This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json)
Hash identifier: cXoakbuCYNUOUQmux8wNseGIEGika4aP1CCTQOIvqS8=
Subject key identifier: A2:9A:B1:F7:33:9C:6F:C0:8D:6D:BC:29:F7:BA:66:52:BF:87:8E:C4
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial: 0FC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
Manifest number: 0F3E
Signing time: Mon 26 Jan 2026 17:16:49 +0000
Manifest this update: Mon 26 Jan 2026 17:16:49 +0000
Manifest next update: Mon 02 Feb 2026 17:16:49 +0000
Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: GW3RcDAvIxF/TnukAYRlF0I/2Y62gtXWuVC+Nr84Vm8=)
2: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: bHO35v2d+whGfLiFlwfh8bZ4eWQakv4BbylUUSLDomk=)
3: 2A03C2CEBEE011F08AE93C56C4F9AE02.roa (hash: uUszxvUkrwIpDzKco/U3eyxpAs8VyjPRgjFefdF5QYo=)
4: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: L954B9Qgt6fx+kXJ7gmYs8Hjp/cbh5YATNVEXTvQSks=)
5: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: lL5sRXUJOtODihgeQbFyeji5XkkIg3eyOcjmlZC9+JA=)
6: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: VDrbCYNYtFqcFlKyvIkkZzRygX1FJPBOcD8ru/NY4yA=)
7: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw=)
8: 2AE826A8BEE011F0BE9E3C56C4F9AE02.roa (hash: KbAmhYyA/3RZkyBcJw8oLADeN0QTbLGu8cpnab4hQmE=)
9: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: r1gO8CHVV6YzvfcJ2YEAEHZoT0CoCIzLPvtncbyeWbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 17:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4035 (0xfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Validity
Not Before: Jan 26 17:16:49 2026 GMT
Not After : Feb 2 17:16:49 2026 GMT
Subject: CN=6977a181-850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:a4:ff:a9:e8:2e:db:b2:35:9e:f7:2e:2f:
9c:af:97:d3:ba:74:4d:76:b8:8d:48:85:bf:96:79:
dd:33:79:8b:5a:c3:77:e5:01:2d:21:55:49:75:2d:
6e:e1:ce:8d:8c:cf:d7:7d:8b:c0:12:36:f4:42:45:
1e:3a:a9:74:88:11:d4:63:bd:e6:81:c7:88:1a:16:
c7:42:22:eb:15:82:2d:66:f8:49:48:94:73:f3:88:
2d:4c:06:2e:34:a1:0b:af:fb:b9:d0:f0:70:db:6c:
f2:41:d1:cf:c7:0d:41:c3:e4:51:09:0a:32:42:4e:
c8:c0:2e:4d:09:73:08:28:da:fa:14:f6:96:00:08:
9e:ac:fc:fb:5e:f1:56:dc:29:c3:91:73:f2:6c:1c:
48:08:6d:cb:d1:07:50:f9:ff:94:41:5e:9e:ce:9e:
29:fb:7e:0e:08:40:59:d2:6e:8b:0e:c9:3c:00:75:
ed:1a:2c:25:47:43:f0:76:80:bc:79:66:da:01:1c:
8d:fd:80:f6:b0:03:c3:30:37:68:49:24:06:f4:ef:
ae:e6:a0:6f:6a:f8:3b:23:f5:7b:aa:0d:02:05:5c:
ef:01:3a:db:09:08:a9:43:c9:76:a8:cf:5c:5a:20:
f3:dd:f0:86:24:2c:d0:46:8f:36:64:92:24:69:ee:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:B1:F7:33:9C:6F:C0:8D:6D:BC:29:F7:BA:66:52:BF:87:8E:C4
X509v3 Authority Key Identifier:
keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:5e:47:73:30:2a:a0:c0:d3:04:39:e7:52:6e:3f:7c:cd:b1:
07:35:4f:0c:a3:7b:f1:dd:a8:d0:a5:13:8f:e0:f0:03:d1:22:
00:24:40:99:87:32:e1:19:cd:dd:89:7a:48:dc:16:7d:90:0a:
ab:ec:2c:9e:9c:cd:d9:51:8d:0b:1f:24:ae:69:55:22:d3:c8:
c2:da:ab:84:f4:62:92:c6:c1:bc:e7:74:2b:da:16:b3:1f:02:
22:dc:4b:c4:67:c6:14:8f:ad:17:4f:56:4b:e4:80:39:54:eb:
7b:cf:2c:c0:45:ae:3a:a8:f4:e3:49:ff:0f:85:75:bc:d8:b3:
0c:a7:a0:49:d2:0f:54:5f:5a:13:84:f1:ac:14:ac:4c:fb:e1:
5a:ec:9b:bb:81:21:99:7a:84:b5:40:03:80:ea:57:ee:d0:9a:
87:1e:cd:73:6c:7b:05:6f:b9:00:4e:35:a3:92:85:18:42:c6:
bf:e0:e0:04:59:a1:75:6b:bf:ba:7c:78:9a:8c:bc:3a:40:f0:
8d:78:ea:cf:3d:41:70:03:4a:fd:04:02:b5:12:8b:f1:3c:04:
4d:81:a9:9e:da:47:ed:14:2d:1e:6d:13:c3:77:51:fd:c6:53:
5d:6c:df:27:60:b1:30:29:a5:b1:1e:9a:94:10:0f:34:1b:14:
9b:02:41:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC
NTI3NzZGNzIwHhcNMjYwMTI2MTcxNjQ5WhcNMjYwMjAyMTcxNjQ5WjAYMRYwFAYD
VQQDDA02OTc3YTE4MS04NTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJKk/6noLtuyNZ73Li+cr5fTunRNdriNSIW/lnndM3mLWsN35QEtIVVJdS1u
4c6NjM/XfYvAEjb0QkUeOql0iBHUY73mgceIGhbHQiLrFYItZvhJSJRz84gtTAYu
NKELr/u50PBw22zyQdHPxw1Bw+RRCQoyQk7IwC5NCXMIKNr6FPaWAAierPz7XvFW
3CnDkXPybBxICG3L0QdQ+f+UQV6ezp4p+34OCEBZ0m6LDsk8AHXtGiwlR0PwdoC8
eWbaARyN/YD2sAPDMDdoSSQG9O+u5qBvavg7I/V7qg0CBVzvATrbCQipQ8l2qM9c
WiDz3fCGJCzQRo82ZJIkae5jtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKasfcz
nG/AjW28Kfe6ZlK/h47EMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz
RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB
V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXXkdzMCqgwNMEOedSbj98zbEHNU8Mo3vx3ajQpROP4PAD0SIAJECZ
hzLhGc3diXpI3BZ9kAqr7CyenM3ZUY0LHySuaVUi08jC2quE9GKSxsG853Qr2haz
HwIi3EvEZ8YUj60XT1ZL5IA5VOt7zyzARa46qPTjSf8PhXW82LMMp6BJ0g9UX1oT
hPGsFKxM++Fa7Ju7gSGZeoS1QAOA6lfu0JqHHs1zbHsFb7kATjWjkoUYQsa/4OAE
WaF1a7+6fHiajLw6QPCNeOrPPUFwA0r9BAK1EovxPARNgame2kftFC0ebRPDd1H9
xlNdbN8nYLEwKaWxHpqUEA80GxSbAkEf
-----END CERTIFICATE-----
Generated at Tue Jan 27 09:14:40 2026 by rpki-client