This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json)
Hash identifier: QNnqqghVkYKHO7KPD9IDrl1xifP0cn+X05u8AP8bTH4=
Subject key identifier: 9B:E5:DD:F1:9B:C0:B1:7E:0D:54:08:CC:10:6C:40:06:82:6C:50:58
Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE
Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE
Certificate serial: 06BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
Manifest number: 06B6
Signing time: Sun 08 Feb 2026 21:59:17 +0000
Manifest this update: Sun 08 Feb 2026 21:59:16 +0000
Manifest next update: Sun 15 Feb 2026 21:59:16 +0000
Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: kgund0G+on9b9u/W5zqrcGQifjzhF3C2hoj2tJp2EWw=)
2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: X9cvrVuJPpabRIeX9DHncrs9qYYqY20P3gqoMKcfrPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl
rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 21:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE
Validity
Not Before: Feb 8 21:59:16 2026 GMT
Not After : Feb 15 21:59:16 2026 GMT
Subject: CN=69890735-e7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:6c:88:a7:c3:c4:83:76:f8:3d:2e:3b:28:
0b:88:e4:4c:35:e0:29:b8:40:b4:03:5b:a2:66:af:
4a:8e:9c:a0:76:44:9e:a2:4f:12:e5:7a:8d:f5:e0:
1b:0e:58:34:a1:2e:17:fb:be:73:0a:06:fb:e1:48:
93:87:f2:2b:c4:8f:c6:d9:99:55:b1:e9:03:79:a2:
d7:51:36:97:1f:77:23:87:da:01:07:d4:27:95:9f:
3d:d6:ef:8b:28:a8:47:f9:e9:36:2d:78:0f:d6:83:
a3:5e:ea:cd:6f:44:da:1e:4e:69:1d:c5:1d:6c:ce:
46:e6:e7:08:69:f5:f2:73:e7:c8:60:f3:ea:d9:10:
05:27:e1:ab:e8:87:21:bb:60:3d:f1:df:59:bc:dd:
f1:15:cf:3f:6c:15:0b:74:00:49:50:1f:4a:f4:0b:
ed:d0:f9:5d:bd:6f:3e:c1:2d:21:21:83:37:31:9a:
58:ff:69:db:9d:b8:44:86:51:96:28:cb:3e:89:68:
39:67:b9:87:06:8b:b8:7c:97:cd:7b:bd:28:3c:40:
ac:56:9b:bd:1f:6d:cb:f3:5a:28:58:2b:a0:c5:45:
e5:e9:0d:2e:4b:2b:74:d9:7f:bd:6a:a0:b1:af:f3:
f3:3f:98:cb:9b:f0:53:6f:b6:22:bf:ba:c0:23:03:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:DD:F1:9B:C0:B1:7E:0D:54:08:CC:10:6C:40:06:82:6C:50:58
X509v3 Authority Key Identifier:
keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:a6:d7:9e:4f:42:03:b5:11:dd:31:86:54:58:e5:cc:de:
eb:dc:23:0a:1e:b9:17:ff:11:2d:87:56:83:1b:93:c5:c3:80:
b7:a3:eb:7c:58:65:21:86:97:e8:9d:37:09:0e:08:56:4f:c5:
68:d1:dc:18:1f:a2:c6:cd:37:d4:64:42:ff:24:2f:b9:0f:fd:
47:ae:f3:27:b9:b3:24:b5:dc:aa:ea:2e:4e:d9:b4:a9:17:67:
02:68:72:a6:85:5f:60:08:08:ec:d3:ba:b9:f1:6a:24:9a:c0:
ad:e8:4c:e7:05:24:9c:35:5d:bc:ed:e6:7f:c7:d8:68:75:af:
82:22:81:7e:62:54:a4:6d:bd:1c:d4:a2:d0:10:6c:dd:c2:3e:
b0:93:12:3b:a8:ff:fb:4a:5a:36:7f:f3:9a:81:64:69:d9:67:
3f:56:21:d9:25:aa:c9:0b:c6:fc:54:18:5e:22:62:9e:ec:96:
4c:0f:61:7a:95:73:58:86:2f:44:47:13:00:89:27:f4:5b:23:
dc:21:af:f4:3a:9e:9b:06:8a:d0:57:8b:2e:b2:25:37:36:f1:
69:93:4b:fe:3d:7a:1f:12:6f:f2:ce:8f:65:b7:02:07:a8:2f:
24:ad:d9:e3:32:4c:43:39:d3:c8:35:91:45:35:45:b0:ab:0e:
38:b2:95:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5
Q0YxQzRGQkUwHhcNMjYwMjA4MjE1OTE2WhcNMjYwMjE1MjE1OTE2WjAYMRYwFAYD
VQQDDA02OTg5MDczNS1lN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulxsiKfDxIN2+D0uOygLiORMNeApuEC0A1uiZq9KjpygdkSeok8S5XqN9eAb
Dlg0oS4X+75zCgb74UiTh/IrxI/G2ZlVsekDeaLXUTaXH3cjh9oBB9QnlZ891u+L
KKhH+ek2LXgP1oOjXurNb0TaHk5pHcUdbM5G5ucIafXyc+fIYPPq2RAFJ+Gr6Ich
u2A98d9ZvN3xFc8/bBULdABJUB9K9Avt0PldvW8+wS0hIYM3MZpY/2nbnbhEhlGW
KMs+iWg5Z7mHBou4fJfNe70oPECsVpu9H23L81ooWCugxUXl6Q0uSyt02X+9aqCx
r/PzP5jLm/BTb7Yiv7rAIwO1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvl3fGb
wLF+DVQIzBBsQAaCbFBYMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3
OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6
V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7sqbXnk9CA7UR3TGGVFjlzN7r3CMKHrkX/xEth1aDG5PFw4C3o+t8
WGUhhpfonTcJDghWT8Vo0dwYH6LGzTfUZEL/JC+5D/1HrvMnubMktdyq6i5O2bSp
F2cCaHKmhV9gCAjs07q58WokmsCt6EznBSScNV287eZ/x9hoda+CIoF+YlSkbb0c
1KLQEGzdwj6wkxI7qP/7Slo2f/OagWRp2Wc/ViHZJarJC8b8VBheImKe7JZMD2F6
lXNYhi9ERxMAiSf0WyPcIa/0Op6bBorQV4susiU3NvFpk0v+PXofEm/yzo9ltwIH
qC8krdnjMkxDOdPINZFFNUWwqw44spVd
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:02:08 2026 by rpki-client