This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
File: NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft (raw, json)
Hash identifier: Hns0nSRIEX2QcRvBjGud9z9LMiR8UQd9/A5lNFL9+Qo=
Subject key identifier: 42:EB:B9:64:90:60:8D:BE:46:09:EB:3C:5A:98:F3:C1:DB:CE:E1:07
Authority key identifier: 34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
Certificate issuer: /CN=A90DC5BE/serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Certificate serial: 4A19
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
Subject info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
Manifest number: 4966
Signing time: Tue 10 Feb 2026 03:01:05 +0000
Manifest this update: Tue 10 Feb 2026 03:01:05 +0000
Manifest next update: Tue 17 Feb 2026 03:01:05 +0000
Files and hashes: 1: NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl (hash: nm6aYta4WaGq+JePaV6vHgv3uzc1Z+GqPwJ/sgfRjgk=)
2: Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer (hash: 8nj9/XcODr2Ctn+EDqVgwmIFq75BSgQmoX+2Jbps6ns=)
3: yNpkCWcTSBB928ixg_VavykxJVY.cer (hash: gihqpRCjg2rI9ASnRe9SEx4bmJeI8d1jCVD9TrUB2P0=)
4: hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer (hash: dEN04Vh3/XJUtldGAQqecGT8RVXi/7/2tEH5QIpc0iQ=)
5: yMD7hwR0w-hMq4NZfEaoYsR_iII.cer (hash: 9PPfP/K0Uf+S7J39zhXXnRpHgv6uH4LNhJd4TezIBSI=)
6: gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer (hash: l5cZo0NCnOAN61PmPRwxJ+3G1YfnO8hR1ET4LiGF0Gg=)
7: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer (hash: vp1tRoe4NsXHyQT0OHKIj2r+bs3aEldVk7YOXioMzPc=)
8: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer (hash: ZF1RlRehUcyZpIoR/bVaAFymoj2e9ILKyQaE+joIDZE=)
9: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer (hash: a08n2HW5nibBBiTwza8V+WtqK6Yxby9U6HH3/Nqtoa4=)
10: GHL5iLZXI3g3mSN-VU28xuSdFLA.cer (hash: 7cJnEBVLmqaTtSBdj3Qn+bODYO9Cd6sZH5D2PaBPTpY=)
11: CVjwl8rkKX3ycoLkGD468UJMj34.cer (hash: Rcb9yIZz7YIKD8PtnrnxPR64gvvH07YAhXdMB3XP/OA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Feb 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18969 (0x4a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=348F9B9B92A72CCFD36F3C70F35675733CC8EA22
Validity
Not Before: Feb 10 03:01:05 2026 GMT
Not After : Feb 17 03:01:05 2026 GMT
Subject: CN=698a9f71-daba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:88:b3:82:09:19:6f:1d:fd:3b:8f:6b:42:
1a:30:cd:fa:45:66:3e:bf:5c:f5:03:2e:8a:b1:c3:
e7:6a:0f:67:28:0e:7d:8f:5c:33:57:84:1d:5b:83:
f5:d9:a3:b2:ab:6c:4f:75:f5:08:e5:0e:17:39:52:
83:22:63:f0:c2:23:ee:79:50:91:0a:fe:6e:3d:55:
d9:3f:ef:c2:b8:ba:be:53:b9:8a:2e:d4:88:81:d5:
ce:f0:89:d5:9b:d8:94:cb:a2:2e:9a:3b:73:89:f6:
ce:bb:51:f0:43:b2:57:08:23:91:7d:43:3a:70:59:
3b:ed:57:3a:cb:23:31:05:5b:9a:bb:aa:68:a1:0a:
fb:24:f0:f5:e1:31:8f:11:14:09:d3:69:a6:38:c7:
47:e2:fd:d0:b6:41:da:03:e3:bb:cc:cd:c7:4b:4d:
ec:1b:ee:87:cc:e5:6e:68:7a:35:13:95:56:8b:e1:
63:f7:8b:fc:7a:ed:c0:5d:4e:c1:dc:fa:9e:b4:9f:
a4:73:bf:8b:f8:ee:2e:0f:29:ec:cc:ab:3a:da:b4:
b9:18:14:b7:51:73:25:25:b2:a4:91:bb:e4:61:db:
91:d3:52:0b:ff:ac:a4:95:4b:1d:7d:90:77:20:f4:
3d:28:3a:b4:79:3d:cb:62:99:cd:f1:9e:13:12:0d:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:B9:64:90:60:8D:BE:46:09:EB:3C:5A:98:F3:C1:DB:CE:E1:07
X509v3 Authority Key Identifier:
keyid:34:8F:9B:9B:92:A7:2C:CF:D3:6F:3C:70:F3:56:75:73:3C:C8:EA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:ee:d3:97:b0:f9:cc:3f:69:12:e3:5e:38:86:6b:00:2a:
cc:2d:b6:53:bc:f2:c6:59:f2:b0:bd:13:ac:46:95:b4:70:ed:
3b:d9:bc:86:e3:0e:f8:b2:b2:46:5f:c9:d2:84:a7:55:8d:d7:
af:15:ad:b1:3b:51:8c:66:34:7c:ea:66:a7:4e:a2:1f:82:d8:
da:6c:0d:5a:0d:49:6e:0b:7d:24:4a:3d:7d:08:48:7a:82:01:
e4:64:6f:c8:ea:be:84:f5:55:e2:dc:7a:61:88:bb:81:1a:59:
73:42:6b:ea:b6:ba:81:66:ec:6d:2a:d0:29:4d:a5:c2:ed:83:
1e:6f:21:49:70:35:f1:47:dc:e3:45:c0:33:a1:86:0d:34:75:
a7:bc:cf:d4:9f:98:f5:d7:b4:fc:da:d3:af:5d:bd:23:0f:51:
79:09:10:7a:60:ea:78:9b:fe:c1:d9:0d:c0:0f:ea:42:a4:79:
09:01:9a:9b:ff:fa:dc:b3:bf:2f:6b:61:2d:48:6f:9a:da:09:
45:d6:83:29:bd:7b:51:a4:37:bc:89:98:de:6e:11:3d:ec:3e:
9d:fc:75:bd:96:a2:78:f2:db:b4:94:34:10:39:31:05:35:e3:
aa:75:c9:ee:07:28:56:02:b4:98:67:04:e6:e4:25:1a:1b:63:
16:91:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 14:15:20 2026 by rpki-client