This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft File: NYOZxzbvBV1dWSyrGQFv44FvZgg.mft (raw, json) Hash identifier: T8traFjZrBwbLT6eoPU5wqSLRm9v6c8In6d8tQEk5xM= Subject key identifier: 72:C5:C9:23:EA:1D:F9:BF:7C:C1:BC:FF:87:46:59:BC:73:B9:A5:6F Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Certificate serial: 3512 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft Manifest number: 3504 Signing time: Mon 22 Dec 2025 14:55:29 +0000 Manifest this update: Mon 22 Dec 2025 14:55:28 +0000 Manifest next update: Mon 29 Dec 2025 14:55:28 +0000 Files and hashes: 1: NYOZxzbvBV1dWSyrGQFv44FvZgg.crl (hash: b0WFshNDCFlYzE8FoSPd0UyJ3IhSaXg6fgbhTJ/cZ6w=) 2: 73462B74643C11EB9E7DF918C4F9AE02.roa (hash: OVp7PpV4WrIA8CZ/VZbdyu0UkcIERq8sMNiqxbn0hvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13586 (0x3512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608 Validity Not Before: Dec 22 14:55:28 2025 GMT Not After : Dec 29 14:55:28 2025 GMT Subject: CN=69495be1-3c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:56:da:26:37:5e:74:2e:3b:49:52:e1:3f: f0:08:7d:00:1d:8c:7e:e4:9b:a2:be:3f:ce:6b:a7: 95:7c:ab:b4:35:3a:68:45:af:41:7d:96:f9:f3:e8: 73:ee:b4:da:3e:7a:43:a2:ce:42:a6:e2:a4:50:78: 20:20:89:2a:74:b8:58:16:de:4e:1b:d5:f1:e2:7f: 24:3d:04:a0:58:d1:7c:42:22:9f:09:8d:ee:45:4e: 56:53:18:14:70:89:a0:19:8f:9a:be:f2:9a:ec:59: 1e:fd:60:ea:f3:c0:e9:01:58:54:c9:8c:4a:f4:77: 0d:8b:b0:ad:ec:25:09:78:80:72:31:cf:ef:c6:2e: 4c:8a:99:96:b7:c2:bf:d5:e3:a4:30:89:42:41:00: a6:fe:58:eb:72:02:03:e8:25:57:97:77:10:a6:6f: bc:7f:31:db:70:bb:28:fb:e0:16:51:46:5b:a8:4d: 34:54:d7:32:32:19:67:3e:40:7c:66:68:0c:ff:a4: 62:22:ac:0c:af:04:f0:eb:c7:10:38:a2:e4:21:9c: 21:6c:3d:dc:23:16:83:b3:ee:9d:42:31:70:8d:b2: e2:00:c3:6f:c5:4e:77:aa:e0:e8:cb:aa:ed:89:6a: 60:55:50:fa:ca:39:f0:ba:22:0a:df:0a:2a:67:52: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C5:C9:23:EA:1D:F9:BF:7C:C1:BC:FF:87:46:59:BC:73:B9:A5:6F X509v3 Authority Key Identifier: keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:60:9b:63:2d:d0:11:5a:09:88:c2:63:3a:3e:b7:dc:69:65: 3d:cd:a8:83:54:9d:cd:23:1b:83:29:00:24:26:b9:78:ff:b0: d8:40:4c:91:a2:0a:56:2c:ae:9e:2d:4c:b9:6c:86:ed:30:28: 2a:a7:15:7a:92:d0:cf:c1:ab:fd:f6:29:f5:aa:38:2c:07:c6: 96:05:0f:72:1f:65:56:19:ea:97:9c:c2:86:51:2f:f6:36:16: d7:d0:f8:41:39:6f:96:7b:0d:cd:3b:e8:38:69:43:1a:b8:be: 9a:e9:06:3b:a8:ca:e5:f9:53:66:f1:9c:cb:55:f0:80:23:80: 17:1f:6b:6e:61:5e:df:e5:e3:3b:74:da:84:cb:d1:a2:84:97: 6e:51:56:2e:63:48:6b:2b:52:fa:13:fc:51:0d:10:cf:ff:e1: bf:b9:2b:0f:15:f8:6a:a5:c6:10:f6:93:3c:bb:12:d9:57:79: 6a:b3:ac:3c:54:4a:1b:27:c6:33:e7:f6:10:9c:45:03:72:7f: 40:d8:7a:e8:9b:91:6a:97:68:bc:c5:0f:db:85:a1:52:90:4d: 0a:1d:bf:f3:9c:85:8d:fe:d9:4a:f2:6e:e7:58:b6:e9:e9:dc: 6c:37:6f:bc:d0:01:e0:ca:3f:2c:d8:c2:f5:10:c7:b9:88:18: a5:0f:5c:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxOUExMTAvBgNVBAUTKDM1ODM5OUM3MzZFRjA1NUQ1RDU5MkNBQjE5MDE2RkUz ODE2RjY2MDgwHhcNMjUxMjIyMTQ1NTI4WhcNMjUxMjI5MTQ1NTI4WjAYMRYwFAYD VQQDDA02OTQ5NWJlMS0zYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00VW2iY3XnQuO0lS4T/wCH0AHYx+5Juivj/Oa6eVfKu0NTpoRa9BfZb58+hz 7rTaPnpDos5CpuKkUHggIIkqdLhYFt5OG9Xx4n8kPQSgWNF8QiKfCY3uRU5WUxgU cImgGY+avvKa7Fke/WDq88DpAVhUyYxK9HcNi7Ct7CUJeIByMc/vxi5MipmWt8K/ 1eOkMIlCQQCm/ljrcgID6CVXl3cQpm+8fzHbcLso++AWUUZbqE00VNcyMhlnPkB8 ZmgM/6RiIqwMrwTw68cQOKLkIZwhbD3cIxaDs+6dQjFwjbLiAMNvxU53quDoy6rt iWpgVVD6yjnwuiIK3woqZ1LkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLFySPq Hfm/fMG8/4dGWbxzuaVvMB8GA1UdIwQYMBaAFDWDmcc27wVdXVksqxkBb+OBb2YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE5QS82M0VBMjA5MjFE OUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJWMWRXU3lyR1FGdjQ0RnZa Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05ZT1p4emJ2QlYxZFdTeXJHUUZ2NDRGdlpnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE5QS82M0VBMjA5MjFEOUUxMUUyQURCNzNGOEUwOEIwMkNEMi9OWU9aeHpidkJW MWRXU3lyR1FGdjQ0RnZaZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAYJtjLdARWgmIwmM6PrfcaWU9zaiDVJ3NIxuDKQAkJrl4/7DYQEyR ogpWLK6eLUy5bIbtMCgqpxV6ktDPwav99in1qjgsB8aWBQ9yH2VWGeqXnMKGUS/2 NhbX0PhBOW+Wew3NO+g4aUMauL6a6QY7qMrl+VNm8ZzLVfCAI4AXH2tuYV7f5eM7 dNqEy9GihJduUVYuY0hrK1L6E/xRDRDP/+G/uSsPFfhqpcYQ9pM8uxLZV3lqs6w8 VEobJ8Yz5/YQnEUDcn9A2Hrom5Fql2i8xQ/bhaFSkE0KHb/znIWN/tlK8m7nWLbp 6dxsN2+80AHgyj8s2ML1EMe5iBilD1yC -----END CERTIFICATE-----Generated at Mon Dec 22 18:04:24 2025 by rpki-client