This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: 1MW/DxF/YwYeBGcJnA/CHrm+YEmwBud//xjqBwNhWqg=
Subject key identifier: B2:EC:E0:C9:5B:07:9F:06:79:54:DB:1C:A9:5D:5C:7E:5D:27:F8:AC
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 16F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 16E5
Signing time: Thu 18 Dec 2025 15:30:40 +0000
Manifest this update: Thu 18 Dec 2025 15:30:39 +0000
Manifest next update: Thu 25 Dec 2025 15:30:39 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: nmVyF5W4OU5r1bwfuhJyeAsEHremK2/+6UGgC2p/mx0=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: m9UGAfVu3orq8z+5jB4PFKlaJ9lxwAP7J6rRfrsg14M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5881 (0x16f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Dec 18 15:30:39 2025 GMT
Not After : Dec 25 15:30:39 2025 GMT
Subject: CN=69441e20-bc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:66:92:70:05:8d:a3:3d:31:12:37:6f:98:
5c:ed:e9:16:c0:0e:9a:7f:2d:75:48:a9:9c:ed:60:
ff:e6:a8:f8:f7:29:72:21:ee:5a:4f:db:99:8b:6f:
a9:3e:23:c7:b5:ec:fb:83:99:16:8e:e6:47:f4:d8:
25:3b:53:bf:67:fd:82:0d:4a:58:a5:2d:88:a3:e2:
be:4f:35:d2:7e:49:c2:df:9a:4c:28:5f:16:fc:0e:
e6:7b:f6:90:3c:51:91:78:22:13:a6:07:c4:0f:4b:
28:46:5b:50:9c:66:41:2c:fc:b6:0c:2d:6c:d3:bd:
53:4c:8d:e8:63:e7:bd:35:8d:5b:dc:bf:01:30:21:
f2:94:c2:fa:94:06:a9:43:ee:73:2f:db:31:df:e0:
99:f4:88:88:12:cc:b8:d9:e5:54:25:63:a6:2c:62:
58:09:f9:86:48:ee:79:54:f4:fa:c0:cd:d3:41:fe:
01:7e:41:60:ae:a6:1f:c8:a3:9f:d9:b4:e3:1f:38:
51:8d:79:78:9a:ac:f3:d9:9e:61:70:cf:af:c7:a7:
8f:cf:ab:6b:23:b9:63:72:32:16:60:db:5d:8d:03:
50:26:8f:76:be:a9:19:c3:dc:7e:5b:aa:fe:c2:f1:
1a:06:a4:3a:9d:0f:b9:8b:83:d6:ef:29:a6:25:5a:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:E0:C9:5B:07:9F:06:79:54:DB:1C:A9:5D:5C:7E:5D:27:F8:AC
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:00:41:38:f5:b8:33:b7:3f:71:20:86:88:2e:d5:55:9b:7f:
fb:21:4b:c5:b3:b0:31:00:5a:e8:7d:6c:8d:2e:e2:4c:a7:20:
84:9a:58:92:3f:05:8f:c3:59:84:55:4f:85:c6:54:7e:8f:f9:
ca:63:42:33:03:1d:d0:20:ca:d9:3c:b5:58:19:bd:07:17:00:
de:63:98:08:51:f9:ac:14:40:16:0a:f6:27:a9:1b:ec:ba:26:
a2:12:d2:32:ac:03:28:0d:3b:fe:57:c5:65:c2:61:d7:0f:fe:
1b:3a:e1:5a:45:87:96:45:69:4b:40:e9:9e:2c:d8:77:5f:5f:
cb:9f:76:e7:8f:13:ac:d0:8f:64:af:7b:a0:10:2e:a3:74:a5:
d4:c8:ef:0c:03:36:5f:e4:6d:82:fb:09:11:e3:08:e1:e4:fa:
43:e7:ae:a2:69:57:ac:30:c0:78:b8:4f:81:3e:4d:bc:e1:7c:
ca:f1:de:13:26:4b:6a:9c:7d:53:5f:45:d7:f1:ce:be:89:ef:
d3:26:9e:38:76:65:f9:7e:e8:c1:2f:a2:2a:ce:c9:13:a0:88:
f3:3f:58:de:6d:3e:a5:bc:c7:ae:f2:1b:f5:34:09:87:a8:38:
50:9b:96:18:dc:27:06:38:00:e5:88:e8:b5:d5:63:f5:72:a1:
1b:f6:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:31 2025 by rpki-client