This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File: veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier: YZwcfboOjePQ5cGa7kCMAxvIPAWY2Fr4cVcc1U21H+0=
Subject key identifier: C3:30:83:B4:A9:D9:EA:0B:6A:8F:E6:EA:95:1F:36:4F:3B:DF:60:2C
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 3503
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number: 34FE
Signing time: Mon 12 Jan 2026 14:29:44 +0000
Manifest this update: Mon 12 Jan 2026 14:29:44 +0000
Manifest next update: Mon 19 Jan 2026 14:29:44 +0000
Files and hashes: 1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: tILsjkc/dCis2AcsahfRab9q4KO+fh4Lgp3ozcc1E6M=)
2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: XN/k67X7bOiLw3XnM0VIfsm36LDpR4F96/be+9LgtSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Jan 2026 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13571 (0x3503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Jan 12 14:29:44 2026 GMT
Not After : Jan 19 14:29:44 2026 GMT
Subject: CN=69650558-5632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:4e:64:0e:c4:ae:62:4e:f1:0d:54:55:0a:
c1:fc:f5:f7:bc:07:13:68:d2:15:fd:69:90:d9:dc:
4f:e7:b5:b4:19:f6:3c:cf:d2:c9:ea:21:af:b4:70:
07:f8:b8:95:21:9c:9c:b1:1a:fd:6a:dc:eb:2d:78:
f5:e5:87:51:05:55:d4:80:d9:cb:3b:30:9f:c6:85:
a4:e3:fb:bb:53:1b:b3:1a:f5:c0:d7:37:17:83:7d:
7d:0c:2c:96:ae:87:83:a8:d6:b0:d7:ff:ef:0f:08:
8e:29:f3:6e:5f:10:3d:37:3d:62:de:af:e6:8f:4b:
3a:52:22:a3:31:32:a7:ab:3d:8b:57:c2:32:43:de:
e5:08:bc:7f:c5:62:ce:a0:f7:8c:da:d3:dd:cb:89:
1d:61:62:2b:88:4a:04:33:a7:b2:c8:82:7f:8c:fb:
31:f2:80:d6:f9:07:85:3b:00:73:6f:31:03:e6:89:
d8:50:7a:13:93:e5:68:cf:f5:d0:9b:f1:c4:83:52:
c9:54:66:5b:c1:07:a5:a8:08:ea:98:ae:87:b5:c9:
eb:cc:14:ae:1d:7f:9e:de:ff:e6:72:cc:83:d9:4a:
74:f4:5c:e3:23:bb:d7:8e:80:1a:3c:9c:78:f4:ed:
2e:33:f1:84:71:85:bf:88:11:5b:3c:c4:d4:eb:e0:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:83:B4:A9:D9:EA:0B:6A:8F:E6:EA:95:1F:36:4F:3B:DF:60:2C
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:c0:79:d3:2a:1b:a8:32:5e:ad:90:32:1e:01:9f:d8:2b:13:
d2:35:8f:53:54:14:c0:40:0c:02:2f:61:4e:ae:78:96:a5:ac:
7f:a8:b0:d3:c7:75:d5:8d:a6:66:c0:96:cd:a6:a8:f9:e7:05:
6f:bb:59:8b:bb:50:09:56:8b:c6:b4:3a:8c:5e:c5:49:93:e3:
5c:c3:c2:84:a6:64:ba:3a:73:f3:da:4e:29:fa:6d:f2:09:93:
f6:06:48:66:e7:cc:0a:6d:a4:4b:b1:ef:db:ae:b5:c8:9a:aa:
74:10:19:8f:df:8a:62:be:f7:e0:79:72:38:eb:4d:8f:66:1f:
a9:a8:88:35:2e:f5:b2:1f:b7:8e:7b:28:e8:d7:33:32:17:71:
df:73:2f:ee:71:87:2b:44:1c:35:e4:0b:ea:2d:4e:12:be:88:
c0:53:c9:47:1f:64:2a:39:a2:4b:71:d8:4d:c6:86:35:23:3d:
f6:63:2a:ab:2c:93:06:75:31:b4:24:e5:a2:bb:20:82:07:00:
48:1d:4d:e5:d1:9c:11:4b:96:fa:ab:38:0b:a2:f8:bc:e9:65:
60:cb:da:5d:1d:27:52:e7:02:e5:c6:84:a1:10:0e:4f:81:9f:
be:6d:03:2e:5b:c2:55:69:3e:c4:94:04:c8:93:fc:b7:28:7f:
78:1b:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:18:30 2026 by rpki-client