This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: uj8oSwg8Td8hwlraieUAfjdccDdB3czKYeMCG5Xtqxk=
Subject key identifier: B5:62:F1:F3:64:C6:02:94:63:6B:8F:48:E3:2A:AA:5B:14:F1:29:90
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A27
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4974
Signing time: Sat 14 Feb 2026 14:50:11 +0000
Manifest this update: Sat 14 Feb 2026 14:50:10 +0000
Manifest next update: Sat 21 Feb 2026 14:50:10 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: +cSuUKonDPVJQ5gIpnuRRVqMTQcglDrU22BIhuXCeCQ=)
2: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=)
3: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
4: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
5: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
6: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=)
8: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: 8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=)
9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=)
10: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
11: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Feb 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18983 (0x4a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 14 14:50:10 2026 GMT
Not After : Feb 21 14:50:10 2026 GMT
Subject: CN=69908ba3-925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:92:2d:a2:a6:ef:e7:09:99:9d:59:ae:b8:
d5:cc:a3:c0:7e:29:fc:39:d4:f4:c5:ea:a2:7e:7a:
81:1c:b1:69:b4:74:fd:fb:38:9b:e0:ac:31:63:d4:
d0:a5:0f:1d:8d:80:40:b7:2d:46:a3:ce:c4:8d:53:
85:3d:e0:4a:31:5c:56:81:1e:b4:e4:5c:b3:64:4c:
5a:2b:9d:7e:70:99:b7:c3:ba:8b:33:6e:11:fe:8f:
c8:cd:39:d8:97:45:59:e4:4d:48:92:37:82:36:d1:
50:0d:96:cf:e7:f9:c0:9a:e5:d4:1c:66:6b:c3:b8:
ba:85:94:c9:a9:7b:cd:62:4e:35:54:0a:53:2e:d2:
a2:b1:f4:a1:9b:20:f5:83:e1:35:65:6a:1e:03:80:
89:23:29:66:73:e9:81:92:53:b0:d7:39:db:0b:19:
49:87:d0:8f:d3:97:cc:53:09:86:67:db:4d:2f:e6:
10:60:72:8c:16:e3:ed:b6:2c:60:86:8c:ce:ed:6c:
f9:08:86:fd:48:b6:56:ea:20:4a:61:5c:2d:b5:ba:
b6:70:19:32:89:83:2c:5f:3f:51:47:87:a1:20:40:
1d:30:ef:d2:81:06:d5:5d:5e:04:c2:73:e1:f4:67:
46:25:03:3a:a8:79:61:88:a3:6a:34:e4:a8:b0:a3:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:62:F1:F3:64:C6:02:94:63:6B:8F:48:E3:2A:AA:5B:14:F1:29:90
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:4b:26:a8:47:4a:75:f2:95:f3:07:df:d4:aa:91:85:08:60:
61:03:ab:5a:5a:b0:b3:19:03:b4:51:56:ed:03:64:b5:79:50:
0d:e0:88:55:32:38:7e:73:06:5e:a1:81:6d:4f:63:48:05:f1:
47:07:8b:15:13:3a:c5:17:c2:8b:5e:5c:04:37:d7:80:95:73:
b1:d5:2f:a4:41:9b:0f:b8:7b:8c:18:e1:3b:2e:f3:75:a1:8e:
1d:f8:6a:0f:ed:ee:36:d8:b9:fc:78:8f:fe:d6:fb:cb:1f:4d:
0d:5b:7f:ed:73:c2:9f:56:31:e5:2d:6c:16:4c:62:87:12:ae:
0c:8f:17:58:2a:91:20:6e:e2:ba:1b:7b:0b:27:e7:19:5d:da:
d4:38:8c:65:f2:02:12:b8:60:b3:62:10:5f:86:d6:73:da:32:
31:5b:d9:87:e5:df:72:87:a7:71:7f:81:46:66:c1:22:f7:a9:
99:2f:60:9b:80:92:c7:65:25:79:3a:51:d9:21:08:76:17:5c:
b2:51:62:ae:c3:6f:b0:64:e8:59:f0:87:bb:03:75:8d:4e:0c:
57:cc:8d:9b:07:c2:19:22:9c:00:2f:d7:09:f7:ea:f8:f2:06:
95:d9:c6:6e:52:3b:15:7d:54:8f:63:79:82:53:0d:69:6d:1f:
23:1e:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 16:43:26 2026 by rpki-client