This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: 1o2//gIy1MiO5JOh9c3Gn00jz2IjzzQo7iiwF1cgC9c=
Subject key identifier: 6D:85:6F:0B:09:72:08:00:22:D7:50:4B:2B:A1:E2:77:6D:34:2D:A6
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0FAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F2A
Signing time: Thu 18 Dec 2025 17:26:20 +0000
Manifest this update: Thu 18 Dec 2025 17:26:19 +0000
Manifest next update: Thu 25 Dec 2025 17:26:19 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: 8FvmYkP6LMvR/lOwM9Jyh2lzAftXpukKujvmNOUu4Es=)
2: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=)
3: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: KbAmhYyA/3RZkyBcJw8oLADeN0QTbLGu8cpnab4hQmE=)
4: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=)
5: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=)
6: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=)
7: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: r1gO8CHVV6YzvfcJ2YEAEHZoT0CoCIzLPvtncbyeWbg=)
8: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: uUszxvUkrwIpDzKco/U3eyxpAs8VyjPRgjFefdF5QYo=)
9: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4015 (0xfaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Dec 18 17:26:19 2025 GMT
Not After : Dec 25 17:26:19 2025 GMT
Subject: CN=6944393c-3c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:a5:35:6c:0f:d7:6c:0b:f8:ab:31:1b:d8:
5c:c3:63:04:e7:74:e8:a6:ea:7a:c8:15:65:e6:8c:
d4:4d:74:9b:4f:ff:84:69:d8:72:ca:38:3d:d7:2f:
55:dd:d3:18:e1:e4:86:4b:94:15:34:12:f6:a3:a6:
da:d4:ec:2e:0e:4c:84:51:42:b9:55:c2:0c:7d:1b:
97:ee:76:0f:94:47:16:ac:60:57:1f:1c:92:be:dc:
8b:8e:51:85:98:5e:75:b3:5e:d6:06:48:62:02:3a:
99:3c:c1:d0:0b:e3:02:9f:7b:90:4e:82:a4:45:a9:
e3:44:09:ec:ae:22:28:f5:e8:a1:d6:c5:1d:5e:9c:
62:05:75:c8:3f:e1:35:95:a5:ca:a9:ab:2d:4f:cd:
57:25:9d:23:3c:1f:ba:1e:4e:1a:8f:89:da:df:ad:
5c:de:21:da:de:02:8f:ce:dc:41:83:e9:4f:cf:5e:
a7:2a:e2:b7:fc:04:46:be:e7:00:19:2a:ca:5f:db:
e5:6b:7a:d4:3d:a6:6c:a4:62:32:c0:08:fd:69:6e:
16:ac:7f:51:21:4f:ba:3e:c6:a6:8f:52:4c:17:75:
4a:0c:7a:bb:67:8a:b1:12:e5:66:38:0a:d2:2c:3a:
d1:fd:77:3c:27:36:56:6e:6d:b3:59:87:ac:20:92:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:6F:0B:09:72:08:00:22:D7:50:4B:2B:A1:E2:77:6D:34:2D:A6
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:04:c6:d5:f8:48:6f:27:60:e5:fc:51:24:89:44:d9:74:47:
10:19:de:cc:30:4d:8d:d6:b6:71:50:b5:a6:44:67:53:93:9b:
4b:f4:95:93:94:d6:e1:d3:68:99:08:3c:59:88:ab:bc:80:28:
a2:a1:12:e9:dc:51:a6:6a:42:3a:99:29:80:50:e2:34:84:bd:
16:8d:43:c1:e0:b9:65:81:54:54:da:44:b9:07:b8:0c:8c:c3:
45:7b:b2:3e:7d:37:2e:af:18:11:a6:02:5f:d4:e4:12:ba:10:
f8:ab:77:00:60:d4:a8:cc:b3:b4:48:a5:95:84:64:15:44:36:
03:ac:20:6c:f3:7b:e7:35:9b:d0:ff:51:7b:05:40:50:db:80:
69:38:a9:41:28:0a:09:1a:35:0a:2c:4b:0b:c2:d4:de:fe:4b:
ba:63:cf:28:d3:fc:45:70:56:2e:d1:1e:c0:34:84:44:22:dc:
e4:de:b2:92:8a:b7:00:31:2f:53:18:52:d8:5c:3a:23:99:74:
db:fe:32:5a:f9:8d:c7:a6:04:24:c3:93:53:92:e2:b5:23:29:
0d:45:6f:2d:41:ec:19:dd:22:b1:94:19:96:50:00:be:ba:dc:
e4:d2:7c:b2:9c:30:58:26:b9:71:b7:98:91:50:ad:fe:f4:f0:
86:9c:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:58:16 2025 by rpki-client