This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier: na8NT93ELVlaq1Vo+TZT3DImj0leCC+lpha8p2FtxCQ=
Subject key identifier: 8B:D9:B6:31:1C:3E:97:45:24:56:9B:C2:A4:16:83:07:10:28:74:87
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number: 03DC
Signing time: Mon 09 Feb 2026 00:10:35 +0000
Manifest this update: Mon 09 Feb 2026 00:10:35 +0000
Manifest next update: Mon 16 Feb 2026 00:10:35 +0000
Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: Xh4EY3EqaScqmIz9eVzvaQudcTK8mlgWThAnkTqIDX4=)
2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: xHLevAzZuis8NnrBHZLDJf2yx7IF05dGBA1riYkWutY=)
3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: /NRpEcDAXrkS/YDBwDOng+rHtIrpT7sCWxlP3Tbbtb4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 00:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Validity
Not Before: Feb 9 00:10:35 2026 GMT
Not After : Feb 16 00:10:35 2026 GMT
Subject: CN=698925fb-05f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:3c:f0:5f:9d:5a:a7:bd:06:66:7e:13:d5:
db:17:5d:1d:84:9c:b1:f2:98:0e:05:98:36:aa:a9:
f6:0c:60:51:3e:69:21:69:fa:53:49:92:9e:3a:78:
7f:13:0e:b5:63:63:3d:0c:07:40:43:a3:77:2e:eb:
26:3d:6c:65:3a:10:1c:1a:81:f5:72:e9:2d:8d:64:
38:c0:08:39:df:5f:6e:a8:72:e4:eb:10:c5:cd:ad:
3f:83:92:a2:84:b0:b4:e0:fa:37:d3:22:88:af:74:
e2:9c:f7:f0:44:3e:31:00:34:93:06:c6:c0:91:43:
97:ef:6a:b8:c4:77:bb:d9:52:ce:ca:a7:a5:b6:43:
92:02:36:e1:01:12:2e:c0:af:6d:26:52:04:e8:ee:
99:3f:74:47:84:10:c8:43:98:89:14:11:14:64:32:
08:85:6f:fa:66:00:ce:a4:12:cc:52:95:5e:f7:f6:
fa:3c:c2:81:3c:db:02:93:77:1e:58:a0:0f:55:bf:
4e:d0:2c:01:4c:3d:37:00:09:49:a3:aa:5a:29:e6:
9a:be:47:34:4e:0c:53:9a:6e:50:68:9d:65:14:ac:
37:18:7c:8f:79:bc:f1:f3:aa:c5:6a:20:38:89:d5:
13:82:36:01:31:d4:f1:d8:60:32:91:c3:fd:92:14:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D9:B6:31:1C:3E:97:45:24:56:9B:C2:A4:16:83:07:10:28:74:87
X509v3 Authority Key Identifier:
keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:e1:32:59:eb:32:00:7b:69:bd:22:c5:7a:03:e5:f3:24:
93:f3:db:2e:a3:4d:98:3f:b3:22:9f:f3:d4:76:80:67:14:14:
a7:f6:ed:fa:0e:7b:17:f0:84:0b:c4:e5:d8:63:ec:c7:be:2b:
71:72:a7:08:3d:61:4d:53:7d:ea:53:94:1a:0f:08:1d:38:28:
21:1d:37:00:42:85:47:b0:05:23:28:9b:6a:bc:25:84:77:2a:
28:87:ac:8c:c1:27:9c:d8:d8:fd:fc:ff:3d:e4:07:24:b3:4b:
ff:e7:8f:44:a0:ce:ab:ae:43:fb:b2:81:18:2f:e2:c1:c3:03:
31:fe:b7:d6:83:de:23:3b:bd:99:ce:f6:1d:c1:62:23:a4:c2:
c0:3b:9b:af:e5:67:11:88:3c:24:f4:03:6a:8c:8f:83:8c:d2:
1b:ab:73:05:d1:15:2a:d4:27:21:c5:2f:1f:12:f5:19:c4:7a:
0e:1c:5e:2f:60:ff:68:df:e1:93:79:02:99:f9:ce:e8:09:f5:
c0:20:1a:6b:bd:64:09:a2:26:4e:75:03:7d:39:2d:8e:62:26:
52:1b:e9:41:1f:c3:e5:94:92:fc:23:b0:a2:7f:b7:1e:dd:ee:
93:c0:71:d1:19:e1:83:7b:e2:46:42:c8:65:c4:ce:cf:4a:e4:
51:8c:81:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz
N0JBMUNEMjgwHhcNMjYwMjA5MDAxMDM1WhcNMjYwMjE2MDAxMDM1WjAYMRYwFAYD
VQQDDA02OTg5MjVmYi0wNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxH088F+dWqe9BmZ+E9XbF10dhJyx8pgOBZg2qqn2DGBRPmkhafpTSZKeOnh/
Ew61Y2M9DAdAQ6N3LusmPWxlOhAcGoH1cuktjWQ4wAg5319uqHLk6xDFza0/g5Ki
hLC04Po30yKIr3TinPfwRD4xADSTBsbAkUOX72q4xHe72VLOyqeltkOSAjbhARIu
wK9tJlIE6O6ZP3RHhBDIQ5iJFBEUZDIIhW/6ZgDOpBLMUpVe9/b6PMKBPNsCk3ce
WKAPVb9O0CwBTD03AAlJo6paKeaavkc0TgxTmm5QaJ1lFKw3GHyPebzx86rFaiA4
idUTgjYBMdTx2GAykcP9khQhJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvZtjEc
PpdFJFabwqQWgwcQKHSHMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0
RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V
Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDYeEyWesyAHtpvSLFegPl8yST89suo02YP7Min/PUdoBnFBSn9u36
DnsX8IQLxOXYY+zHvitxcqcIPWFNU33qU5QaDwgdOCghHTcAQoVHsAUjKJtqvCWE
dyooh6yMwSec2Nj9/P895Acks0v/549EoM6rrkP7soEYL+LBwwMx/rfWg94jO72Z
zvYdwWIjpMLAO5uv5WcRiDwk9ANqjI+DjNIbq3MF0RUq1CchxS8fEvUZxHoOHF4v
YP9o3+GTeQKZ+c7oCfXAIBprvWQJoiZOdQN9OS2OYiZSG+lBH8PllJL8I7Cif7ce
3e6TwHHRGeGDe+JGQshlxM7PSuRRjIEs
-----END CERTIFICATE-----
Generated at Tue Feb 10 11:37:14 2026 by rpki-client