This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: SIbT5/Q9BBx+jRVmJrMNNYG/7wQGj98h+zU+XpAy2Fc= Subject key identifier: 07:C8:D6:72:7F:C9:DD:0D:BA:3E:51:28:DF:8D:68:50:57:F7:E8:AC Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 01D2 Signing time: Fri 05 Dec 2025 01:08:36 +0000 Manifest this update: Fri 05 Dec 2025 01:08:36 +0000 Manifest next update: Fri 12 Dec 2025 01:08:36 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: VYjjwI8PHRRhGKryCrx1RcNMdhds1tSa/JOKtIcnSPs=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Dec 5 01:08:36 2025 GMT Not After : Dec 12 01:08:36 2025 GMT Subject: CN=69323094-7af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:fd:8d:f1:b5:a0:61:48:96:8a:08:20:ff: fc:35:80:a5:5e:10:d7:72:ed:e8:4f:27:ba:fa:93: 57:e3:9e:67:5b:12:ee:06:2c:c2:ef:eb:ca:5c:26: 9b:f1:c9:df:0a:63:46:7b:d2:62:b7:e2:f0:70:bd: 6d:38:6f:27:0f:14:0d:16:91:58:ac:ca:e2:eb:0d: 12:25:27:3c:05:95:31:80:7b:10:e6:5d:82:e4:47: ba:c6:e9:dd:ac:f1:24:ac:1c:1d:61:3b:98:f4:7b: a7:b2:2c:eb:da:52:3c:45:b0:8f:49:f3:a6:99:f4: 9f:06:45:ad:44:54:f3:7e:39:8c:0f:27:d7:93:fc: 3e:2a:ca:0c:42:ac:22:47:91:77:cf:73:c3:ad:e6: c0:da:84:5a:89:e5:c3:70:33:89:8e:ef:7e:50:bb: 0c:87:35:b3:a5:30:37:76:ab:7b:40:3e:7a:62:29: c6:85:18:ee:d1:31:e7:30:7e:5f:15:32:0a:26:9b: a8:7f:26:d5:ab:2a:8f:0e:c0:65:a6:ff:42:56:46: f7:a2:11:6d:5c:8e:fa:26:ad:80:77:ee:da:78:9f: 70:7b:48:21:e7:fe:98:2c:4c:a2:b9:df:68:f8:46: 4e:b9:7c:a0:ae:12:ee:28:db:77:88:b1:88:69:63: 47:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C8:D6:72:7F:C9:DD:0D:BA:3E:51:28:DF:8D:68:50:57:F7:E8:AC X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e9:58:20:13:0b:f5:ba:4a:ed:a1:f4:b4:06:07:01:8d:75: f3:df:c2:92:3d:7b:eb:b0:57:0d:84:64:f2:e1:c7:9f:74:c8: 89:21:4a:ce:32:3f:81:86:31:a9:20:42:9a:9a:d9:d8:61:ac: 29:1c:b5:48:01:66:4e:c7:a5:3a:93:e5:e0:27:56:e6:3e:32: 11:69:e4:85:35:db:9e:ce:1d:a3:53:3a:8b:d8:1c:77:a0:ae: 99:37:b2:93:7c:dd:f2:fb:e8:e5:34:b7:25:8a:57:7d:09:cb: 44:84:75:36:e4:46:88:43:4f:ed:0d:af:ae:26:8f:20:02:73: 87:dd:28:53:c2:5f:89:88:6d:fb:e2:2f:6e:72:10:06:86:83: 07:4c:15:59:d3:11:f1:5a:69:f8:af:7c:69:d3:2e:a0:f3:f9: 0c:ea:59:28:e6:3d:48:db:e1:3b:c8:f1:be:ff:4a:b5:14:6a: eb:eb:0d:1a:e0:03:52:4e:29:32:54:16:df:16:c4:74:a2:b0: e7:cf:b7:1e:8f:02:c1:93:f2:4d:f0:01:54:14:43:ae:ea:eb: 4e:4d:f7:2c:4e:0e:43:8f:7e:40:3f:12:eb:74:a4:15:29:f3: 2b:b9:c0:78:35:43:91:be:0c:d8:12:e3:fb:d2:a4:0a:5b:4a: 58:a6:b0:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUxMjA1MDEwODM2WhcNMjUxMjEyMDEwODM2WjAYMRYwFAYD VQQDEw02OTMyMzA5NC03YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj79jfG1oGFIlooIIP/8NYClXhDXcu3oTye6+pNX455nWxLuBizC7+vKXCab 8cnfCmNGe9Jit+LwcL1tOG8nDxQNFpFYrMri6w0SJSc8BZUxgHsQ5l2C5Ee6xund rPEkrBwdYTuY9Hunsizr2lI8RbCPSfOmmfSfBkWtRFTzfjmMDyfXk/w+KsoMQqwi R5F3z3PDrebA2oRaieXDcDOJju9+ULsMhzWzpTA3dqt7QD56YinGhRju0THnMH5f FTIKJpuofybVqyqPDsBlpv9CVkb3ohFtXI76Jq2Ad+7aeJ9we0gh5/6YLEyiud9o +EZOuXygrhLuKNt3iLGIaWNHxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfI1nJ/ yd0Nuj5RKN+NaFBX9+isMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb6VggEwv1ukrtofS0BgcBjXXz38KSPXvrsFcNhGTy4cefdMiJIUrO Mj+BhjGpIEKamtnYYawpHLVIAWZOx6U6k+XgJ1bmPjIRaeSFNduezh2jUzqL2Bx3 oK6ZN7KTfN3y++jlNLclild9CctEhHU25EaIQ0/tDa+uJo8gAnOH3ShTwl+JiG37 4i9uchAGhoMHTBVZ0xHxWmn4r3xp0y6g8/kM6lko5j1I2+E7yPG+/0q1FGrr6w0a 4ANSTikyVBbfFsR0orDnz7cejwLBk/JN8AFUFEOu6utOTfcsTg5Dj35APxLrdKQV KfMrucB4NUORvgzYEuP70qQKW0pYprC2 -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:26 2025 by rpki-client