This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json) Hash identifier: NcMgC8tQXsr9RhyKPbIt1lG/0gINlhAFxHg1jMgHgUo= Subject key identifier: 1E:5B:D6:24:E6:E0:44:51:1F:F5:12:B3:01:7A:92:0E:0A:A8:BC:E8 Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Certificate serial: 4A0A Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft Manifest number: 4958 Signing time: Thu 05 Feb 2026 14:50:11 +0000 Manifest this update: Thu 05 Feb 2026 14:50:11 +0000 Manifest next update: Thu 12 Feb 2026 14:50:11 +0000 Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: lB2Tj1UGm5yXwte7FS/J39GCyD3hNj3z1b8dyMWiBDY=) 2: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=) 3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=) 4: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=) 5: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=) 6: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=) 7: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=) 8: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=) 9: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=) 10: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=) Validation: OK Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Feb 2026 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18954 (0x4a0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22 Validity Not Before: Feb 5 14:50:11 2026 GMT Not After : Feb 12 14:50:11 2026 GMT Subject: CN=6984ae23-8e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:77:bd:bb:67:ee:ee:f6:c8:a8:85:21:e0:c1: 13:e6:3e:df:d4:0f:31:46:d6:4a:92:eb:2d:65:10: 5e:15:c0:6a:35:20:bf:01:c3:8e:b9:16:cb:91:cb: 53:da:fc:10:df:8f:60:80:66:70:13:b2:16:c3:63: 88:7a:af:2e:57:46:1b:7c:06:ec:c6:9a:b6:3e:fe: 5b:9a:72:fd:26:a3:24:95:83:5f:82:bb:1f:b0:16: a7:45:f5:46:59:84:fd:82:34:ef:84:9b:da:df:c6: 44:f9:a1:8e:5b:90:5d:ae:5f:b0:63:fe:de:6a:75: 53:d7:dc:c7:c3:0f:34:f0:ff:5e:5e:cf:cf:32:d6: 25:8f:4c:77:1f:ed:c8:da:ba:aa:1f:6b:58:b4:e3: ac:2f:14:17:62:bf:3e:5b:4d:e4:07:1b:48:42:ca: 4e:51:ef:66:d0:ff:1e:b9:cb:41:7a:5a:af:db:b0: 52:52:b0:ce:91:5b:8d:75:72:eb:97:42:6c:66:5a: e4:a3:af:95:64:0a:6e:79:f6:02:6f:22:33:24:77: 93:1d:74:22:bd:89:7e:16:71:9e:71:32:f1:46:62: 85:45:70:0a:bd:17:d8:d1:1e:11:46:fa:43:0b:df: f5:eb:58:53:dc:24:87:8e:f6:3c:0a:6e:58:6d:1c: 97:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:D6:24:E6:E0:44:51:1F:F5:12:B3:01:7A:92:0E:0A:A8:BC:E8 X509v3 Authority Key Identifier: keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:8a:53:ee:35:fc:28:68:6c:69:de:7b:88:c2:44:ff:8d:1a: 00:a7:8d:55:04:46:63:55:97:ef:d4:52:01:6c:4e:ea:5e:6e: 9f:d9:53:53:be:c6:e0:c1:dc:1a:b7:17:91:ab:05:b6:76:da: 13:9f:18:26:41:99:78:03:82:0d:48:2a:69:26:be:f7:9e:b0: e1:b6:d8:17:17:8c:f0:c0:fb:0a:0b:62:6a:14:b1:28:a9:3d: 15:d9:8b:d5:77:65:20:39:40:bf:c5:33:80:8e:8f:84:92:2e: 79:84:6c:ef:9b:a6:f5:0b:ec:1f:97:94:b8:b1:35:8a:c7:12: 95:73:9b:3e:e0:f2:9e:4b:ca:bb:1e:96:a5:38:37:4c:4a:53: 0a:91:71:46:84:b9:4e:0c:33:0c:4a:34:fd:b5:8a:fa:5f:0f: 26:97:a1:69:b3:1c:98:c7:5d:bc:4b:01:cf:b7:6d:31:47:4f: c7:a4:d3:22:03:ad:5a:1b:a5:06:38:65:21:2f:46:b7:14:81: 3c:68:52:94:59:c6:03:0d:fd:29:1c:64:c3:b4:5e:36:32:65: 4a:ce:d7:47:06:a9:ab:c7:50:75:23:8d:d0:73:6c:9b:f9:57: 28:be:38:0f:37:7f:d4:89:96:93:92:bf:9e:52:d3:71:f6:d3: 9c:8d:2e:8c -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICSgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw REM1QkUxMTAvBgNVBAUTKDM0OEY5QjlCOTJBNzJDQ0ZEMzZGM0M3MEYzNTY3NTcz M0NDOEVBMjIwHhcNMjYwMjA1MTQ1MDExWhcNMjYwMjEyMTQ1MDExWjAYMRYwFAYD VQQDDA02OTg0YWUyMy04ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3e9u2fu7vbIqIUh4MET5j7f1A8xRtZKkustZRBeFcBqNSC/AcOOuRbLkctT 2vwQ349ggGZwE7IWw2OIeq8uV0YbfAbsxpq2Pv5bmnL9JqMklYNfgrsfsBanRfVG WYT9gjTvhJva38ZE+aGOW5Bdrl+wY/7eanVT19zHww808P9eXs/PMtYlj0x3H+3I 2rqqH2tYtOOsLxQXYr8+W03kBxtIQspOUe9m0P8euctBelqv27BSUrDOkVuNdXLr l0JsZlrko6+VZApuefYCbyIzJHeTHXQivYl+FnGecTLxRmKFRXAKvRfY0R4RRvpD C9/161hT3CSHjvY8Cm5YbRyX2wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFB5b1iTm 4ERRH/USswF6kg4KqLzoMB8GA1UdIwQYMBaAFDSPm5uSpyzP0288cPNWdXM8yOoi MA4GA1UdDwEB/wQEAwIHgDBzBgNVHR8EbDBqMGigZqBkhmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvTkktYm01S25MTV9UYnp4dzgxWjFjenpJNmlJLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRGNEZCNC9OSS1ibTVLbkxN X1Rienh3ODFaMWN6ekk2aUkuY2VyMEoGA1UdIAEB/wRAMD4wPAYIKwYBBQUHDgIw MDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMubmV0L1JQS0kvQ1BTLnBk ZjCBtQYIKwYBBQUHAQsEgagwgaUwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNDFGRTYxMDFENjYxMUUyQTYyRjg3N0M3MkZE MUZGMi9OSS1ibTVLbkxNX1Rienh3ODFaMWN6ekk2aUkubWZ0MDMGCCsGAQUFBzAN hidodHRwczovL3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1ilPuNfwoaGxp3nuIwkT/jRoAp41VBEZj VZfv1FIBbE7qXm6f2VNTvsbgwdwatxeRqwW2dtoTnxgmQZl4A4INSCppJr73nrDh ttgXF4zwwPsKC2JqFLEoqT0V2YvVd2UgOUC/xTOAjo+Eki55hGzvm6b1C+wfl5S4 sTWKxxKVc5s+4PKeS8q7HpalODdMSlMKkXFGhLlODDMMSjT9tYr6Xw8ml6FpsxyY x128SwHPt20xR0/HpNMiA61aG6UGOGUhL0a3FIE8aFKUWcYDDf0pHGTDtF42MmVK ztdHBqmrx1B1I43Qc2yb+VcovjgPN3/UiZaTkr+eUtNx9tOcjS6M -----END CERTIFICATE-----Generated at Fri Feb 6 00:09:06 2026 by rpki-client