This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: WYQtOGxBfk3PnIoMFHtYQcqffaTV2mYIEDyKy2IBU4M=
Subject key identifier: 63:16:97:47:16:8B:E9:FD:A2:6B:62:AF:EE:95:05:63:F8:30:D9:86
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A1B
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4968
Signing time: Tue 10 Feb 2026 14:50:11 +0000
Manifest this update: Tue 10 Feb 2026 14:50:10 +0000
Manifest next update: Tue 17 Feb 2026 14:50:10 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: HrjG7qjSUDtf9eJEl7lS3bgZV4Qb67cdkyLDsVBuQJk=)
2: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
3: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=)
4: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: 8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=)
5: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
6: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
7: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
8: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=)
10: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=)
11: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18971 (0x4a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 10 14:50:10 2026 GMT
Not After : Feb 17 14:50:10 2026 GMT
Subject: CN=698b45a3-d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:be:75:a8:7d:60:a6:a5:48:54:6c:d8:f4:61:
00:ab:73:8e:34:5c:4b:99:d0:98:8c:9a:34:b2:1d:
5d:79:df:e1:e7:60:15:0a:19:13:86:9e:76:b5:bf:
95:ad:7a:51:ca:8c:02:e0:91:b2:1b:2e:46:1f:42:
db:f5:52:94:e9:91:03:a4:d6:97:d7:c1:fe:06:01:
b7:69:05:e9:66:dc:e5:23:90:49:50:32:c9:a4:d8:
8b:6c:cf:62:fc:21:10:fa:35:13:8f:6b:2b:0d:da:
d8:2e:58:2a:52:1b:7b:6e:d2:2f:f3:c3:dc:1a:e6:
53:54:17:9f:51:3a:1b:c7:2c:88:ee:0a:ad:85:66:
31:e8:7a:06:b0:64:84:72:8d:d1:3f:5a:72:1b:aa:
28:c6:8a:68:1d:ac:75:77:c5:c1:9b:39:0b:fc:bd:
db:1b:13:a0:f0:2e:94:c0:fa:5e:07:94:f5:38:70:
ea:73:b7:15:fa:fc:a1:da:7c:de:cc:1c:d4:53:24:
ca:02:34:40:0f:35:fe:ef:f4:c4:d4:03:a3:2f:4a:
a9:7f:90:66:86:d2:ba:96:60:73:99:92:96:43:89:
eb:0d:6d:f0:3e:b7:ae:a3:36:71:77:38:8f:f4:20:
3c:53:61:88:c2:c2:09:36:ba:2f:2b:04:8d:4b:02:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:16:97:47:16:8B:E9:FD:A2:6B:62:AF:EE:95:05:63:F8:30:D9:86
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:da:cf:0a:e7:83:31:12:76:1a:c8:e9:fc:04:05:b3:0f:60:
8b:95:cb:4e:3f:e7:35:1a:82:0d:bc:be:77:46:48:ba:5a:28:
25:bc:34:65:fc:4a:61:47:d3:60:c1:81:16:5c:23:b6:8d:9f:
b3:24:35:9b:d4:3c:cf:1b:74:34:96:70:5a:fd:5a:da:1c:9b:
0a:a5:72:05:fa:b6:14:01:cc:ef:68:ee:06:91:66:21:1a:de:
6a:35:14:48:5f:7c:22:e1:8a:50:25:97:d8:0c:be:c8:53:d8:
b4:7f:a6:fe:d1:07:01:6d:e0:60:39:4b:25:36:ae:d6:6f:e4:
4f:fc:43:b5:1a:b4:8d:54:d0:b1:3a:68:74:b4:29:3e:6d:33:
2b:26:13:88:88:8f:02:81:d5:77:37:ab:32:b8:24:e9:83:ea:
e4:c0:8f:95:02:4c:f5:96:1b:db:e0:3a:00:ea:c0:e5:1d:ea:
9d:9a:aa:43:e4:ef:c3:6f:6e:b0:19:c7:0d:bc:4d:0b:21:16:
2b:74:83:de:4e:ca:d6:93:83:f1:df:6c:9b:6b:62:82:68:1a:
1b:f6:e3:6d:7d:3e:27:b5:f6:5a:81:ca:fd:ff:90:50:06:cb:
1b:8e:12:f9:67:03:6f:97:f3:1e:cd:9c:e5:5a:29:af:83:ea:
f0:9e:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 04:06:37 2026 by rpki-client