This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
File:                     NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft (raw, json)
Hash identifier:          uecCPYFARCq2GP1nKu/i4vatwLj4+kqoEyvAc4+S470=
Subject key identifier:   24:3C:61:F3:D6:59:42:AD:0C:7F:37:7F:96:29:1E:A8:C4:00:F8:39
Authority key identifier: 34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E
Certificate issuer:       /CN=A917F4D6/serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
Manifest number:          19
Signing time:             Fri 05 Dec 2025 05:39:09 +0000
Manifest this update:     Fri 05 Dec 2025 05:39:09 +0000
Manifest next update:     Fri 12 Dec 2025 05:39:09 +0000
Files and hashes:         1: NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl (hash: m31clgbMWjwjmkW7MGRTecZh0Iy+T6ETqoRFXSwqB3g=)
                          2: 16AF3BB6AD5311F0BF38B65BC4F9AE02.roa (hash: hkkEwa4bCfKDvdkYx3RtKtxGG8ZZ2JRfkwu5rugA92s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl
                          rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 05:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F4D6, serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
        Validity
            Not Before: Dec  5 05:39:09 2025 GMT
            Not After : Dec 12 05:39:09 2025 GMT
        Subject: CN=69326ffd-f79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:ff:21:c3:c8:27:07:28:59:42:d9:a6:45:
                    2d:88:8d:4f:54:f8:4c:ec:e2:92:ff:86:05:ff:79:
                    94:95:89:3f:33:d7:85:97:17:43:8a:0a:71:41:63:
                    a5:90:a8:20:d5:1a:28:61:50:65:03:87:88:15:54:
                    d9:1c:70:ed:4b:31:38:1d:d2:e3:c0:a6:1b:5b:be:
                    84:2c:cb:0a:a2:0f:c9:5b:71:26:dd:a7:92:3d:7e:
                    fa:97:ad:96:b4:a8:29:3e:ba:e9:bc:95:6d:43:cd:
                    38:11:6a:c1:15:b2:de:18:49:1c:70:92:a8:b3:8f:
                    17:3f:11:88:7c:81:7f:87:c8:2d:97:ba:ef:f0:30:
                    12:e5:3a:60:d9:79:99:4e:b4:5e:7e:a1:b9:28:06:
                    24:91:40:1b:c8:35:17:20:03:74:16:5e:78:3a:8c:
                    b4:2e:ec:a2:be:65:be:5b:89:74:37:5a:9c:ce:54:
                    bb:9a:e6:f3:e2:dd:76:f8:cf:02:e5:80:b0:8a:36:
                    26:2e:4f:57:f1:39:1a:35:3d:19:f3:dd:15:6f:db:
                    43:37:3a:59:e4:4d:7a:f4:2b:0d:0f:1e:d8:d8:60:
                    a6:d9:46:d8:52:f0:a0:d1:fb:85:ae:55:b9:fc:7c:
                    63:a3:b4:42:bf:40:ba:c2:29:a9:00:81:90:a4:aa:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3C:61:F3:D6:59:42:AD:0C:7F:37:7F:96:29:1E:A8:C4:00:F8:39
            X509v3 Authority Key Identifier:
                keyid:34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:55:00:d9:a1:15:46:3e:cb:ee:72:d9:fc:38:82:b6:17:27:
         38:eb:90:45:50:11:a6:11:ee:4e:4d:47:bc:00:05:4a:70:b1:
         31:6e:1d:f7:ad:1f:39:88:71:59:53:3c:91:da:ea:0e:9d:d0:
         e8:66:b2:b9:02:47:b8:7b:08:77:a0:c9:c5:8c:31:36:1f:da:
         6d:d9:ae:4c:58:2b:8c:58:06:a4:91:62:21:93:b9:41:3a:95:
         77:03:a9:2f:8f:94:ae:9a:20:d2:d0:48:91:35:70:8d:a7:11:
         b7:d3:1d:da:dc:ed:a9:5c:9b:95:16:e6:69:f7:e8:66:b3:32:
         1f:6c:2e:78:59:74:4b:18:5e:f4:34:8d:e9:f3:ea:f3:c5:9e:
         a5:af:32:3b:c6:7f:8b:b3:9c:ff:0d:41:99:9d:12:9c:b6:fa:
         d3:ca:4f:33:e8:64:55:bc:4f:43:e9:f5:7b:a8:f5:cd:94:80:
         9c:ab:8d:71:7f:1a:5f:d6:0c:ab:53:e0:67:23:4e:6d:9e:b1:
         e1:c6:36:f6:c8:a5:23:5a:3a:fd:4f:2e:ae:cc:4e:6c:a4:56:
         ff:4e:58:46:0e:e2:8b:d1:d9:77:c3:42:78:b6:cf:e7:38:ea:
         f6:6e:35:dd:e7:cb:2d:14:bc:ac:d5:3b:e9:1f:3d:b3:c2:8e:
         0d:18:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:28 2025 by rpki-client