This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json)
Hash identifier: TrJjnq88cx/x7Q2QxvFIukmQ1B34wm6MzAiDHqO2gf8=
Subject key identifier: 97:94:54:4C:E7:97:B9:88:51:16:3B:F2:99:D4:53:9B:3E:FD:55:F4
Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
Manifest number: 01E0
Signing time: Sun 07 Dec 2025 01:19:15 +0000
Manifest this update: Sun 07 Dec 2025 01:19:14 +0000
Manifest next update: Sun 14 Dec 2025 01:19:14 +0000
Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: hhl9cUw++jTs5zpXM3AwdIxRd/mtV4c+ITjSkFChNYg=)
2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: p/oubbOjEb8Zn+B8haVjlomp+846cFby5ixQFCvfJFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2
Validity
Not Before: Dec 7 01:19:14 2025 GMT
Not After : Dec 14 01:19:14 2025 GMT
Subject: CN=6934d612-8e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:41:91:15:1c:09:17:49:5a:0a:8c:fa:35:
ae:25:2d:d6:be:fc:db:43:c5:11:be:a6:d7:d1:eb:
2d:bf:a5:f4:ee:5d:46:e7:e0:0d:2e:81:65:9e:b2:
6c:8f:9d:78:30:f9:63:f0:41:b9:8c:83:aa:f6:4d:
47:f3:2e:86:11:ee:f1:39:31:02:dc:ef:b5:77:90:
a5:cc:aa:55:04:07:85:40:6a:e3:2f:52:00:92:bf:
c0:6b:e0:1e:07:03:84:5b:0a:bf:82:25:bf:78:26:
1c:7e:5f:a2:f5:8f:20:67:92:6d:46:05:33:eb:5c:
06:51:e9:69:fe:e8:a9:c4:2a:df:d5:1d:9a:d7:ad:
43:4a:e2:14:3c:f2:8f:f4:fc:9b:cb:74:27:ca:12:
20:4b:6a:da:56:bb:86:14:73:5a:ea:e9:4b:0c:af:
33:75:80:35:78:53:2c:78:36:8d:c4:12:ed:fa:f2:
e1:16:51:24:ee:fb:fd:69:f5:02:4f:b0:99:8d:a4:
b3:ee:73:d3:9c:82:dc:80:b5:75:38:0d:50:04:4f:
39:b0:ae:b6:e6:17:a1:7a:18:61:32:a4:94:5b:c4:
df:1a:4c:29:00:9f:ed:40:b3:72:74:4e:cc:ab:79:
d2:0a:1f:d3:a3:3a:c1:c3:ec:a0:f8:f7:ee:bf:a7:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:94:54:4C:E7:97:B9:88:51:16:3B:F2:99:D4:53:9B:3E:FD:55:F4
X509v3 Authority Key Identifier:
keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:17:66:b2:59:25:22:6b:0b:a5:fd:96:d7:c7:ec:e7:ed:
a2:30:1f:7a:5b:71:c6:4a:b3:7c:08:cc:74:e1:a6:c3:85:ad:
3b:b3:83:c7:db:db:dc:5c:f1:67:bb:ee:d3:cc:73:a3:ed:5a:
58:06:55:a1:fd:3f:8a:c4:c1:6b:aa:89:94:e6:63:5e:d8:1e:
52:cf:6d:ef:5f:6c:cf:bc:d0:d6:ca:fe:11:a3:69:7a:da:09:
4f:e5:b9:fb:ce:41:90:61:ca:5e:21:4a:a2:3a:2d:19:b2:9a:
8f:04:f1:7c:cd:0f:38:4a:e0:55:63:af:58:d8:05:fc:7c:60:
2f:1c:ab:47:51:e5:f8:41:68:40:d7:d5:43:e2:70:df:12:79:
af:78:7b:82:f8:c5:ab:81:d4:04:e9:4f:57:b2:ad:4e:4e:03:
10:d8:8b:88:4b:ec:25:07:06:61:71:b8:50:06:6a:4e:71:c1:
ae:30:83:d8:b2:95:cd:1f:74:9a:98:fb:6e:bb:de:22:54:a4:
ed:0b:ae:69:24:2c:15:37:f7:ff:03:e3:6a:5a:5b:a1:b3:ed:
2c:c5:a3:29:1f:07:49:33:9a:34:80:a5:de:86:bd:18:4f:17:
a9:26:bf:ca:10:05:36:ed:bc:43:47:5c:81:05:38:89:41:ea:
2d:6a:1d:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG
OTg5RTQyRjIwHhcNMjUxMjA3MDExOTE0WhcNMjUxMjE0MDExOTE0WjAYMRYwFAYD
VQQDEw02OTM0ZDYxMi04ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvINBkRUcCRdJWgqM+jWuJS3WvvzbQ8URvqbX0estv6X07l1G5+ANLoFlnrJs
j514MPlj8EG5jIOq9k1H8y6GEe7xOTEC3O+1d5ClzKpVBAeFQGrjL1IAkr/Aa+Ae
BwOEWwq/giW/eCYcfl+i9Y8gZ5JtRgUz61wGUelp/uipxCrf1R2a161DSuIUPPKP
9Pyby3QnyhIgS2raVruGFHNa6ulLDK8zdYA1eFMseDaNxBLt+vLhFlEk7vv9afUC
T7CZjaSz7nPTnILcgLV1OA1QBE85sK625hehehhhMqSUW8TfGkwpAJ/tQLNydE7M
q3nSCh/TozrBw+yg+Pfuv6chRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeUVEzn
l7mIURY78pnUU5s+/VX0MB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5
QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0
TW1zLTFIeU9TbDM1aWVRdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5cRdmslklImsLpf2W18fs5+2iMB96W3HGSrN8CMx04abDha07s4PH
29vcXPFnu+7TzHOj7VpYBlWh/T+KxMFrqomU5mNe2B5Sz23vX2zPvNDWyv4Ro2l6
2glP5bn7zkGQYcpeIUqiOi0ZspqPBPF8zQ84SuBVY69Y2AX8fGAvHKtHUeX4QWhA
19VD4nDfEnmveHuC+MWrgdQE6U9Xsq1OTgMQ2IuIS+wlBwZhcbhQBmpOccGuMIPY
spXNH3SamPtuu94iVKTtC65pJCwVN/f/A+NqWluhs+0sxaMpHwdJM5o0gKXehr0Y
TxepJr/KEAU27bxDR1yBBTiJQeotah39
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:55 2025 by rpki-client