This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: 0u3Vfp6NzmCkVMPoU8AgOfBeXmuP7mF4vQHpOJ26b+k= Subject key identifier: 34:C2:1B:DD:FD:42:82:37:D9:A8:D6:7C:EE:62:1D:C1:8E:A6:9D:CD Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 350A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 34FC Signing time: Sat 06 Dec 2025 14:53:50 +0000 Manifest this update: Sat 06 Dec 2025 14:53:49 +0000 Manifest next update: Sat 13 Dec 2025 14:53:49 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: 5dWX+FONvQrqoGZTdEUtdQ/4qEYzwjOcHZZj6m8bQqE=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13578 (0x350a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Dec 6 14:53:49 2025 GMT Not After : Dec 13 14:53:49 2025 GMT Subject: CN=6934437e-4282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:3b:01:0e:37:1f:84:34:10:0f:d4:90:e2: df:d2:c1:f2:01:4c:3a:6c:4e:dd:08:10:d1:5c:39: 18:af:e7:8b:cc:09:a4:e8:80:da:e8:f7:ee:d6:9a: ef:e3:9d:53:41:0c:3c:e4:cc:b2:79:fc:a0:5d:4c: 6d:a6:34:41:8b:cf:ff:93:c6:72:89:4b:76:99:dc: 99:3c:97:78:d9:75:4d:a0:07:97:54:b0:39:71:b1: a1:1e:5f:a7:f1:6e:8a:a8:ff:2e:33:79:d0:03:e7: d5:f0:a2:43:1e:b1:08:c1:b5:94:39:0c:24:ac:73: 61:26:1c:74:05:1a:06:98:76:58:1e:f6:80:19:01: ff:31:2e:43:4a:c9:b1:0d:fa:99:3f:1f:4e:a1:07: 5d:6c:82:03:25:09:11:24:04:1f:1e:2e:a1:12:e0: 84:11:c5:45:9f:51:80:d0:2d:0e:e5:9d:5f:40:ef: 42:e4:6d:1c:35:11:49:61:b1:c3:9b:f8:46:8c:2a: 05:84:2d:4b:c0:41:15:36:8e:fd:b6:4c:75:28:d9: 3e:1a:c2:07:7c:f5:e9:84:e8:8b:f8:6e:53:04:76: 2c:9a:0b:41:d0:11:68:e3:c0:7d:8d:ff:70:bf:4e: 64:19:ad:e7:1d:9e:02:d7:54:7d:fe:31:df:70:6c: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C2:1B:DD:FD:42:82:37:D9:A8:D6:7C:EE:62:1D:C1:8E:A6:9D:CD X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ca:de:87:67:cf:d8:77:d4:26:21:fa:8a:35:48:62:c4:f9: c4:12:06:e0:59:7c:ea:b7:1a:7a:72:c3:4e:a0:64:46:a7:44: 41:ea:63:41:2e:7c:14:c1:e7:45:70:c6:42:63:2b:9e:df:bc: 01:71:f1:e6:dd:61:30:5d:cc:ec:8d:32:9d:03:2b:6c:99:6d: 78:64:00:0b:0a:09:e8:09:04:47:49:c5:3a:98:06:94:b0:52: 4c:46:c7:06:62:d6:9e:be:66:ff:38:d8:ab:c6:8b:39:aa:2a: 88:88:26:3d:19:96:29:26:40:a3:88:22:a9:d6:fa:71:3d:6a: fb:9c:0e:00:3d:23:b9:f2:69:bb:ee:13:31:67:4e:cd:3b:bf: 3d:68:49:11:13:94:2e:10:b1:9e:31:28:72:40:d5:0d:07:6d: e7:cd:44:2f:4f:78:b5:70:71:e2:3e:de:2a:10:6b:eb:5e:80: 12:bb:1f:46:08:69:97:c9:25:cd:b2:09:e8:aa:34:8c:e7:b0: 49:7e:7a:d0:94:07:3a:6c:ce:24:5f:ee:32:d2:2c:92:45:a2: 3c:e5:51:78:8e:c2:df:de:2e:d5:15:f6:db:d0:1b:d7:fa:3b: 0f:46:93:1a:e2:cf:0a:55:81:22:fb:e0:a0:0c:a8:60:ab:c9: b2:33:1f:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUxMjA2MTQ1MzQ5WhcNMjUxMjEzMTQ1MzQ5WjAYMRYwFAYD VQQDEw02OTM0NDM3ZS00MjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXw7AQ43H4Q0EA/UkOLf0sHyAUw6bE7dCBDRXDkYr+eLzAmk6IDa6Pfu1prv 451TQQw85MyyefygXUxtpjRBi8//k8ZyiUt2mdyZPJd42XVNoAeXVLA5cbGhHl+n 8W6KqP8uM3nQA+fV8KJDHrEIwbWUOQwkrHNhJhx0BRoGmHZYHvaAGQH/MS5DSsmx DfqZPx9OoQddbIIDJQkRJAQfHi6hEuCEEcVFn1GA0C0O5Z1fQO9C5G0cNRFJYbHD m/hGjCoFhC1LwEEVNo79tkx1KNk+GsIHfPXphOiL+G5TBHYsmgtB0BFo48B9jf9w v05kGa3nHZ4C11R9/jHfcGzcAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTCG939 QoI32ajWfO5iHcGOpp3NMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIyt6HZ8/Yd9QmIfqKNUhixPnEEgbgWXzqtxp6csNOoGRGp0RB6mNB LnwUwedFcMZCYyue37wBcfHm3WEwXczsjTKdAytsmW14ZAALCgnoCQRHScU6mAaU sFJMRscGYtaevmb/ONirxos5qiqIiCY9GZYpJkCjiCKp1vpxPWr7nA4APSO58mm7 7hMxZ07NO789aEkRE5QuELGeMShyQNUNB23nzUQvT3i1cHHiPt4qEGvrXoASux9G CGmXySXNsgnoqjSM57BJfnrQlAc6bM4kX+4y0iySRaI85VF4jsLf3i7VFfbb0BvX +jsPRpMa4s8KVYEi++CgDKhgq8myMx8u -----END CERTIFICATE-----Generated at Sun Dec 7 03:39:36 2025 by rpki-client