This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
File:                     NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json)
Hash identifier:          8ccVYNpDKg52N828apSn5qH3qhtSI8j7++aBDuAmz4E=
Subject key identifier:   77:89:EB:85:E6:A1:89:FB:1E:A6:8E:31:27:11:89:6F:D7:20:71:06
Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B
Certificate issuer:       /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
Manifest number:          4B
Signing time:             Tue 23 Dec 2025 06:13:59 +0000
Manifest this update:     Tue 23 Dec 2025 06:13:58 +0000
Manifest next update:     Tue 30 Dec 2025 06:13:58 +0000
Files and hashes:         1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: Gkyo2EcFs+2XO02OM+kpEWuZjdwXuruW1fwVZStDwT8=)
                          2: A34995A0733611F08B36357EC4F9AE02.roa (hash: 3gyKIBhhVCuLkaaGqX6IUF1yiNlF1HDxwo5W0jFJsGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl
                          rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Dec 2025 06:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B
        Validity
            Not Before: Dec 23 06:13:58 2025 GMT
            Not After : Dec 30 06:13:58 2025 GMT
        Subject: CN=694a3326-c753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:48:35:7b:d7:85:0e:fe:17:5d:e8:d1:8e:
                    6d:e0:27:63:c4:25:74:fd:85:62:15:a4:6a:af:e9:
                    7a:13:88:17:6f:f8:34:38:ce:95:30:01:56:7d:6c:
                    c6:e0:0b:d3:f4:1a:31:f2:43:ed:54:66:79:88:b5:
                    99:5d:93:2d:d3:79:0c:83:4c:41:e6:ae:61:94:b0:
                    2a:95:f9:db:f5:fa:26:33:01:df:b8:ee:36:79:38:
                    4d:bf:a1:95:d3:2b:e2:06:67:cf:3f:5e:a8:c8:ab:
                    b3:75:e6:1c:2b:ba:64:a1:d5:e0:e5:99:08:43:0f:
                    32:f4:df:a8:81:11:fa:d9:d1:fc:a0:81:49:09:1b:
                    03:0f:cf:55:93:1c:0c:ad:c6:c4:2a:3c:dd:6a:a1:
                    e1:c9:83:d8:fa:08:af:f7:f7:24:f9:a2:fe:b8:25:
                    52:a8:a4:27:2a:2b:fd:98:04:2d:41:3b:64:8b:c7:
                    64:7d:54:7d:c4:1b:06:0f:7e:37:60:0d:71:19:ef:
                    fc:fd:1e:f2:37:67:a9:3a:c6:d7:30:6a:09:89:e5:
                    0c:a8:41:2f:8d:6e:e9:c3:5c:fb:1a:31:1e:e7:96:
                    4c:ad:8d:7b:9b:fc:3d:37:9c:f5:2d:14:b6:e0:98:
                    25:d1:90:4e:f0:02:02:d0:89:6a:54:28:33:1f:94:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:89:EB:85:E6:A1:89:FB:1E:A6:8E:31:27:11:89:6F:D7:20:71:06
            X509v3 Authority Key Identifier:
                keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:e0:0e:d7:15:26:7b:5e:93:2d:73:8f:ee:2b:58:97:6f:
         7a:ff:fc:00:10:95:33:f0:07:dd:e7:61:53:db:1d:ea:03:0a:
         e9:f3:fc:00:a7:bb:d4:3a:72:e6:f6:98:13:95:1c:d5:e7:5b:
         9a:4c:e3:3c:c9:cf:19:26:c2:f3:97:dd:a7:79:2a:a1:c1:d2:
         0a:8a:7a:53:ac:d9:5c:65:23:a2:d1:b7:00:a2:8d:de:61:c1:
         d7:be:86:09:42:e7:ab:6e:75:92:8d:4e:a6:2d:03:95:96:05:
         ba:9c:fd:a4:c6:14:da:3b:64:7f:44:cc:57:73:98:63:68:81:
         d2:3d:6c:62:cf:9b:2a:3c:a0:39:9f:68:4c:36:99:2b:f4:83:
         fc:ca:d5:23:36:78:3d:a3:4d:cb:a4:48:06:32:7a:52:a8:21:
         72:85:ff:65:38:24:19:00:c2:7b:fb:ab:9b:88:09:88:04:a9:
         30:9a:b8:f6:80:fe:91:73:41:eb:69:3b:f1:22:14:16:72:a1:
         10:49:11:35:79:c4:1a:9a:b4:34:e1:b5:7c:86:b8:9e:9b:3f:
         93:99:6e:70:f5:a3:37:9d:71:76:18:7b:d6:de:6e:a4:8f:f4:
         90:74:18:15:25:d1:48:c0:84:96:59:0b:7e:b6:9d:70:59:53:
         f5:3b:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:11 2025 by rpki-client