$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: 2Q67txY8phRwYUxbx/Yz8VN5MPH4bmXS+HvpMPQc+wA= Subject key identifier: DD:8A:F3:AB:35:CD:E5:2F:81:AA:1D:4C:2A:CA:7B:3B:18:E4:85:50 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 1678 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 1665 Signing time: Wed 16 Apr 2025 15:36:00 +0000 Manifest this update: Wed 16 Apr 2025 15:36:00 +0000 Manifest next update: Wed 23 Apr 2025 15:36:00 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: VQkgoAgRqkRiwxeJ6ZZqxHc60sif1PcW63ckkplq/gs=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 15:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5752 (0x1678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Apr 16 15:36:00 2025 GMT Not After : Apr 23 15:36:00 2025 GMT Subject: CN=67ffce60-36be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:16:cf:49:9c:cf:68:29:e8:e6:ec:9b:82: 84:75:45:99:a3:ea:54:02:e0:9e:75:04:22:f0:9a: ba:d0:50:c9:77:18:91:95:b4:6d:21:cf:7a:51:53: 57:43:72:f9:a4:bb:c8:ff:c5:ed:cb:1d:80:55:39: f9:a7:be:99:8b:d9:c4:85:7a:76:6e:ef:48:be:cd: 66:bf:5c:6e:9b:35:f1:eb:be:a9:36:a4:46:e6:98: fd:92:48:db:7a:fb:a5:d9:50:25:5c:ae:3e:2e:6a: 63:dd:b7:14:3e:c8:ba:06:97:ed:8b:46:df:4c:65: fc:7b:e3:2c:95:dc:b6:b3:0a:71:13:7a:9a:6f:2d: 21:35:d7:55:60:00:f3:60:d9:3d:f3:52:9c:91:95: 08:aa:dd:ce:81:79:39:0b:ba:89:3f:b4:23:37:c5: 30:8d:0c:89:08:7e:1d:e1:9f:aa:ca:f9:15:2c:2f: 61:74:29:6b:e3:64:3a:7f:58:0d:67:93:cc:50:ed: 5e:0f:be:0d:cd:ee:0b:97:52:c4:7a:d8:d8:ab:42: a9:58:95:fc:dd:90:04:8a:07:e2:be:39:fc:60:16: a1:28:2d:e4:1d:3a:f7:2a:0c:b3:b1:68:d3:eb:4b: 42:8a:7e:d0:f9:cd:92:df:e9:e5:81:12:03:b9:1c: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:F3:AB:35:CD:E5:2F:81:AA:1D:4C:2A:CA:7B:3B:18:E4:85:50 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:5f:c7:93:6e:a5:e9:5b:5b:53:47:1e:3d:5f:f6:25:3b:42: e4:7f:08:10:87:14:c0:ae:d9:bc:df:fc:29:fc:ce:9a:9a:3c: 96:41:66:f0:88:a9:43:9a:5b:de:9d:8b:7f:d9:7d:f5:31:1a: 3e:81:ee:76:a7:59:a8:56:7d:00:f7:74:05:61:35:22:42:d0: d9:ec:ae:f2:80:35:56:82:d4:a4:e6:2e:c4:39:c8:0b:97:21: 04:91:64:6b:b5:da:1f:3d:74:a1:49:46:4e:42:22:13:a6:c4: 53:c5:5a:a6:c5:82:61:49:e9:43:dd:49:47:0e:8c:61:ec:25: c0:47:f9:24:66:23:40:66:be:ab:2c:46:eb:11:85:a6:28:36: 27:1c:74:59:a7:7d:26:1e:89:b2:d3:8d:65:97:d3:b4:7f:d6: 82:35:9a:7a:6b:66:77:bd:cd:84:6f:dc:ad:8e:e5:86:a6:8c: 7f:e5:27:2a:63:2f:57:f7:fd:5b:43:f9:fe:1f:18:4e:a3:5b: 30:e2:a3:fb:e5:97:b4:5c:6c:c0:33:04:dc:dd:97:8f:28:17: 2e:4e:65:91:41:dc:57:b4:e3:f7:51:c1:a6:9a:00:08:da:02: f9:e3:d9:89:51:50:51:fb:d3:fd:ee:0e:65:de:c7:c7:3b:22: 09:0c:3d:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNDE2MTUzNjAwWhcNMjUwNDIzMTUzNjAwWjAYMRYwFAYD VQQDEw02N2ZmY2U2MC0zNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAEWz0mcz2gp6Obsm4KEdUWZo+pUAuCedQQi8Jq60FDJdxiRlbRtIc96UVNX Q3L5pLvI/8Xtyx2AVTn5p76Zi9nEhXp2bu9Ivs1mv1xumzXx676pNqRG5pj9kkjb evul2VAlXK4+Lmpj3bcUPsi6Bpfti0bfTGX8e+Msldy2swpxE3qaby0hNddVYADz YNk981KckZUIqt3OgXk5C7qJP7QjN8UwjQyJCH4d4Z+qyvkVLC9hdClr42Q6f1gN Z5PMUO1eD74Nze4Ll1LEetjYq0KpWJX83ZAEigfivjn8YBahKC3kHTr3KgyzsWjT 60tCin7Q+c2S3+nlgRIDuRybSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2K86s1 zeUvgaodTCrKezsY5IVQMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKX8eTbqXpW1tTRx49X/YlO0LkfwgQhxTArtm83/wp/M6amjyWQWbw iKlDmlvenYt/2X31MRo+ge52p1moVn0A93QFYTUiQtDZ7K7ygDVWgtSk5i7EOcgL lyEEkWRrtdofPXShSUZOQiITpsRTxVqmxYJhSelD3UlHDoxh7CXAR/kkZiNAZr6r LEbrEYWmKDYnHHRZp30mHomy041ll9O0f9aCNZp6a2Z3vc2Eb9ytjuWGpox/5Scq Yy9X9/1bQ/n+HxhOo1sw4qP75Ze0XGzAMwTc3ZePKBcuTmWRQdxXtOP3UcGmmgAI 2gL549mJUVBR+9P97g5l3sfHOyIJDD3w -----END CERTIFICATE-----Generated at Fri Apr 18 14:59:25 2025 by rpki-client