$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: Q6sdd2dil5nQOq2hpoGSTPpJ/Vct4PYF4+Z0VUFjwBw= Subject key identifier: 14:83:83:40:28:55:5A:8C:76:E4:93:AA:93:1B:EF:30:3C:2D:E2:94 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 16A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 1695 Signing time: Sun 20 Jul 2025 15:35:34 +0000 Manifest this update: Sun 20 Jul 2025 15:35:34 +0000 Manifest next update: Sun 27 Jul 2025 15:35:34 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: 3BlMZ7UCwaCs2yXI5AOyOAt3Qj9qSSUPYlXwErbuEKA=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5800 (0x16a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Jul 20 15:35:34 2025 GMT Not After : Jul 27 15:35:34 2025 GMT Subject: CN=687d0cc6-1c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:f0:ef:31:f1:55:99:91:96:11:db:83:9e: 5a:a5:98:f4:dc:f7:e4:b4:0c:5d:70:15:f7:90:9a: f6:c6:15:08:db:3b:c8:37:08:d9:98:ee:2f:55:25: e2:e1:94:c5:73:e4:60:51:89:16:6b:a2:4e:a3:9b: 19:86:05:6c:51:df:52:b2:b9:8c:a1:b2:b7:2b:8e: 21:0f:d4:30:a2:3f:38:5a:51:18:d7:9d:29:c2:cf: 90:be:c4:21:73:7c:aa:58:e1:5b:7c:29:4e:d7:fd: ed:11:f5:12:2a:f6:6d:43:d7:a1:a8:b9:4b:5e:fc: bf:38:b1:72:f5:b6:88:49:f5:65:7b:4a:fd:dd:5f: a5:82:a3:61:bd:52:fc:99:a2:a0:79:44:a2:29:55: 9f:98:ff:0c:4e:f9:a0:96:e9:a6:e7:57:22:28:9a: 35:de:6b:33:24:c5:8c:db:71:33:ed:51:30:3f:22: 36:2f:61:98:bb:14:92:7d:64:0a:43:6a:cf:f4:b1: 03:ab:5c:dd:87:75:47:f4:93:5a:10:7e:d3:78:3b: 30:43:e6:7d:0c:4e:2a:45:b5:7f:0a:d4:5a:53:82: fe:84:d0:71:da:14:d8:e3:0a:d1:c8:a5:f3:2d:8e: 0d:00:3e:18:67:8a:e1:e7:5f:f6:f7:14:67:71:44: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:83:83:40:28:55:5A:8C:76:E4:93:AA:93:1B:EF:30:3C:2D:E2:94 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e2:af:c8:ea:a7:b4:18:5a:f0:18:27:1d:84:2a:f6:72:5f: 4a:58:6e:1d:27:01:d4:80:51:5f:e9:a1:c6:f5:7c:14:09:5a: e1:b3:03:c6:84:6e:67:1d:60:1b:df:8b:3f:e5:7d:3f:a0:09: 85:72:09:18:44:94:bd:d9:41:2d:99:16:40:1b:1f:32:5a:9e: 8e:cb:86:8d:25:44:ba:de:f2:da:a7:3a:68:ad:82:9f:8a:3f: ce:e0:81:9a:d9:fb:34:ea:be:e4:69:52:28:fc:0f:86:3d:d9: cf:7e:b3:e1:27:72:21:6c:16:15:f3:9d:73:a2:bc:b2:f4:9d: d8:55:91:30:b2:4f:cd:0b:e8:ed:76:86:cf:75:4b:05:93:75: 05:bd:d5:6e:8f:2d:2d:12:95:97:35:8c:a2:7e:08:4e:53:02: 5c:e3:d9:a0:08:f8:87:b5:3a:df:94:a3:66:e6:dd:e1:55:ef: ef:7d:65:b9:a1:14:04:52:3a:dc:05:79:fa:da:ba:57:da:7e: 4a:0c:34:bb:20:81:0b:93:fd:a8:96:e8:9f:e0:16:ac:93:0e: 11:fc:8e:4f:15:97:6a:78:d1:5f:d0:27:36:b3:b0:e5:ca:a1: 8f:dd:a1:07:ed:cd:e5:ae:99:6a:c6:ec:fe:4d:16:47:3f:8c: f8:fa:da:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNzIwMTUzNTM0WhcNMjUwNzI3MTUzNTM0WjAYMRYwFAYD VQQDEw02ODdkMGNjNi0xYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6rw7zHxVZmRlhHbg55apZj03PfktAxdcBX3kJr2xhUI2zvINwjZmO4vVSXi 4ZTFc+RgUYkWa6JOo5sZhgVsUd9SsrmMobK3K44hD9Qwoj84WlEY150pws+QvsQh c3yqWOFbfClO1/3tEfUSKvZtQ9ehqLlLXvy/OLFy9baISfVle0r93V+lgqNhvVL8 maKgeUSiKVWfmP8MTvmglumm51ciKJo13mszJMWM23Ez7VEwPyI2L2GYuxSSfWQK Q2rP9LEDq1zdh3VH9JNaEH7TeDswQ+Z9DE4qRbV/CtRaU4L+hNBx2hTY4wrRyKXz LY4NAD4YZ4rh51/29xRncUSrnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSDg0Ao VVqMduSTqpMb7zA8LeKUMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL4q/I6qe0GFrwGCcdhCr2cl9KWG4dJwHUgFFf6aHG9XwUCVrhswPG hG5nHWAb34s/5X0/oAmFcgkYRJS92UEtmRZAGx8yWp6Oy4aNJUS63vLapzporYKf ij/O4IGa2fs06r7kaVIo/A+GPdnPfrPhJ3IhbBYV851zoryy9J3YVZEwsk/NC+jt dobPdUsFk3UFvdVujy0tEpWXNYyifghOUwJc49mgCPiHtTrflKNm5t3hVe/vfWW5 oRQEUjrcBXn62rpX2n5KDDS7IIELk/2oluif4Baskw4R/I5PFZdqeNFf0Cc2s7Dl yqGP3aEH7c3lrplqxuz+TRZHP4z4+tqh -----END CERTIFICATE-----Generated at Sun Jul 20 21:57:48 2025 by rpki-client