This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File:                     NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier:          kMaQTnGz4hSVqXsp2nlVZCuZylsdAGIXTISMGlxojeM=
Subject key identifier:   70:F1:9D:90:12:50:E6:D8:12:AF:35:DA:CB:62:8A:69:4C:74:B9:94
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number:          42
Signing time:             Fri 05 Dec 2025 05:18:39 +0000
Manifest this update:     Fri 05 Dec 2025 05:18:39 +0000
Manifest next update:     Fri 12 Dec 2025 05:18:39 +0000
Files and hashes:         1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: XFmvIclks0u7ocvNCdZZO7yh0v/vBEyUdru23a8MeU4=)
                          2: A34995A0733611F08B36357EC4F9AE02.roa (hash: 3gyKIBhhVCuLkaaGqX6IUF1yiNlF1HDxwo5W0jFJsGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Dec  5 05:18:39 2025 GMT
            Not After : Dec 12 05:18:39 2025 GMT
        Subject: CN=69326b2f-4f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:e1:4f:bf:68:bc:e5:78:d7:76:c2:bd:bd:
                    54:ba:81:86:5b:be:42:7c:4e:95:63:ed:d3:fa:05:
                    b3:0d:12:55:79:5e:5a:73:e7:5c:e8:ad:e7:2c:c8:
                    ba:c2:5e:ad:71:29:bb:eb:9e:9c:68:2c:87:96:be:
                    7c:39:90:ac:3b:5f:08:c1:9f:52:ce:3c:6f:07:6b:
                    ad:ac:7b:ae:0d:31:7f:96:12:bd:2d:df:09:2c:b1:
                    89:6c:ca:1c:91:1c:97:9c:67:ca:6b:a8:7e:f5:de:
                    d2:2a:b1:3b:9b:7a:9f:89:f8:eb:db:2b:de:0a:29:
                    da:5b:6a:e9:1f:4d:4c:1a:84:8f:e6:3e:46:c2:98:
                    02:b9:da:89:f5:90:32:5f:51:91:2a:8b:14:7b:02:
                    20:05:7c:b1:7c:16:74:f3:b2:85:55:ce:e8:a8:ea:
                    8d:43:69:a1:45:2a:9c:0c:df:ae:a7:5d:4e:7c:24:
                    49:0e:00:84:1d:7e:a2:f4:d7:47:07:3a:1e:b4:fc:
                    34:bc:69:7c:fc:8d:02:2a:0a:d3:c7:3c:ae:5d:b9:
                    6d:07:96:d4:e4:b9:45:70:e5:1d:f7:4d:65:7f:c9:
                    d1:ab:f6:e5:ae:22:1a:fa:6a:a5:c3:09:74:05:3b:
                    d6:3b:1e:28:2e:4f:7a:96:f7:1b:0e:b9:80:3f:21:
                    d0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:9D:90:12:50:E6:D8:12:AF:35:DA:CB:62:8A:69:4C:74:B9:94
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:92:06:c7:57:6f:11:db:4f:aa:48:c2:62:70:ce:99:8e:
         5e:5f:51:54:5f:22:d7:a5:c4:4f:75:98:c2:91:e3:7d:4c:02:
         d2:ef:84:60:be:44:06:36:0b:0f:c1:07:bb:d6:e5:66:67:6c:
         71:8d:ed:a0:4f:d2:da:38:24:89:f0:44:9f:6b:7f:57:a3:73:
         f6:4f:41:5f:14:8c:81:82:22:92:bd:43:82:73:2f:e8:b8:38:
         70:03:0b:62:20:21:51:e7:8b:02:0d:3b:4c:48:e6:f3:b5:d8:
         8b:3a:1d:2b:0a:5a:0c:e2:ac:1a:c7:0f:93:31:d0:14:6d:79:
         39:22:54:ca:31:59:f8:a5:39:3f:2d:56:ff:5d:e5:a4:d8:31:
         1d:6c:2f:2d:d0:4b:9e:92:0a:c8:f4:04:08:7f:f9:cf:c8:6e:
         f9:b6:b0:a3:d9:06:89:3a:05:f6:18:03:e8:ad:0a:8a:89:7c:
         b2:5c:61:7b:30:24:ba:bf:5c:3e:a7:40:1e:52:28:81:79:8f:
         3b:ef:29:78:f0:ad:18:1f:15:4c:5f:5f:ef:14:6d:c8:46:4f:
         eb:7e:f0:34:8c:27:74:e8:76:01:8c:96:33:b1:29:07:a1:3b:
         f1:9f:81:3b:96:57:be:4c:59:28:4a:46:03:5a:2c:e7:6a:c7:
         57:2f:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:10:10 2025 by rpki-client