This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: DRFEkyaw49xglZtlT0LQH0m12CYsmuk163hakDRHO1E=
Subject key identifier: A5:CF:77:C1:4E:84:74:29:7F:B0:5D:7E:3D:BF:76:31:69:D3:EF:76
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 16FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 16E8
Signing time: Wed 24 Dec 2025 15:26:25 +0000
Manifest this update: Wed 24 Dec 2025 15:26:25 +0000
Manifest next update: Wed 31 Dec 2025 15:26:25 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: EGFODxmhUVhQsjPVfd2G1Bub9NTj7k/uJcERJpXHH6M=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: m9UGAfVu3orq8z+5jB4PFKlaJ9lxwAP7J6rRfrsg14M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5884 (0x16fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Dec 24 15:26:25 2025 GMT
Not After : Dec 31 15:26:25 2025 GMT
Subject: CN=694c0621-1b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:5c:81:71:1f:cd:e8:32:fd:d6:cc:1b:9b:
0f:0b:5c:06:01:ef:33:56:a4:aa:7b:de:cc:7e:28:
a1:44:08:3f:f7:4d:24:50:46:e8:4f:a1:94:96:5a:
85:de:dd:a8:c0:8d:35:d7:47:89:29:56:d7:61:6e:
a4:71:eb:f7:1c:66:53:c7:51:54:d9:5b:f6:89:c0:
98:a4:73:83:26:4c:f6:fb:a7:39:b4:a1:2f:96:2a:
85:b5:07:91:bf:51:99:79:b8:8d:0a:46:fa:d8:7b:
44:24:fa:8a:2b:21:5a:bf:96:39:e2:8a:d0:e0:83:
91:62:8e:6c:55:72:1e:b6:cf:8d:e6:a5:dc:ca:ca:
7c:0a:e2:a9:09:85:fd:73:98:9a:14:73:90:b0:b5:
21:87:3e:e5:d7:6a:81:63:93:d0:0f:60:1d:a1:21:
ba:63:52:27:81:68:23:d2:88:0e:a9:d2:65:b5:a6:
71:39:30:be:ad:5b:e6:ff:9a:cd:f1:d2:4c:28:2b:
93:9a:50:15:78:be:a3:4a:70:48:d7:f1:29:97:ce:
75:78:44:13:95:2f:8d:e5:f6:14:77:61:59:e5:4d:
08:c9:b9:4f:ee:0d:0c:9e:f3:30:a8:c5:4d:b8:dc:
d9:39:90:12:d9:d7:72:31:f2:47:e5:de:a9:44:15:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:77:C1:4E:84:74:29:7F:B0:5D:7E:3D:BF:76:31:69:D3:EF:76
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:04:65:ba:4d:ea:e9:a5:1f:25:f8:02:ca:f6:8e:94:54:
1a:2f:c4:27:11:97:2b:27:04:60:57:ed:46:f6:eb:75:bf:bc:
b8:9f:b6:5b:84:9e:42:d0:6f:4f:84:2d:00:10:a9:49:1c:6d:
b5:74:a3:fb:e6:e7:5e:93:73:44:16:6d:34:43:f0:5b:cf:86:
6c:1e:2f:67:4b:de:1a:2e:91:10:63:cc:2f:3a:5e:39:43:8a:
19:eb:8d:15:61:98:8c:01:1b:f0:29:a0:70:15:3f:f0:23:f0:
fd:c3:4a:a8:50:25:3c:9c:fb:40:d6:ee:64:db:10:a5:c4:a4:
8e:42:78:ee:a5:90:9b:b6:1c:00:01:f5:eb:89:66:76:17:98:
28:a0:04:2b:eb:d8:17:fe:78:06:df:82:17:c2:d6:7e:ee:99:
d2:90:0d:90:c2:79:88:62:3b:30:ef:63:e5:94:75:94:7e:a6:
57:1b:b9:be:5c:95:5d:2e:ce:f7:d1:b3:d7:f6:a9:55:96:1c:
fb:5d:3e:5c:db:c8:5a:bd:0b:73:55:4b:10:de:e3:dc:44:64:
91:cf:d4:83:89:55:72:c6:df:1e:14:d8:cd:c7:a0:bd:ca:d9:
50:74:98:ec:69:d9:db:17:b6:0e:07:36:e9:36:a7:e3:9b:3c:
d5:08:ed:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC
RjM5QUI2RTgwHhcNMjUxMjI0MTUyNjI1WhcNMjUxMjMxMTUyNjI1WjAYMRYwFAYD
VQQDDA02OTRjMDYyMS0xYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBJcgXEfzegy/dbMG5sPC1wGAe8zVqSqe97MfiihRAg/900kUEboT6GUllqF
3t2owI0110eJKVbXYW6kcev3HGZTx1FU2Vv2icCYpHODJkz2+6c5tKEvliqFtQeR
v1GZebiNCkb62HtEJPqKKyFav5Y54orQ4IORYo5sVXIets+N5qXcysp8CuKpCYX9
c5iaFHOQsLUhhz7l12qBY5PQD2AdoSG6Y1IngWgj0ogOqdJltaZxOTC+rVvm/5rN
8dJMKCuTmlAVeL6jSnBI1/Epl851eEQTlS+N5fYUd2FZ5U0IyblP7g0MnvMwqMVN
uNzZOZAS2ddyMfJH5d6pRBUFmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXPd8FO
hHQpf7Bdfj2/djFp0+92MB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3
MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK
XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXqQRluk3q6aUfJfgCyvaOlFQaL8QnEZcrJwRgV+1G9ut1v7y4n7Zb
hJ5C0G9PhC0AEKlJHG21dKP75udek3NEFm00Q/Bbz4ZsHi9nS94aLpEQY8wvOl45
Q4oZ640VYZiMARvwKaBwFT/wI/D9w0qoUCU8nPtA1u5k2xClxKSOQnjupZCbthwA
AfXriWZ2F5gooAQr69gX/ngG34IXwtZ+7pnSkA2QwnmIYjsw72PllHWUfqZXG7m+
XJVdLs730bPX9qlVlhz7XT5c28havQtzVUsQ3uPcRGSRz9SDiVVyxt8eFNjNx6C9
ytlQdJjsadnbF7YOBzbpNqfjmzzVCO1+
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:20:35 2025 by rpki-client