This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File: NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier: kMaQTnGz4hSVqXsp2nlVZCuZylsdAGIXTISMGlxojeM=
Subject key identifier: 70:F1:9D:90:12:50:E6:D8:12:AF:35:DA:CB:62:8A:69:4C:74:B9:94
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number: 42
Signing time: Fri 05 Dec 2025 05:18:39 +0000
Manifest this update: Fri 05 Dec 2025 05:18:39 +0000
Manifest next update: Fri 12 Dec 2025 05:18:39 +0000
Files and hashes: 1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: XFmvIclks0u7ocvNCdZZO7yh0v/vBEyUdru23a8MeU4=)
2: A34995A0733611F08B36357EC4F9AE02.roa (hash: 3gyKIBhhVCuLkaaGqX6IUF1yiNlF1HDxwo5W0jFJsGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Validity
Not Before: Dec 5 05:18:39 2025 GMT
Not After : Dec 12 05:18:39 2025 GMT
Subject: CN=69326b2f-4f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:e1:4f:bf:68:bc:e5:78:d7:76:c2:bd:bd:
54:ba:81:86:5b:be:42:7c:4e:95:63:ed:d3:fa:05:
b3:0d:12:55:79:5e:5a:73:e7:5c:e8:ad:e7:2c:c8:
ba:c2:5e:ad:71:29:bb:eb:9e:9c:68:2c:87:96:be:
7c:39:90:ac:3b:5f:08:c1:9f:52:ce:3c:6f:07:6b:
ad:ac:7b:ae:0d:31:7f:96:12:bd:2d:df:09:2c:b1:
89:6c:ca:1c:91:1c:97:9c:67:ca:6b:a8:7e:f5:de:
d2:2a:b1:3b:9b:7a:9f:89:f8:eb:db:2b:de:0a:29:
da:5b:6a:e9:1f:4d:4c:1a:84:8f:e6:3e:46:c2:98:
02:b9:da:89:f5:90:32:5f:51:91:2a:8b:14:7b:02:
20:05:7c:b1:7c:16:74:f3:b2:85:55:ce:e8:a8:ea:
8d:43:69:a1:45:2a:9c:0c:df:ae:a7:5d:4e:7c:24:
49:0e:00:84:1d:7e:a2:f4:d7:47:07:3a:1e:b4:fc:
34:bc:69:7c:fc:8d:02:2a:0a:d3:c7:3c:ae:5d:b9:
6d:07:96:d4:e4:b9:45:70:e5:1d:f7:4d:65:7f:c9:
d1:ab:f6:e5:ae:22:1a:fa:6a:a5:c3:09:74:05:3b:
d6:3b:1e:28:2e:4f:7a:96:f7:1b:0e:b9:80:3f:21:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:9D:90:12:50:E6:D8:12:AF:35:DA:CB:62:8A:69:4C:74:B9:94
X509v3 Authority Key Identifier:
keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:fb:92:06:c7:57:6f:11:db:4f:aa:48:c2:62:70:ce:99:8e:
5e:5f:51:54:5f:22:d7:a5:c4:4f:75:98:c2:91:e3:7d:4c:02:
d2:ef:84:60:be:44:06:36:0b:0f:c1:07:bb:d6:e5:66:67:6c:
71:8d:ed:a0:4f:d2:da:38:24:89:f0:44:9f:6b:7f:57:a3:73:
f6:4f:41:5f:14:8c:81:82:22:92:bd:43:82:73:2f:e8:b8:38:
70:03:0b:62:20:21:51:e7:8b:02:0d:3b:4c:48:e6:f3:b5:d8:
8b:3a:1d:2b:0a:5a:0c:e2:ac:1a:c7:0f:93:31:d0:14:6d:79:
39:22:54:ca:31:59:f8:a5:39:3f:2d:56:ff:5d:e5:a4:d8:31:
1d:6c:2f:2d:d0:4b:9e:92:0a:c8:f4:04:08:7f:f9:cf:c8:6e:
f9:b6:b0:a3:d9:06:89:3a:05:f6:18:03:e8:ad:0a:8a:89:7c:
b2:5c:61:7b:30:24:ba:bf:5c:3e:a7:40:1e:52:28:81:79:8f:
3b:ef:29:78:f0:ad:18:1f:15:4c:5f:5f:ef:14:6d:c8:46:4f:
eb:7e:f0:34:8c:27:74:e8:76:01:8c:96:33:b1:29:07:a1:3b:
f1:9f:81:3b:96:57:be:4c:59:28:4a:46:03:5a:2c:e7:6a:c7:
57:2f:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:10:10 2025 by rpki-client