This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: c/WMfZsy1rb/OnoeBrO7cOqN+9c6KQrSqM8MqXaQnJY=
Subject key identifier: F0:04:F5:A1:DD:8B:AF:60:4D:26:DE:45:BB:18:A7:59:A9:1F:0C:6D
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A1E
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 496B
Signing time: Wed 11 Feb 2026 14:50:11 +0000
Manifest this update: Wed 11 Feb 2026 14:50:11 +0000
Manifest next update: Wed 18 Feb 2026 14:50:11 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: Oe6cx8l7A6P1w8sui8AluF7pp3Pi3KX7rl0Iwkflvb8=)
2: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=)
3: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
4: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=)
5: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
6: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=)
7: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
9: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
10: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: 8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=)
11: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Feb 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18974 (0x4a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 11 14:50:11 2026 GMT
Not After : Feb 18 14:50:11 2026 GMT
Subject: CN=698c9723-9f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:bb:52:1f:42:91:c0:53:d4:69:df:a3:49:
b2:84:4b:09:a2:2b:f2:f2:78:f1:94:e4:58:09:1e:
02:b0:5a:95:46:16:6b:0b:eb:c2:23:f8:52:8e:60:
cc:62:6b:56:b3:d2:23:27:1b:0d:b5:aa:43:73:3a:
f7:fc:25:98:1a:d7:13:4a:a9:f7:b1:ea:51:b0:07:
43:46:fc:40:e6:c1:e9:78:85:8f:6d:b5:e5:9e:cc:
12:c4:58:8a:c1:6a:c7:d3:0d:6e:2e:10:26:d1:0d:
76:6f:07:2f:aa:7a:e0:c1:7a:f5:8e:5a:2c:72:26:
8a:f2:06:e2:9c:7e:62:be:99:be:c4:a2:23:f2:0c:
7a:82:79:a0:8b:79:88:ed:d7:30:7a:d6:f5:bc:8c:
13:6b:f1:a7:a9:de:9e:5f:1d:2f:d9:4e:38:de:24:
a9:04:d4:d0:bb:f6:af:3e:4b:cd:96:4f:97:6b:39:
92:90:56:16:b0:27:aa:3b:c6:14:23:ae:16:e5:65:
85:97:19:f4:3b:41:5b:03:b4:73:eb:05:8f:fd:1d:
f0:58:87:99:87:21:f6:57:9e:e6:29:c6:f7:e4:d6:
cb:e4:88:7b:9d:6e:c9:30:07:18:c3:5f:95:7a:c9:
f5:3d:04:88:cc:8a:b6:76:63:8b:81:de:b2:56:11:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:F5:A1:DD:8B:AF:60:4D:26:DE:45:BB:18:A7:59:A9:1F:0C:6D
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:49:a8:15:8b:a6:c4:66:2a:e4:6e:d9:37:d8:0a:fd:b0:
43:b8:d2:d0:57:be:f1:b3:9f:f2:ef:c5:4c:19:af:b7:23:00:
7a:75:ac:8e:6a:9a:82:f1:71:44:cf:01:7f:a6:21:1b:53:9d:
29:ee:72:38:ff:24:b6:ce:c4:5b:4b:f2:e1:ca:8b:e9:d2:1d:
0b:ff:4f:d7:0f:81:00:8d:a8:90:44:fb:47:1b:e1:03:7e:de:
1a:e6:f8:e6:26:ad:e1:87:b3:35:8a:6e:03:8f:ba:f5:b9:38:
d1:37:e2:01:da:cd:9a:c7:a5:62:a4:fa:02:ba:32:8d:4e:61:
b0:b5:3e:78:33:0d:36:2e:8c:51:4c:15:4c:46:d5:e7:b0:96:
1d:c8:12:85:be:f4:f0:f0:72:90:b2:df:13:aa:ed:f4:eb:73:
0a:9b:a9:83:9c:ad:54:ab:2e:60:42:22:8d:ca:98:09:3f:e9:
fa:ab:48:77:ea:2f:de:ae:d6:5e:79:1b:9c:5d:d5:fa:58:a5:
20:82:0a:84:2d:7c:0d:86:e8:18:46:80:5f:8a:5c:08:2e:c5:
78:88:43:48:c5:ab:d3:b7:cf:fd:d5:8d:65:07:b2:28:44:c2:
b5:d6:81:1f:df:8a:a4:83:1d:30:54:46:73:16:9b:8f:34:39:
9e:57:8f:41
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICSh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz
M0NDOEVBMjIwHhcNMjYwMjExMTQ1MDExWhcNMjYwMjE4MTQ1MDExWjAYMRYwFAYD
VQQDDA02OThjOTcyMy05ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAweq7Uh9CkcBT1Gnfo0myhEsJoivy8njxlORYCR4CsFqVRhZrC+vCI/hSjmDM
YmtWs9IjJxsNtapDczr3/CWYGtcTSqn3sepRsAdDRvxA5sHpeIWPbbXlnswSxFiK
wWrH0w1uLhAm0Q12bwcvqnrgwXr1jlosciaK8gbinH5ivpm+xKIj8gx6gnmgi3mI
7dcwetb1vIwTa/Gnqd6eXx0v2U443iSpBNTQu/avPkvNlk+XazmSkFYWsCeqO8YU
I64W5WWFlxn0O0FbA7Rz6wWP/R3wWIeZhyH2V57mKcb35NbL5Ih7nW7JMAcYw1+V
esn1PQSIzIq2dmOLgd6yVhE6iQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFPAE9aHd
i69gTSbeRbsYp1mpHwxtMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi
MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN
X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw
MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk
ZjCBtQYIKwYBBQUHAQsEgagwgaUwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZE
MUZGMi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MDMGCCsGAQUFBzAN
hidodHRwczovL3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQwEmoFYumxGYq5G7ZN9gK/bBDuNLQV77x
s5/y78VMGa+3IwB6dayOapqC8XFEzwF/piEbU50p7nI4/yS2zsRbS/Lhyovp0h0L
/0/XD4EAjaiQRPtHG+EDft4a5vjmJq3hh7M1im4Dj7r1uTjRN+IB2s2ax6VipPoC
ujKNTmGwtT54Mw02LoxRTBVMRtXnsJYdyBKFvvTw8HKQst8Tqu3063MKm6mDnK1U
qy5gQiKNypgJP+n6q0h36i/ertZeeRucXdX6WKUgggqELXwNhugYRoBfilwILsV4
iENIxavTt8/91Y1lB7IoRMK11oEf34qkgx0wVEZzFpuPNDmeV49B
-----END CERTIFICATE-----
Generated at Wed Feb 11 16:13:21 2026 by rpki-client