This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft File: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft (raw, json) Hash identifier: COr2QmB8WusT16u5rsuKOI2l55R0l1Tm1hD47LmcmkQ= Subject key identifier: E7:F1:DF:13:B4:C6:EE:02:B8:35:85:B6:3D:F6:03:B4:81:87:C9:5F Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Certificate serial: 16E39C26B24E189632CE3A39A17A23F04386299D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft Manifest number: B1 Signing time: Sat 24 Jan 2026 12:33:56 +0000 Manifest this update: Sat 24 Jan 2026 12:28:56 +0000 Manifest next update: Sun 25 Jan 2026 14:48:56 +0000 Files and hashes: 1: 3230332e302e38302e302f32342d3234203d3e2039393133.roa (hash: 5CEE0bOW0MgpOlLO8lN9+nz4tABxvncSgkR6y2kvmq4=) 2: 3230332e312e36382e302f32342d3234203d3e2039393133.roa (hash: sf6xpmLBwwFxYc5zLhbA2o5zERE4ANPwwQpcoFqWw9Y=) 3: 3230332e312e36392e302f32342d3234203d3e2039393133.roa (hash: HYKqNuiBE/DUFFDQyKmuMZ6wkcvhITNaHWFYsHIuJlA=) 4: 3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (hash: jEqn8jELxuDQMwvht+ON+P9QmjrSbE+0mwwGAYlItGo=) 5: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (hash: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=) 6: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (hash: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=) 7: 3230332e35372e32332e302f32342d3234203d3e2039393133.roa (hash: 9vPoyR5h4XW7VzKPshTgyqTHm+x238aD7PNshnOSJtk=) 8: 33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl (hash: WiVTbzj2aoOwaXvUQK04QqCCJr896D8qP6RKy5bGgzw=) 9: 3230332e33312e3131312e302f32342d3234203d3e2039393133.roa (hash: YlAvV8ZZuoYsPDhwbCWgqa9GkyYRu/NKCURMzPqa7q4=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e3:9c:26:b2:4e:18:96:32:ce:3a:39:a1:7a:23:f0:43:86:29:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB Validity Not Before: Jan 24 12:28:56 2026 GMT Not After : Jan 25 14:48:56 2026 GMT Subject: CN=E7F1DF13B4C6EE02B83585B63DF603B48187C95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:04:69:1d:97:c5:a3:7d:3c:bd:68:bf:2f:f2: cc:60:b3:b9:5b:05:f8:03:3b:5f:3b:ba:77:8b:ff: 8b:97:85:29:5b:9a:f8:89:46:b8:41:86:9f:2d:32: eb:13:f1:fb:97:6d:06:a5:86:7d:52:28:96:cb:fb: 88:98:e2:58:71:27:bb:e8:87:77:4e:ab:1b:b2:13: 2b:57:43:c8:80:e4:3d:26:8c:b0:7c:b5:00:39:fe: eb:cd:9f:49:60:3a:4f:d6:61:09:bc:91:65:0a:77: 78:00:f7:ec:1a:bb:1a:36:fa:91:32:4c:c3:54:20: 89:03:5a:d8:06:90:13:6b:90:4e:3b:95:7a:9e:f3: 77:91:c3:50:e2:e1:26:0e:42:4b:22:a3:61:85:8f: 79:e4:f1:fd:d5:32:61:ce:98:7f:51:c9:e5:f3:41: c9:70:89:18:c6:20:ef:83:85:0a:17:95:f4:a6:75: 9b:da:aa:d3:c9:7e:e3:de:92:2b:18:33:bc:0f:69: 36:45:ee:7f:7a:b4:8f:e8:d2:9e:3f:fd:e2:af:35: c6:1c:b9:74:03:81:e9:f1:dc:7c:7a:b4:b3:81:74: fc:b7:2e:9b:06:7a:61:b9:62:b8:1d:22:83:5a:d0: f9:87:02:4e:79:d0:a2:ae:4a:42:e6:48:0a:a7:37: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F1:DF:13:B4:C6:EE:02:B8:35:85:B6:3D:F6:03:B4:81:87:C9:5F X509v3 Authority Key Identifier: keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:69:03:3e:54:52:1a:da:cc:2b:77:63:d8:8d:89:f3:20:29: ae:72:61:49:f9:5b:8b:1b:aa:60:29:b6:02:8d:9f:e2:84:9a: ad:8e:34:1b:55:15:95:d1:ba:e1:f0:5d:2f:a6:bc:49:66:5c: 28:e9:7d:2c:36:53:a4:5d:f6:1a:7b:73:92:1b:32:3e:85:76: 25:d4:36:1e:22:32:6c:d8:45:a0:aa:4c:a4:1a:48:cd:4c:62: be:e2:aa:4e:44:aa:cc:73:1a:8b:b0:27:4d:24:52:06:4d:06: 0a:c6:d9:91:8c:14:16:c0:bd:3c:65:90:52:ed:87:12:b2:03: aa:5b:36:3f:cc:d6:07:cd:ad:4e:d4:69:0b:e9:30:92:9c:e7: bb:66:9e:67:b5:f1:91:af:46:f8:bd:f0:23:aa:90:79:27:94: 40:f6:d8:40:22:43:79:83:e9:2e:4b:91:2b:32:24:1d:df:70: 40:34:c4:b6:dc:f4:0d:a7:17:21:f7:e4:e7:83:66:e7:d6:c6: db:de:44:4f:4a:5d:a0:08:85:f2:41:08:b8:e3:9c:3c:5f:1d: 55:de:a4:5d:03:bd:94:af:f0:bd:6c:94:28:83:3e:75:e0:09: 4e:d0:05:c6:9c:d9:31:06:98:90:5a:d2:28:70:8a:e7:9f:b3: a1:53:39:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFuOcJrJOGJYyzjo5oXoj8EOGKZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOUIwQkUwMDAwMTEwLwYDVQQFEygzM0Y0MDgyMTY2 QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCMB4XDTI2MDEyNDEyMjg1NloX DTI2MDEyNTE0NDg1NlowMzExMC8GA1UEAxMoRTdGMURGMTNCNEM2RUUwMkI4MzU4 NUI2M0RGNjAzQjQ4MTg3Qzk1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIgEaR2XxaN9PL1ovy/yzGCzuVsF+AM7Xzu6d4v/i5eFKVua+IlGuEGGny0y 6xPx+5dtBqWGfVIolsv7iJjiWHEnu+iHd06rG7ITK1dDyIDkPSaMsHy1ADn+682f SWA6T9ZhCbyRZQp3eAD37Bq7Gjb6kTJMw1QgiQNa2AaQE2uQTjuVep7zd5HDUOLh Jg5CSyKjYYWPeeTx/dUyYc6Yf1HJ5fNByXCJGMYg74OFCheV9KZ1m9qq08l+496S KxgzvA9pNkXuf3q0j+jSnj/94q81xhy5dAOB6fHcfHq0s4F0/LcumwZ6YbliuB0i g1rQ+YcCTnnQoq5KQuZICqc3chUCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTn8d8T tMbuArg1hbY99gO0gYfJXzAfBgNVHSMEGDAWgBQz9AghZqif/28yauCbRL++8WKf 6zAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvOS8zM0Y0MDgy MTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVCLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NX1FJSVdhb25f OXZNbXJnbTBTX3Z2RmluLXMuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUz MDAwMDAvOS8zM0Y0MDgyMTY2QTg5RkZGNkYzMjZBRTA5QjQ0QkZCRUYxNjI5RkVC Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAXmkDPlRSGtrMK3dj2I2J8yAprnJhSflbixuqYCm2Ao2f4oSa rY40G1UVldG64fBdL6a8SWZcKOl9LDZTpF32GntzkhsyPoV2JdQ2HiIybNhFoKpM pBpIzUxivuKqTkSqzHMai7AnTSRSBk0GCsbZkYwUFsC9PGWQUu2HErIDqls2P8zW B82tTtRpC+kwkpznu2aeZ7Xxka9G+L3wI6qQeSeUQPbYQCJDeYPpLkuRKzIkHd9w QDTEttz0DacXIffk54Nm59bG295ET0pdoAiF8kEIuOOcPF8dVd6kXQO9lK/wvWyU KIM+deAJTtAFxpzZMQaYkFrSKHCK55+zoVM5zQ== -----END CERTIFICATE-----Generated at Sun Jan 25 02:49:01 2026 by rpki-client