This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: 1xVHAzVJAfaKBff73VMvAsd4qe7VeMYLK8a6dNSkzaE=
Subject key identifier: 2E:CA:C4:86:E7:30:7A:13:63:FB:96:24:C8:B5:37:4C:8E:00:4A:DC
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 170C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 16F8
Signing time: Sat 24 Jan 2026 15:25:20 +0000
Manifest this update: Sat 24 Jan 2026 15:25:19 +0000
Manifest next update: Sat 31 Jan 2026 15:25:19 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: slLk8xoq6JptTjimcAnhyhbcbOGOP8STLdziNcRh5Fs=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: m9UGAfVu3orq8z+5jB4PFKlaJ9lxwAP7J6rRfrsg14M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5900 (0x170c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Jan 24 15:25:19 2026 GMT
Not After : Jan 31 15:25:19 2026 GMT
Subject: CN=6974e460-82c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:a5:c4:64:a3:2e:a3:99:fd:70:32:4e:56:
8b:a8:4e:18:b1:96:68:c4:d5:f9:98:f1:6e:79:0e:
c8:d7:b2:96:90:16:44:74:93:66:c7:a8:c1:07:cd:
f5:18:82:c4:89:8a:ba:d5:62:ff:18:34:e8:fe:9a:
97:2a:2b:cf:cb:2c:79:fa:44:d4:9b:05:31:3f:79:
8a:88:4a:3b:89:7f:76:21:9d:82:3b:4c:8c:20:ca:
7c:e0:39:64:9f:0d:4c:ff:1a:1f:1c:06:b2:90:9c:
24:3d:5f:a9:2e:8c:b8:30:c7:e0:b0:61:0c:52:45:
b4:46:d1:8d:c8:50:bd:ca:20:b9:a8:a7:f3:1d:50:
bc:62:27:c7:24:69:ca:7e:53:bc:ba:db:f1:2d:a5:
e7:a4:04:d3:57:d2:07:08:7d:08:d3:90:50:59:66:
1d:d4:2f:62:5c:cb:32:77:0e:2f:91:ce:d9:25:31:
00:90:11:83:67:63:13:ab:12:e5:78:1c:63:8b:81:
4c:74:b6:79:95:01:03:78:21:80:23:10:90:e0:38:
d4:ac:3b:33:78:18:6d:0a:34:aa:8e:43:37:7f:ee:
4f:51:78:b4:5e:6a:9f:21:9a:03:71:07:31:73:57:
7f:00:b9:0f:7c:ea:95:c6:bf:a1:47:16:24:bc:4f:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CA:C4:86:E7:30:7A:13:63:FB:96:24:C8:B5:37:4C:8E:00:4A:DC
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:19:7b:aa:95:0a:f9:0a:2f:ad:a4:77:28:46:ae:76:21:26:
82:20:19:7e:85:c2:fe:5b:1c:92:9e:07:cb:a9:64:13:d9:ff:
22:de:99:69:5e:bf:f4:dd:19:9d:c0:5f:bb:e8:b5:14:bf:f1:
18:7c:f0:c7:bb:0f:68:cb:61:13:8d:43:bf:a9:13:cd:6c:3e:
c3:c0:fc:01:3a:2f:c0:5b:23:7e:f6:51:f3:5b:c8:eb:a0:a4:
38:7d:b9:54:4c:b5:e4:1a:f7:35:99:22:4b:ac:6b:b3:34:c7:
17:92:c2:69:12:a0:ae:05:bf:89:29:54:5d:c1:08:56:37:bc:
40:64:42:b6:1f:18:7b:53:a1:3c:de:49:fa:b1:c0:a9:ea:7f:
c2:4f:2c:8c:bc:60:f7:b6:28:35:ae:60:9d:d9:77:61:df:df:
33:3a:0b:a1:42:50:ba:cc:e0:06:34:e3:7e:f4:42:27:fe:9b:
93:fd:65:21:4a:91:94:d1:21:1a:cb:b9:ff:8d:7f:be:f8:2d:
e6:34:fb:4f:43:0e:9e:24:08:3c:3f:f0:c3:22:64:06:fe:6f:
fa:7e:44:0e:63:bb:0f:3d:f4:b7:06:80:b4:bd:47:d2:43:e9:
af:63:3b:2c:78:36:29:35:84:b8:d1:44:da:54:07:8b:38:e6:
6f:be:89:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC
RjM5QUI2RTgwHhcNMjYwMTI0MTUyNTE5WhcNMjYwMTMxMTUyNTE5WjAYMRYwFAYD
VQQDDA02OTc0ZTQ2MC04MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArP6lxGSjLqOZ/XAyTlaLqE4YsZZoxNX5mPFueQ7I17KWkBZEdJNmx6jBB831
GILEiYq61WL/GDTo/pqXKivPyyx5+kTUmwUxP3mKiEo7iX92IZ2CO0yMIMp84Dlk
nw1M/xofHAaykJwkPV+pLoy4MMfgsGEMUkW0RtGNyFC9yiC5qKfzHVC8YifHJGnK
flO8utvxLaXnpATTV9IHCH0I05BQWWYd1C9iXMsydw4vkc7ZJTEAkBGDZ2MTqxLl
eBxji4FMdLZ5lQEDeCGAIxCQ4DjUrDszeBhtCjSqjkM3f+5PUXi0XmqfIZoDcQcx
c1d/ALkPfOqVxr+hRxYkvE9OCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7KxIbn
MHoTY/uWJMi1N0yOAErcMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3
MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK
XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9GXuqlQr5Ci+tpHcoRq52ISaCIBl+hcL+WxySngfLqWQT2f8i3plp
Xr/03RmdwF+76LUUv/EYfPDHuw9oy2ETjUO/qRPNbD7DwPwBOi/AWyN+9lHzW8jr
oKQ4fblUTLXkGvc1mSJLrGuzNMcXksJpEqCuBb+JKVRdwQhWN7xAZEK2Hxh7U6E8
3kn6scCp6n/CTyyMvGD3tig1rmCd2Xdh398zOguhQlC6zOAGNON+9EIn/puT/WUh
SpGU0SEay7n/jX+++C3mNPtPQw6eJAg8P/DDImQG/m/6fkQOY7sPPfS3BoC0vUfS
Q+mvYzsseDYpNYS40UTaVAeLOOZvvon3
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:01 2026 by rpki-client