This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: /Sq1U2MG+02Dd2YxtQIsE0YTvZqCptjuXURX7oZ+GBc= Subject key identifier: D8:E0:F7:24:DF:AD:FF:7F:0F:20:8A:29:8E:D0:77:09:34:CA:32:10 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 01D9 Signing time: Fri 19 Dec 2025 02:00:27 +0000 Manifest this update: Fri 19 Dec 2025 02:00:27 +0000 Manifest next update: Fri 26 Dec 2025 02:00:27 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: 9JDqnVP36T8D82iaM++DHpDyU579RWdOOI/woEMWjYM=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Dec 19 02:00:27 2025 GMT Not After : Dec 26 02:00:27 2025 GMT Subject: CN=6944b1bb-fff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:fa:30:74:0e:be:5a:df:09:7f:d8:23:da: a9:15:4a:48:14:7a:86:7b:71:f7:3a:02:44:a2:57: 33:da:e9:0d:31:2d:48:c6:11:5f:e6:17:e0:8d:9f: a5:d4:af:83:19:18:38:ac:f8:08:ec:bf:78:40:70: 9e:d6:e3:3a:16:02:90:21:06:21:28:c8:a3:50:23: e7:ba:77:04:ac:f7:fb:37:b6:69:5b:5d:88:04:2b: fb:8e:8d:6b:0d:10:34:ca:df:9e:b6:c4:bc:77:d6: 50:27:4e:54:f5:76:d5:eb:7a:ee:1e:e6:7d:ab:8d: 75:6b:a2:41:39:ba:81:6f:ef:8d:6d:e0:ee:f2:6e: f5:e7:b7:3c:16:ff:19:4b:f7:e2:b9:91:b0:d2:2c: a8:f0:ab:45:08:94:cb:d9:54:2a:b5:9a:15:ab:92: e9:69:54:cb:4b:d1:f2:53:e5:98:e9:7f:60:09:6c: e8:6b:7f:41:fe:b8:af:1d:6c:db:20:a7:f1:da:dd: 39:ee:0b:37:6f:17:51:a8:f7:d7:ab:a2:e5:db:95: 26:5f:d1:3d:96:4d:e3:bd:f7:02:f0:49:7b:ca:68: d2:57:07:2e:a3:4c:89:35:af:b0:2e:f2:78:7d:8a: 58:60:af:b1:4f:84:88:04:d9:5f:f5:21:3c:24:77: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E0:F7:24:DF:AD:FF:7F:0F:20:8A:29:8E:D0:77:09:34:CA:32:10 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:bf:cc:1d:c8:48:26:17:7d:12:3d:fb:ac:33:2a:31:35:0b: cb:52:2d:f3:6d:a0:06:0d:ca:22:9b:e5:e6:2e:97:43:92:70: 6c:bb:7e:e6:5c:fd:f4:45:1e:47:86:f2:06:58:e0:93:ba:b4: d3:96:2d:1a:60:5f:be:af:3e:18:fd:22:1a:f4:91:f4:a2:08: 55:ab:2c:ae:2c:e1:e5:60:c9:2e:66:5c:15:4d:5b:d9:b5:64: 52:f2:77:cf:ff:54:b4:3b:cc:e2:10:30:0f:31:ab:21:fa:2e: 9e:ba:9e:71:e5:ee:b1:b2:62:e1:5f:a6:9c:0a:89:ba:f1:03: 5a:8e:25:16:5d:e0:6d:25:0c:ae:31:7c:fe:47:c0:de:0e:4a: f6:6f:a4:8b:70:18:c9:6d:15:eb:c1:6e:8a:3e:f0:ed:2e:1e: 09:8c:81:72:1d:7d:ae:05:2b:44:e8:41:4d:98:dd:56:8a:0d: d6:13:9d:2d:ef:c1:b4:1e:a4:96:f9:74:4a:5c:76:d5:98:8c: 90:0b:07:98:29:3e:a6:cc:b2:ee:d2:6f:6f:59:da:54:01:9f: ac:4b:58:b9:dd:58:2c:45:ad:cc:34:44:4f:81:00:14:31:61: d0:0e:92:3d:9c:0b:e2:f7:7b:04:27:b6:41:2b:b0:eb:75:15: b9:93:2f:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUxMjE5MDIwMDI3WhcNMjUxMjI2MDIwMDI3WjAYMRYwFAYD VQQDDA02OTQ0YjFiYi1mZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFP6MHQOvlrfCX/YI9qpFUpIFHqGe3H3OgJEolcz2ukNMS1IxhFf5hfgjZ+l 1K+DGRg4rPgI7L94QHCe1uM6FgKQIQYhKMijUCPnuncErPf7N7ZpW12IBCv7jo1r DRA0yt+etsS8d9ZQJ05U9XbV63ruHuZ9q411a6JBObqBb++NbeDu8m7157c8Fv8Z S/fiuZGw0iyo8KtFCJTL2VQqtZoVq5LpaVTLS9HyU+WY6X9gCWzoa39B/rivHWzb IKfx2t057gs3bxdRqPfXq6Ll25UmX9E9lk3jvfcC8El7ymjSVwcuo0yJNa+wLvJ4 fYpYYK+xT4SIBNlf9SE8JHcdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjg9yTf rf9/DyCKKY7Qdwk0yjIQMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgv8wdyEgmF30SPfusMyoxNQvLUi3zbaAGDcoim+XmLpdDknBsu37m XP30RR5HhvIGWOCTurTTli0aYF++rz4Y/SIa9JH0oghVqyyuLOHlYMkuZlwVTVvZ tWRS8nfP/1S0O8ziEDAPMash+i6eup5x5e6xsmLhX6acCom68QNajiUWXeBtJQyu MXz+R8DeDkr2b6SLcBjJbRXrwW6KPvDtLh4JjIFyHX2uBStE6EFNmN1Wig3WE50t 78G0HqSW+XRKXHbVmIyQCweYKT6mzLLu0m9vWdpUAZ+sS1i53VgsRa3MNERPgQAU MWHQDpI9nAvi93sEJ7ZBK7DrdRW5ky8K -----END CERTIFICATE-----Generated at Fri Dec 19 18:56:13 2025 by rpki-client