This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: 3RXuMNfOI9JFvcPXp+DaK7oyHltDVmD9/UPpob1Nb24= Subject key identifier: BF:F2:53:F8:31:73:21:32:0B:7B:01:33:12:FB:DA:A7:C8:33:4A:A8 Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 3511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 3503 Signing time: Sat 20 Dec 2025 14:56:15 +0000 Manifest this update: Sat 20 Dec 2025 14:56:15 +0000 Manifest next update: Sat 27 Dec 2025 14:56:15 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: kMjth1Ar0H3C/vs4QgK3DoJAdi9kCu9wGqQA70w08Ns=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13585 (0x3511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Dec 20 14:56:15 2025 GMT Not After : Dec 27 14:56:15 2025 GMT Subject: CN=6946b90f-99b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b7:27:f1:e7:f5:99:e8:fa:ed:8e:ee:43:62: c7:3c:78:16:3e:f7:10:cc:15:d3:07:69:2d:49:97: 67:e7:ba:3e:f9:97:5c:e3:10:eb:bf:fe:26:e7:a2: 34:5d:7a:2e:e5:e5:b2:83:15:77:7f:b6:84:d4:95: 19:1e:4b:fb:b6:47:75:70:31:17:aa:bf:1b:6b:5d: a1:42:4e:2b:1a:62:e7:eb:b8:60:a7:59:38:e5:71: 91:11:98:88:e2:34:22:d2:47:32:72:42:4d:b6:fb: 30:40:9f:93:b1:9f:29:fb:76:8e:77:5c:cb:6d:69: d5:f1:1e:5e:34:fe:22:7f:6f:7a:c7:0b:b0:18:c5: cc:e7:67:95:f4:14:c3:db:c9:08:2b:17:4a:05:22: 85:ed:af:ca:98:d2:17:97:aa:13:14:66:4f:be:17: b2:14:54:7d:f3:30:d9:9a:16:7e:41:4b:48:06:b5: 3b:95:ba:d2:d7:9c:08:3e:a6:12:a7:87:d4:32:fa: ff:a7:34:0d:34:d4:ae:70:da:a9:6a:9d:68:ad:b2: 71:4e:ba:aa:48:0a:d9:08:e4:4b:96:9d:00:ab:dc: 4a:83:65:84:ad:03:55:9b:04:63:36:ef:c7:79:24: 71:4d:b0:d9:28:13:e9:b3:ae:a0:1d:92:1e:e1:52: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F2:53:F8:31:73:21:32:0B:7B:01:33:12:FB:DA:A7:C8:33:4A:A8 X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2a:ac:2d:3b:f0:5d:70:8a:dc:e4:32:10:12:5d:a9:4d:eb: d8:bc:bb:10:30:5b:18:b8:b2:2c:3c:83:8d:6c:02:ec:1c:dd: d2:c5:ee:88:fe:97:3c:5e:a5:4a:5a:e7:47:0c:94:d8:46:19: cd:1c:ac:fc:f2:8b:df:3b:93:b8:28:d1:fc:bb:23:fd:b4:c4: bd:a4:27:96:ef:df:a6:4c:cd:04:7c:75:b7:f7:58:5e:e2:47: 11:12:20:15:6e:e0:7b:8d:0e:3c:2b:d6:88:ca:ab:e6:96:50: cd:6a:ed:60:8a:d0:97:b3:b0:ff:a4:df:00:b7:de:5d:7f:f3: 49:c5:e8:82:cd:19:ea:2b:f4:f3:e6:7b:aa:0d:aa:b1:a2:1b: 8d:51:db:c7:0e:b6:ca:09:dd:1d:29:8d:91:45:d9:42:4b:35: 6a:b5:39:b4:ac:a9:0a:a9:cc:77:70:23:c1:85:73:01:dc:56: 64:a4:17:4d:c1:e8:71:fe:eb:db:7a:96:78:59:3d:9d:e7:df: b1:46:14:b6:92:9d:38:be:ef:71:63:d6:91:28:bb:ed:a0:c2: d2:72:8b:42:4c:41:6f:30:0e:d0:cd:1a:b5:a5:80:53:76:e7: d6:a1:6b:02:5b:ee:81:8e:cc:d1:2f:d1:c6:aa:d3:bb:7d:7b: 58:45:c0:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUxMjIwMTQ1NjE1WhcNMjUxMjI3MTQ1NjE1WjAYMRYwFAYD VQQDDA02OTQ2YjkwZi05OWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67cn8ef1mej67Y7uQ2LHPHgWPvcQzBXTB2ktSZdn57o++Zdc4xDrv/4m56I0 XXou5eWygxV3f7aE1JUZHkv7tkd1cDEXqr8ba12hQk4rGmLn67hgp1k45XGREZiI 4jQi0kcyckJNtvswQJ+TsZ8p+3aOd1zLbWnV8R5eNP4if296xwuwGMXM52eV9BTD 28kIKxdKBSKF7a/KmNIXl6oTFGZPvheyFFR98zDZmhZ+QUtIBrU7lbrS15wIPqYS p4fUMvr/pzQNNNSucNqpap1orbJxTrqqSArZCORLlp0Aq9xKg2WErQNVmwRjNu/H eSRxTbDZKBPps66gHZIe4VJqyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/yU/gx cyEyC3sBMxL72qfIM0qoMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvKqwtO/BdcIrc5DIQEl2pTevYvLsQMFsYuLIsPIONbALsHN3Sxe6I /pc8XqVKWudHDJTYRhnNHKz88ovfO5O4KNH8uyP9tMS9pCeW79+mTM0EfHW391he 4kcREiAVbuB7jQ48K9aIyqvmllDNau1gitCXs7D/pN8At95df/NJxeiCzRnqK/Tz 5nuqDaqxohuNUdvHDrbKCd0dKY2RRdlCSzVqtTm0rKkKqcx3cCPBhXMB3FZkpBdN wehx/uvbepZ4WT2d59+xRhS2kp04vu9xY9aRKLvtoMLScotCTEFvMA7QzRq1pYBT dufWoWsCW+6BjszRL9HGqtO7fXtYRcA5 -----END CERTIFICATE-----Generated at Mon Dec 22 06:15:39 2025 by rpki-client