This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier: jwI7y71Te194l6NgTbjxTxAd+j2THuW88gs3c/bd7BY=
Subject key identifier: 2D:02:62:A7:7B:67:09:59:93:B5:DA:A1:6F:72:D2:49:3E:E8:08:5E
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial: 0CC5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number: 0C9E
Signing time: Tue 10 Feb 2026 18:16:16 +0000
Manifest this update: Tue 10 Feb 2026 18:16:15 +0000
Manifest next update: Tue 17 Feb 2026 18:16:15 +0000
Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: k8V1wa0qev61sr33zyl0r/vcLZqKU2wf6h+5wHRMquw=)
2: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o9KgCgIfk9qmZZ9pgzWFPU4WMxKkFhiZ4bjzLNQ6ffs=)
3: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: ltU83qHdHMX+gE2JiPsnwwizXD7fI0umImKJHXZ+qiY=)
4: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: bKIVbhRs5w35IIfwUaxKPcUoIg+dZW+Orr/jkzvA1ls=)
5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: X2T86WPoFoEyZcogT1ndr7RJyh96AHdCumJauzM/7xw=)
6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: 3CkpfzzdlD3cY7gMPcsoVBDo+GHLrm85uXTpFP0fJ9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 18:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Validity
Not Before: Feb 10 18:16:15 2026 GMT
Not After : Feb 17 18:16:15 2026 GMT
Subject: CN=698b75f0-7459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:09:b8:6c:59:3f:a5:e5:f9:e8:20:d8:57:
6b:ae:f0:c7:b8:f4:61:80:ce:e0:30:40:f2:f5:ab:
51:fd:07:5b:8a:4e:e7:63:16:76:aa:48:e3:14:d1:
c1:36:7d:ea:47:f6:14:09:38:3f:ee:19:dd:f6:04:
df:9f:0f:13:95:bb:d1:83:a3:4f:88:87:2a:ee:74:
02:66:e4:75:c6:97:1c:f9:09:26:07:8e:20:9d:b2:
24:4b:be:2c:8b:a9:90:b5:bf:76:45:01:cf:74:a9:
af:be:e8:da:35:d5:e0:ce:90:c4:42:6c:04:28:3d:
0d:aa:99:82:e5:eb:e7:bb:44:c4:3f:f4:9a:9c:f4:
8f:7d:35:3f:92:ce:4f:c4:fc:93:99:b4:33:db:f3:
62:26:ac:1f:6d:48:54:c7:a3:04:92:47:40:09:c1:
0a:3e:3d:45:42:11:b5:d1:67:83:90:a1:45:ff:69:
33:e2:ba:b7:68:a4:23:b8:07:e8:01:10:c1:d5:fa:
9b:7d:8d:58:1d:f1:3b:73:1d:c7:6c:ca:62:6b:1a:
d8:61:d6:d3:34:28:0b:e9:4f:77:d6:55:81:9a:6f:
d9:c3:94:46:36:1f:37:3d:15:0b:42:ff:a0:78:60:
5b:62:27:60:d0:02:18:ac:e2:2f:75:cb:28:6f:39:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:62:A7:7B:67:09:59:93:B5:DA:A1:6F:72:D2:49:3E:E8:08:5E
X509v3 Authority Key Identifier:
keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7f:45:50:79:db:9a:8a:55:50:19:b5:bc:ad:8a:59:40:ed:
94:0e:3b:cc:f2:dc:0c:2d:67:c8:c2:90:14:64:7a:11:34:b9:
53:22:e4:35:0e:a5:80:d9:c6:26:d0:50:5d:38:b1:12:25:6b:
7b:86:28:d2:ed:31:fe:8a:9e:a6:be:5c:17:be:8a:73:ca:c4:
e6:5d:c2:b3:bd:b1:12:de:14:a2:81:27:e8:b6:c1:6f:f6:00:
aa:a6:dd:5c:d0:c3:3f:6d:0b:19:6a:25:04:07:a0:93:be:96:
2b:2f:c5:0c:3f:4e:14:65:0a:b3:d8:59:1b:84:da:9b:e0:71:
cf:18:e2:93:12:83:46:6f:84:b6:07:ef:cd:ac:12:b1:c9:c8:
32:eb:39:b7:3a:e1:0b:8d:60:e8:81:7a:c6:11:3a:e2:8c:42:
bb:05:68:b7:0d:38:b0:f6:e4:de:84:f4:fc:0c:7b:98:c4:c3:
8c:d8:b7:67:00:1c:fa:9b:56:8b:3e:b8:68:47:f7:db:35:0f:
70:d2:a5:c0:09:83:20:ca:b7:c7:8a:c5:8d:f7:99:2f:a8:e5:
e2:8f:a6:78:19:7e:8d:71:90:db:e6:73:c6:22:52:03:5e:eb:
f3:2c:55:00:31:36:fa:5c:cb:f5:5e:7e:89:4a:7a:53:40:54:
64:ac:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 06:57:06 2026 by rpki-client