This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: t4gUS99GTqXxz0TeOXreqaNy9qwp+FS4Y+DhUIQ4b8I=
Subject key identifier: C6:61:F4:B8:3A:5D:F3:79:9E:45:FC:80:73:09:85:50:68:E5:3C:CB
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 16F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 16DF
Signing time: Sat 06 Dec 2025 15:21:02 +0000
Manifest this update: Sat 06 Dec 2025 15:21:01 +0000
Manifest next update: Sat 13 Dec 2025 15:21:01 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: ZNxNg+VKpMjLPG21L97lcRXJO2Hm74tNCI6/IfUdnRQ=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: m9UGAfVu3orq8z+5jB4PFKlaJ9lxwAP7J6rRfrsg14M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5875 (0x16f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Dec 6 15:21:01 2025 GMT
Not After : Dec 13 15:21:01 2025 GMT
Subject: CN=693449de-1476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:f3:69:e4:4b:eb:06:de:26:84:9f:df:70:
f6:54:e7:60:2e:3c:7e:53:4f:11:ab:ae:85:8d:83:
6b:35:5e:10:3c:ae:b1:37:a4:d1:fd:9a:02:fa:2c:
76:a4:00:f4:9a:bb:b2:3e:3d:7d:76:40:20:8b:7c:
c5:c0:53:6b:66:88:38:e1:67:a5:99:48:b6:a7:5e:
6c:0a:ee:5d:65:ed:f9:6b:9f:99:db:7d:72:12:1a:
81:db:cf:80:4a:41:6a:e6:d7:54:81:1a:08:93:e6:
a4:ae:33:ac:35:52:42:6b:29:d2:78:22:05:ce:84:
88:92:8c:09:5e:1e:17:06:c3:e0:6b:c8:d3:63:15:
d7:eb:9b:a6:61:8e:47:0a:57:4a:77:d6:0c:ff:3c:
c5:56:eb:80:fe:51:1e:60:89:ea:46:a1:a2:f7:22:
d4:84:98:19:a4:49:91:3f:05:6c:2d:c1:97:09:3c:
21:b2:32:46:59:7d:e3:29:f6:b1:85:de:19:e5:a9:
e9:d4:a4:54:d4:89:9e:2d:35:48:17:99:5e:d3:90:
0d:f4:90:c8:5d:73:00:b4:f1:5a:0b:1f:84:e9:07:
4b:0d:15:e9:8d:0e:3f:6d:b9:f4:16:a3:9b:86:21:
a3:ec:15:26:4d:c6:5c:9a:26:44:e3:4c:33:c4:af:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:61:F4:B8:3A:5D:F3:79:9E:45:FC:80:73:09:85:50:68:E5:3C:CB
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:4e:f5:57:5f:d3:19:29:7f:d8:db:8c:82:0f:f6:97:06:
62:3b:16:5c:63:16:c1:bf:68:52:31:c6:e6:ed:00:a1:87:e2:
51:d1:d9:be:21:26:18:ea:cd:52:1a:9c:7d:e9:bf:f7:11:31:
f7:21:2c:2f:4a:46:63:92:ca:b6:db:cb:ba:7a:9b:f5:5b:2f:
e8:19:d2:7a:59:c9:2f:65:b3:70:63:ba:aa:70:61:5d:bf:71:
97:bb:ec:7f:fe:cb:68:c9:c9:f7:e8:ab:95:cf:ec:c5:84:ed:
e4:4d:51:02:f9:53:3f:f6:fe:26:86:05:61:0d:39:17:92:3c:
2e:ae:2d:4a:21:5a:3d:6b:60:36:55:52:51:c7:70:13:9b:05:
70:b3:3a:b3:11:d2:35:00:74:16:eb:e0:03:a7:3c:ad:f8:41:
ad:6c:cd:1c:b5:0c:15:29:bd:6c:b0:ed:24:12:d6:75:8a:24:
9d:3f:4d:17:21:04:a9:4d:f8:eb:59:9f:16:f8:e6:47:bb:e7:
11:97:60:cb:de:9a:71:f4:d8:bd:a8:dc:49:bd:ae:68:a5:59:
48:76:ed:00:c5:a3:80:dc:24:73:ef:a4:bb:a3:a3:37:73:28:
cc:ee:86:59:04:4b:99:7a:2a:58:10:4a:d1:74:14:da:c6:49:
ec:c1:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:45:28 2025 by rpki-client