This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json)
Hash identifier: JYzfbct5jU0/shWWC2TW65jrZrCsdKDb9cFRC89UEdc=
Subject key identifier: AE:12:DE:35:F3:CC:08:2B:8E:16:32:11:09:85:7F:27:53:A5:D6:E6
Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Certificate serial: 0807
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
Manifest number: 07FE
Signing time: Sat 06 Dec 2025 20:08:07 +0000
Manifest this update: Sat 06 Dec 2025 20:08:07 +0000
Manifest next update: Sat 13 Dec 2025 20:08:07 +0000
Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: B0k55RuwFSZEUmDUJwA+yMnqaAfMiyC8En8tiHG0GwI=)
2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: nzgpiC5NFO3V3nVcBmKQWNZmNLyB+jOBtWw1RfrIB+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2055 (0x807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E
Validity
Not Before: Dec 6 20:08:07 2025 GMT
Not After : Dec 13 20:08:07 2025 GMT
Subject: CN=69348d27-418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:53:e5:4e:0c:06:17:c1:bb:4d:50:c0:86:
75:b4:27:d1:0a:54:82:cf:54:0f:03:ce:e6:92:61:
5a:0c:ce:73:68:57:7f:c0:67:3f:19:36:fc:01:ee:
2e:bb:13:e6:c9:0d:02:04:d2:0d:12:c1:19:cd:32:
6d:c3:62:b6:df:be:32:b9:e9:08:cf:d6:fe:e0:06:
87:51:e1:98:b3:bb:09:4e:30:5d:15:5f:39:bb:7b:
e6:e5:ec:9b:ee:88:19:7c:13:5d:11:64:a8:e2:72:
c6:bf:f8:6b:c0:79:a5:8a:a9:c4:37:68:cd:af:71:
cb:4f:66:eb:9a:85:ad:86:20:7b:54:e3:33:7b:4c:
db:a1:ce:3f:48:6a:ee:de:f1:dc:e8:de:11:50:10:
13:2e:81:9a:78:3b:08:61:f2:3e:00:ea:b9:13:39:
08:12:34:8c:b4:cb:4e:a0:ab:a8:dd:64:9c:e2:af:
ed:5d:27:e6:e5:17:64:f3:d6:d7:0c:c1:b4:cc:57:
cc:dc:cc:26:b5:65:00:c1:2a:c7:ed:df:d5:c2:93:
5e:65:24:c7:24:ea:0c:9c:f5:47:1b:99:89:31:35:
f8:0a:a7:fa:2e:56:2b:a4:70:73:07:e2:53:05:02:
92:77:c0:aa:fb:10:30:31:4b:78:29:3c:1c:ab:01:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:DE:35:F3:CC:08:2B:8E:16:32:11:09:85:7F:27:53:A5:D6:E6
X509v3 Authority Key Identifier:
keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ef:b4:01:53:cc:f9:34:0e:bf:da:2a:58:16:c6:02:04:a7:
07:3c:a3:0f:55:0b:bc:51:be:12:8a:a8:79:dd:a1:fb:7a:b8:
b5:0e:a4:b3:3c:c6:1d:f3:bc:e6:ce:3a:b4:9b:f9:4c:84:bf:
0e:9b:84:d1:46:74:b8:6b:f9:24:48:e4:1e:64:99:2a:b4:d7:
c8:ab:1d:f5:e0:00:ad:02:f7:f8:d7:ce:2e:4e:e4:1b:ea:e2:
9b:8a:b2:4c:0b:66:21:92:90:78:43:e3:43:61:9c:73:33:a0:
fc:ef:8d:90:c0:cb:ba:52:69:56:68:a2:2a:3e:bb:0e:b7:9e:
62:34:0b:15:1c:46:7a:ef:5b:05:a8:59:8e:40:64:71:49:b6:
17:4a:41:15:f6:dc:78:7f:9c:e4:3c:8c:63:5b:87:47:51:53:
6b:2d:13:5a:87:5e:78:4f:9e:22:85:79:90:e6:e6:47:fe:78:
44:41:cb:87:4b:39:42:db:49:7c:26:11:4e:69:6c:36:8c:c2:
7b:86:77:0b:c5:65:7b:e7:2b:cc:83:2e:40:81:13:b7:99:5f:
4e:b0:48:ef:ca:ae:72:87:e5:b0:20:0c:98:f2:2a:e8:97:59:
2d:55:ac:b1:4c:ab:22:8b:aa:45:62:79:38:08:a0:ac:47:0d:
1d:62:75:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:51 2025 by rpki-client