This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json)
Hash identifier: 38tNfJTqZ39FHrsjARMsEENNLuROEocB2m+DutKHatw=
Subject key identifier: F1:A0:87:31:A5:FD:51:A0:E1:F4:87:F5:00:C1:3F:BA:6F:34:B8:4C
Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Certificate serial: 0F29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
Manifest number: 0ED9
Signing time: Sat 14 Feb 2026 17:30:36 +0000
Manifest this update: Sat 14 Feb 2026 17:30:36 +0000
Manifest next update: Sat 21 Feb 2026 17:30:36 +0000
Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: r5dh4ovRYwOse8ePs4/kBzuGpTpE9iub2XUW5oh3mtY=)
2: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: DsQ8k2r18shy7gg+hUBL2SO8HUEFyNSKHtxB+WEbNG4=)
3: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: hPUFimj9BE3+BwwQ7RyTBe4Kb4UDlyO5v1n1M99BRDE=)
4: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: h1piDIbFbu2D+AHr+FNeuVa8V0LAf8dUKVxZfkw96aI=)
5: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: uul2CdaEoquPtSKMLPmrjkbQbRp1WUkF6rtkLx9zg64=)
6: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: wbUo+m2N2pVjNOlqoJ9Ve/RDUUkR0+GFezmtrgOfh+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 17:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3881 (0xf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2
Validity
Not Before: Feb 14 17:30:36 2026 GMT
Not After : Feb 21 17:30:36 2026 GMT
Subject: CN=6990b13c-cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c8:33:30:33:14:32:2a:ff:b6:06:f0:e7:ac:
14:10:12:79:d0:0b:6b:19:eb:68:24:a8:8b:cb:32:
5c:8e:b2:93:38:4e:29:e8:78:f9:dd:c5:62:fe:26:
ca:14:60:e7:f8:71:16:1d:7c:88:ec:5d:fb:89:8d:
69:38:8b:df:43:8f:a8:4e:e4:3a:14:e5:79:5f:82:
5f:f6:dc:f2:ac:d8:dc:d1:43:6d:b3:54:09:a5:d3:
64:bd:c8:e1:73:24:a9:13:bb:d4:e2:0a:5d:e3:52:
99:0b:5c:63:88:d1:34:2c:af:32:6d:27:31:15:83:
c0:e7:c6:3d:b0:2c:96:9e:e7:a6:99:77:e0:65:5a:
ea:bc:64:0b:29:b8:38:81:83:04:51:d7:43:71:4a:
40:98:ee:aa:8a:19:0a:35:12:67:f5:38:09:67:33:
03:3a:0a:66:75:7c:b0:66:26:a1:9e:84:4c:f8:99:
ac:d3:77:74:f3:bc:eb:63:e6:68:48:fe:bb:e3:ef:
8b:8c:50:52:ed:95:e3:68:1d:0b:2c:f4:06:9a:b4:
6d:47:f5:ae:69:31:f5:29:f3:e3:dc:d9:38:8f:a7:
e6:e2:f3:b5:e7:d4:91:f1:78:b1:a9:32:f7:81:e8:
a3:a5:a7:ca:af:fd:0c:11:d3:17:ec:65:57:d8:c7:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:87:31:A5:FD:51:A0:E1:F4:87:F5:00:C1:3F:BA:6F:34:B8:4C
X509v3 Authority Key Identifier:
keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:18:6b:a8:35:c7:0a:c9:da:e9:83:ea:f2:66:2d:38:b2:
c8:72:1a:1c:66:ee:e2:0a:29:4c:8c:47:11:31:74:05:84:aa:
4e:0a:a7:a0:1b:0e:b0:fe:1d:0c:76:d3:d1:98:8e:6c:ee:9c:
fa:10:59:c0:6e:85:bf:3d:0f:42:b8:17:a5:15:58:6f:ae:ee:
f8:5a:90:cf:03:02:f4:19:f5:61:75:6b:41:7e:52:96:da:98:
4a:26:9e:32:d3:68:6b:3d:06:01:e7:09:1d:66:b6:05:53:7e:
55:ee:47:19:4a:11:d1:d2:a0:13:74:86:70:88:6b:dd:04:88:
30:29:93:20:e7:bd:1e:fb:4a:88:d2:49:49:29:93:95:11:5a:
aa:98:8d:18:49:45:e3:62:24:0f:5f:c7:0f:75:47:ef:8e:b6:
19:72:36:22:9e:5a:3c:36:12:1d:69:b4:69:65:3f:df:63:3e:
41:29:1d:00:14:95:52:ef:9e:e9:70:ea:09:06:7b:a1:67:2c:
40:e4:84:78:36:54:c6:32:7a:ea:24:92:fb:85:fb:59:10:02:
11:5d:9f:bd:ba:01:0c:ca:fe:0a:24:f9:e4:d2:cb:8e:09:d9:
47:d8:6f:7e:f8:7f:87:9d:9a:d7:c0:aa:5e:dc:7c:18:4b:05:
5c:f3:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 23:41:07 2026 by rpki-client