9F:E8:3E:61:AA
X509v3 Authority Key Identifier:
keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:98:aa:cc:62:41:e9:f1:09:3a:37:db:ab:e1:69:eb:62:
6e:d1:33:75:39:81:1b:40:ea:9b:bd:6a:a8:a5:c8:c5:51:f2:
4e:55:cd:17:61:36:58:6f:ed:b1:5d:6e:26:3f:af:79:8d:c6:
53:c4:d0:d6:17:97:e2:92:1b:b8:04:20:8c:d7:89:20:e7:8b:
12:e3:68:f5:c8:97:93:fc:b5:55:d4:7f:7a:6c:c6:54:53:8b:
2f:8d:c4:5c:3e:f3:17:e3:b2:31:80:5d:8e:25:2f:9c:1d:ee:
1e:78:2e:10:94:c6:fc:f4:66:71:ce:a6:7b:55:9a:19:8b:5b:
8d:5c:c5:07:21:37:5f:ee:26:35:7b:83:0e:e5:a7:35:6e:ee:
10:01:35:00:33:74:34:79:eb:d0:2f:11:aa:58:e1:10:c5:bb:
4f:46:a9:01:80:cd:c4:3a:c0:bf:66:be:c3:80:5a:cf:67:66:
fb:de:dd:1e:98:dc:a3:2a:88:53:a9:04:29:97:5b:6f:69:2a:
df:0c:65:1e:59:21:5b:4a:f7:37:1a:b8:f3:e0:84:4e:18:a9:
64:3e:2d:1c:41:96:c7:b5:38:b6:73:87:38:02:96:dd:9d:39:
e7:df:e3:42:3a:22:14:11:4c:7a:0a:60:1c:aa:0c:1d:94:43:
aa:8b:98:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz
ODcwNjU1QUUwHhcNMjYwMjA3MDU0NTM1WhcNMjYwMjE0MDU0NTM1WjAYMRYwFAYD
VQQDDA02OTg2ZDE3Zi04MjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4kq0/hxtEUlv2+gWPfIiPJtxxBo3PlqX/0D/apsOQmEVbFUeu+1++eYZY+qx
JM152gDcUbolXR8e5UKR47HaJE7oExErmvTBC3Je1MbqxRJsI2QAjFDNPnzhmPUA
QxFY6MK1PftEK0BydyA/WOF5YnWAPVC+0BnDOpQ54C+pv6dhpUDONTLIPMWnpHXv
9n/zBTVJJqYmeP6XcEShaIfoktCP0Z0F7AM+gGNIez5uAlmXZOHvWgMjkg5ZnYgo
TPet4hBXVgt1M668zAYB3RmePa1Q7GrG6an8zts4i1wP4lwXqZBTqvR6zjJRLhxF
dvgvx3RG10xU4dtwVrzJx3FHqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEJQeeJ
FGGG7BgUpwmSQJ/oPmGqMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy
RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE
dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXYJiqzGJB6fEJOjfbq+Fp62Ju0TN1OYEbQOqbvWqopcjFUfJOVc0X
YTZYb+2xXW4mP695jcZTxNDWF5fikhu4BCCM14kg54sS42j1yJeT/LVV1H96bMZU
U4svjcRcPvMX47IxgF2OJS+cHe4eeC4QlMb89GZxzqZ7VZoZi1uNXMUHITdf7iY1
e4MO5ac1bu4QATUAM3Q0eevQLxGqWOEQxbtPRqkBgM3EOsC/Zr7DgFrPZ2b73t0e
mNyjKohTqQQpl1tvaSrfDGUeWSFbSvc3Grjz4IROGKlkPi0cQZbHtTi2c4c4Apbd
nTnn3+NCOiIUEUx6CmAcqgwdlEOqi5jz
-----END CERTIFICATE-----
Generated at Sat Feb 7 11:41:23 2026 by rpki-client