This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: DBcoAZqwPzhYZXwNk2le8ezu258/9Z1yg3GBUmeX2vo= Subject key identifier: 01:53:6A:DB:69:6E:09:67:B9:11:64:5E:7E:58:2C:06:67:C9:F9:46 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0F23 Signing time: Thu 04 Dec 2025 17:12:04 +0000 Manifest this update: Thu 04 Dec 2025 17:12:03 +0000 Manifest next update: Thu 11 Dec 2025 17:12:03 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: WYSe19lqgT1VP9NUHWA3m45danrM9QglC9mmXrBo7XE=) 2: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: KbAmhYyA/3RZkyBcJw8oLADeN0QTbLGu8cpnab4hQmE=) 3: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: r1gO8CHVV6YzvfcJ2YEAEHZoT0CoCIzLPvtncbyeWbg=) 4: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=) 5: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: uUszxvUkrwIpDzKco/U3eyxpAs8VyjPRgjFefdF5QYo=) 6: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=) 7: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=) 8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Dec 4 17:12:03 2025 GMT Not After : Dec 11 17:12:03 2025 GMT Subject: CN=6931c0e3-020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:ee:7a:e9:4c:3f:02:3c:9f:e1:7d:25:3a: 87:0c:b0:17:9f:e9:94:ba:d9:8d:c5:31:95:8c:9f: a5:1e:3b:c9:f7:a8:4b:70:86:80:83:71:c2:fb:dc: 1c:0c:4b:bd:80:a9:07:39:2b:d4:90:f6:f9:96:84: aa:df:e9:f1:14:3d:3c:d6:02:68:19:a4:43:16:e2: d0:81:b0:f7:4a:e5:05:1b:ad:77:53:b5:57:49:2b: 6a:a2:e5:c1:fb:09:3e:a4:04:1f:49:07:7d:b7:51: 02:7d:b0:84:d0:5c:20:8f:bc:37:d2:f8:25:d2:7c: 43:a5:4f:79:a6:64:56:c0:6e:81:85:a8:07:e6:34: ac:33:3a:dd:af:9c:d7:64:b4:41:80:c5:d6:00:de: 39:fb:93:68:9e:25:df:60:cf:ff:7e:9b:68:29:f6: 13:55:c5:f6:b1:a0:d5:c6:e8:54:91:a3:46:86:ea: 87:27:c8:55:25:c8:ca:25:57:00:2c:1f:6b:4d:95: b6:d8:ac:77:28:ac:ee:b5:a8:1f:fa:19:e6:37:8e: 0e:7e:ff:f7:33:5c:07:9d:04:14:d2:71:7f:6b:dd: c1:67:fa:d9:1f:37:86:4f:ed:66:16:1e:ed:75:ed: 93:e5:ae:d7:4b:15:ab:06:16:26:7a:5e:92:fb:c6: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:53:6A:DB:69:6E:09:67:B9:11:64:5E:7E:58:2C:06:67:C9:F9:46 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:6c:2c:1d:48:4f:4e:f4:9d:40:cc:1c:a8:3d:42:1c:60:36: d6:a8:ae:30:da:5b:83:93:e3:f7:cb:3a:54:57:32:ee:9e:81: 14:b4:bf:22:29:42:bd:48:ee:30:d8:e0:0c:ab:56:e0:5a:af: 7e:f7:fc:99:c5:95:cc:cb:37:8b:ae:c9:ca:44:e5:d2:b3:cc: 94:e7:f5:e9:4c:37:1b:0f:83:a1:28:81:f8:35:68:66:c4:8d: ac:2b:3c:c7:04:15:78:da:25:f7:27:af:f8:36:63:05:e7:d6: 3f:ce:62:f9:d9:a6:b5:0d:81:49:7d:64:62:ce:ce:07:03:b8: e2:41:8a:92:a2:fd:e8:76:f6:4f:0c:fe:b3:1f:6e:58:b7:18: 30:00:ac:b9:3a:20:a0:24:a3:c1:0a:d9:99:66:91:3c:c2:4e: d5:12:fb:85:51:fe:e8:50:c6:af:8c:e9:be:bb:0c:59:59:5d: 3d:f5:16:e1:16:f0:02:a9:6f:83:63:eb:d0:74:a5:3f:5d:31: 3d:5e:a9:b2:44:2d:80:1f:94:4c:05:cd:3f:0d:b1:ef:b2:98: 83:0c:40:4d:b0:97:cd:5b:68:12:83:f9:58:b1:df:d7:a0:c4: c7:93:44:d7:b5:57:ef:1b:9c:99:f4:5f:5f:26:1b:e1:a6:fa: e1:45:bb:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUxMjA0MTcxMjAzWhcNMjUxMjExMTcxMjAzWjAYMRYwFAYD VQQDEw02OTMxYzBlMy0wMjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gvueulMPwI8n+F9JTqHDLAXn+mUutmNxTGVjJ+lHjvJ96hLcIaAg3HC+9wc DEu9gKkHOSvUkPb5loSq3+nxFD081gJoGaRDFuLQgbD3SuUFG613U7VXSStqouXB +wk+pAQfSQd9t1ECfbCE0Fwgj7w30vgl0nxDpU95pmRWwG6BhagH5jSsMzrdr5zX ZLRBgMXWAN45+5NoniXfYM//fptoKfYTVcX2saDVxuhUkaNGhuqHJ8hVJcjKJVcA LB9rTZW22Kx3KKzutagf+hnmN44Ofv/3M1wHnQQU0nF/a93BZ/rZHzeGT+1mFh7t de2T5a7XSxWrBhYmel6S+8ZDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFTattp bglnuRFkXn5YLAZnyflGMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARbCwdSE9O9J1AzByoPUIcYDbWqK4w2luDk+P3yzpUVzLunoEUtL8i KUK9SO4w2OAMq1bgWq9+9/yZxZXMyzeLrsnKROXSs8yU5/XpTDcbD4OhKIH4NWhm xI2sKzzHBBV42iX3J6/4NmMF59Y/zmL52aa1DYFJfWRizs4HA7jiQYqSov3odvZP DP6zH25YtxgwAKy5OiCgJKPBCtmZZpE8wk7VEvuFUf7oUMavjOm+uwxZWV099Rbh FvACqW+DY+vQdKU/XTE9XqmyRC2AH5RMBc0/DbHvspiDDEBNsJfNW2gSg/lYsd/X oMTHk0TXtVfvG5yZ9F9fJhvhpvrhRbtH -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:18 2025 by rpki-client