This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft File: uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json) Hash identifier: HuUASDDGvu7hHN97eH6p4rqgmOvjV8VBosgAZIG6i0g= Subject key identifier: 1F:BD:CE:CF:7B:45:FE:1B:C4:B7:39:E5:9E:B4:83:6A:58:C5:07:AE Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 Certificate issuer: /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft Manifest number: F7 Signing time: Wed 03 Dec 2025 03:35:25 +0000 Manifest this update: Wed 03 Dec 2025 03:35:24 +0000 Manifest next update: Wed 10 Dec 2025 03:35:24 +0000 Files and hashes: 1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: MPlI/Qa1EHXtEQ6WVmU0WFpiHG/1Wwb0dlHzp+fl+Hg=) 2: 27995372566911EF9D53B517C4F9AE02.roa (hash: a77iAc4lVu+0oRkHBvhrQbh2JlrG7+YjIwHwoF/sfB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4 Validity Not Before: Dec 3 03:35:24 2025 GMT Not After : Dec 10 03:35:24 2025 GMT Subject: CN=692faffc-f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:26:ba:bc:72:bf:8f:1a:47:54:a4:28:69: e7:00:46:10:ab:33:ad:73:a8:da:fc:48:27:3a:71: ce:7e:e6:69:65:9b:f9:02:cc:12:5b:ce:55:4f:22: 73:cd:e8:c5:67:7c:22:ff:cd:06:2d:5a:10:98:d8: b4:fe:7c:f5:c1:0d:04:1e:ee:cf:1f:57:37:8b:3e: b9:c0:b3:72:d3:85:2f:90:1a:be:f9:6c:cf:7d:f7: b1:6c:62:94:f0:f1:ee:e0:32:21:a4:31:fd:d6:6f: 99:9e:3d:b9:41:35:18:ea:ee:2e:27:5f:f9:8c:5b: e4:7e:13:0e:8c:a3:40:a5:2d:e6:ab:b3:72:a6:0e: fc:5a:09:92:49:23:04:a2:ec:c3:1d:af:57:53:b3: 60:e4:76:71:48:93:86:7d:66:6b:68:32:37:4c:77: 26:e8:0a:dd:0a:07:d0:49:e5:86:51:ea:64:d5:d4: 84:e8:41:54:97:d1:95:68:d7:20:8a:c3:ec:fa:28: 28:10:4c:8a:bf:ee:fe:1b:ec:e2:0b:e2:b1:73:0f: 01:ce:38:6e:fb:8b:d9:3d:31:53:c0:e0:e6:4f:14: e2:c4:97:15:c0:fc:47:2b:86:42:2c:3c:94:89:9a: 53:f7:72:a3:af:76:01:af:fa:bd:af:78:50:d9:63: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:CE:CF:7B:45:FE:1B:C4:B7:39:E5:9E:B4:83:6A:58:C5:07:AE X509v3 Authority Key Identifier: keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:fc:9e:8a:44:8e:3c:bd:76:ad:db:c7:4a:a7:16:6d:fa:4c: af:d4:65:60:18:d0:d4:86:ee:5f:b6:77:e2:b7:40:26:c1:4b: 32:9b:47:88:39:73:43:21:db:20:bd:49:79:44:19:ea:6c:20: a1:88:d4:2d:84:26:da:8b:3b:c3:53:a5:03:4b:68:17:8e:2d: 0b:52:f1:b6:23:3e:f7:eb:48:53:ac:6f:e1:a4:56:a1:5d:06: 65:84:4a:fe:2e:96:fb:26:9e:ca:e0:c6:d8:3c:9d:08:fb:fc: 26:2b:86:5d:0d:80:a3:c8:61:59:dc:e1:16:58:f8:91:ea:db: b4:e1:dc:e8:0b:c1:94:ce:2d:64:3b:30:ab:b9:69:a1:3b:29: ad:b9:21:6f:e0:19:ea:60:0a:3e:5b:57:39:47:37:8b:e9:bb: 56:97:ee:24:2d:6f:e2:43:7d:2e:70:f7:63:27:12:c0:43:48: 47:88:95:3c:c0:49:73:72:29:38:4a:d2:81:d8:63:82:55:e2: f6:7b:fc:40:8c:fa:13:d5:e0:cd:07:44:2f:7c:4f:c4:54:74: 7a:25:dc:af:13:5b:c7:e1:23:5e:fa:49:66:e2:b5:ae:c8:29: e6:3c:f2:2e:12:b7:95:39:6a:ee:a1:1d:73:e0:ea:96:6f:3a: e8:2c:55:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNCQjAxMTAvBgNVBAUTKEI5MUEyNENGMDQ3MTExMTdDOEMzQkEyNjRBMzMzOTVE QTc3RjkxQjQwHhcNMjUxMjAzMDMzNTI0WhcNMjUxMjEwMDMzNTI0WjAYMRYwFAYD VQQDEw02OTJmYWZmYy1mMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g0murxyv48aR1SkKGnnAEYQqzOtc6ja/EgnOnHOfuZpZZv5AswSW85VTyJz zejFZ3wi/80GLVoQmNi0/nz1wQ0EHu7PH1c3iz65wLNy04UvkBq++WzPffexbGKU 8PHu4DIhpDH91m+Znj25QTUY6u4uJ1/5jFvkfhMOjKNApS3mq7Nypg78WgmSSSME ouzDHa9XU7Ng5HZxSJOGfWZraDI3THcm6ArdCgfQSeWGUepk1dSE6EFUl9GVaNcg isPs+igoEEyKv+7+G+ziC+Kxcw8Bzjhu+4vZPTFTwODmTxTixJcVwPxHK4ZCLDyU iZpT93Kjr3YBr/q9r3hQ2WNzGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+9zs97 Rf4bxLc55Z60g2pYxQeuMB8GA1UdIwQYMBaAFLkaJM8EcREXyMO6JkozOV2nf5G0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0JCMC9CODY1QjM3RTU2 NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVSZkl3N29tU2pNNVhhZF9r YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3VSb2t6d1J4RVJmSXc3b21Tak01WGFkX2tiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0JCMC9CODY1QjM3RTU2NjgxMUVGOEU2QTc3NURDNEY5QUUwMi91Um9rendSeEVS Zkl3N29tU2pNNVhhZF9rYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk/J6KRI48vXat28dKpxZt+kyv1GVgGNDUhu5ftnfit0AmwUsym0eI OXNDIdsgvUl5RBnqbCChiNQthCbaizvDU6UDS2gXji0LUvG2Iz7360hTrG/hpFah XQZlhEr+Lpb7Jp7K4MbYPJ0I+/wmK4ZdDYCjyGFZ3OEWWPiR6tu04dzoC8GUzi1k OzCruWmhOymtuSFv4BnqYAo+W1c5RzeL6btWl+4kLW/iQ30ucPdjJxLAQ0hHiJU8 wElzcik4StKB2GOCVeL2e/xAjPoT1eDNB0QvfE/EVHR6JdyvE1vH4SNe+klm4rWu yCnmPPIuEreVOWruoR1z4OqWbzroLFWQ -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:45 2025 by rpki-client