This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 4sizq+S6nB4PdW6geHtxpdDAXsMKtQQFYl/6+y6vLAw= Subject key identifier: EC:C1:F9:01:CC:23:D8:81:55:63:0A:FA:88:AB:81:E0:7E:B1:36:4E Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34EF Signing time: Sat 06 Dec 2025 14:31:24 +0000 Manifest this update: Sat 06 Dec 2025 14:31:23 +0000 Manifest next update: Sat 13 Dec 2025 14:31:23 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: 5mBAbkVQK40ev83BwaR2U8Up+ivE9nUnU9nvlTKeIfY=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: RA6RFmE6k5HO1bBqRafgilu2yoyhiNE9rjZysYl9t3k=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: APLkO/9VQDMo8Mg1BILGpzlcs8IiIyqCJfnR8QGrWEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Dec 6 14:31:23 2025 GMT Not After : Dec 13 14:31:23 2025 GMT Subject: CN=69343e3c-e32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:c0:f4:a8:7d:47:40:30:1d:4c:dd:bf:dc: ef:3f:4b:2b:d5:9c:89:77:57:76:83:07:84:a1:33: ed:b1:b4:a0:48:1e:42:a3:4c:d6:ff:95:0c:1c:65: 9a:de:19:a6:8a:4f:00:f9:fd:7b:ce:fb:22:10:5f: 2e:65:63:00:d0:ed:6b:71:1f:9c:ab:78:cb:84:b4: 27:38:5d:9a:e9:ee:ab:f1:e4:61:96:b8:30:37:6d: f1:71:2e:f7:ce:b3:53:dc:77:2c:ae:0b:d5:cc:72: 0a:7b:c4:17:c2:90:5a:ea:4f:92:bd:1f:ed:05:ed: 20:db:1e:9d:65:c2:3a:93:ca:d9:9d:33:ae:86:37: 7c:3b:3a:c8:0c:b0:a5:69:8c:56:e2:46:9b:ea:88: 6c:a8:e5:51:61:4b:63:f0:12:d6:d3:81:8e:4a:48: e3:74:38:3b:dd:9f:e0:59:01:7a:73:fd:51:da:a8: 86:ca:f4:46:c2:39:be:d6:49:fa:98:51:06:d9:19: 89:cd:cc:3e:96:4a:8a:73:29:6c:19:fa:c8:8c:c3: 90:4e:80:d4:cf:dc:6d:53:80:98:b7:b5:26:00:f5: cc:2b:69:ad:00:ce:b4:31:7d:dd:b6:07:46:d0:04: a1:43:a8:91:70:98:dd:f6:f4:c3:67:ec:6e:3e:06: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:F9:01:CC:23:D8:81:55:63:0A:FA:88:AB:81:E0:7E:B1:36:4E X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:53:25:fc:bf:b2:5f:bd:c3:f1:3f:0a:1d:28:a6:73:34: b1:f7:f3:4b:52:d4:bf:bf:7f:90:5a:13:08:8c:f8:f1:ab:68: eb:39:40:60:0e:b0:e2:af:27:0b:2f:47:8d:bb:91:c0:fa:49: 14:9e:c7:8d:4e:11:ce:27:9f:47:02:f6:28:51:82:7f:37:bc: d8:d1:e9:c7:07:45:f9:9a:98:4b:11:06:3b:72:0d:fb:01:d6: e0:70:a5:eb:5f:4e:77:00:55:e4:99:42:f2:48:da:0a:52:28: 10:79:e0:4a:e6:03:c0:9e:ae:ef:8c:c4:a7:d8:d6:34:8a:82: 71:c8:e3:f2:37:37:c4:22:cc:01:25:f3:ec:99:e5:87:bf:7e: f1:92:75:86:2b:1b:3e:74:9b:a1:ce:77:03:3d:78:a4:f5:88: 7d:7d:74:42:80:7c:89:b2:06:41:1c:08:bc:1c:b1:37:65:69: bc:31:01:30:66:ee:2a:94:0c:1f:be:6f:72:33:c3:4e:17:43: 86:7d:11:b3:ed:94:02:f0:d4:e7:60:f8:93:68:d7:fc:f0:c6: f4:4f:a5:ef:fd:50:76:40:d8:01:a2:d8:44:56:11:ba:47:d7: a5:61:70:43:33:da:78:84:b8:41:cb:9c:30:5a:52:ce:63:02: 34:8e:60:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUxMjA2MTQzMTIzWhcNMjUxMjEzMTQzMTIzWjAYMRYwFAYD VQQDEw02OTM0M2UzYy1lMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXPA9Kh9R0AwHUzdv9zvP0sr1ZyJd1d2gweEoTPtsbSgSB5Co0zW/5UMHGWa 3hmmik8A+f17zvsiEF8uZWMA0O1rcR+cq3jLhLQnOF2a6e6r8eRhlrgwN23xcS73 zrNT3HcsrgvVzHIKe8QXwpBa6k+SvR/tBe0g2x6dZcI6k8rZnTOuhjd8OzrIDLCl aYxW4kab6ohsqOVRYUtj8BLW04GOSkjjdDg73Z/gWQF6c/1R2qiGyvRGwjm+1kn6 mFEG2RmJzcw+lkqKcylsGfrIjMOQToDUz9xtU4CYt7UmAPXMK2mtAM60MX3dtgdG 0AShQ6iRcJjd9vTDZ+xuPgarYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzB+QHM I9iBVWMK+oirgeB+sTZOMB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI71Ml/L+yX73D8T8KHSimczSx9/NLUtS/v3+QWhMIjPjxq2jrOUBg DrDirycLL0eNu5HA+kkUnseNThHOJ59HAvYoUYJ/N7zY0enHB0X5mphLEQY7cg37 AdbgcKXrX053AFXkmULySNoKUigQeeBK5gPAnq7vjMSn2NY0ioJxyOPyNzfEIswB JfPsmeWHv37xknWGKxs+dJuhzncDPXik9Yh9fXRCgHyJsgZBHAi8HLE3ZWm8MQEw Zu4qlAwfvm9yM8NOF0OGfRGz7ZQC8NTnYPiTaNf88Mb0T6Xv/VB2QNgBothEVhG6 R9elYXBDM9p4hLhBy5wwWlLOYwI0jmBN -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:11 2025 by rpki-client