$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: DhnrCRCzj0ZsN7u8lUrs1sRGLFjYkQJrcPsUTVQcqi8= Subject key identifier: 17:D9:2D:A4:4F:C6:9A:C2:88:33:96:7E:55:9E:BF:AC:90:69:F2:50 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 1690 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 167D Signing time: Mon 02 Jun 2025 15:42:12 +0000 Manifest this update: Mon 02 Jun 2025 15:42:12 +0000 Manifest next update: Mon 09 Jun 2025 15:42:12 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: VRsCsKH7ooaLrEls9SrCZQCNqVjG+qppAUYA35m0WrI=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5776 (0x1690) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Jun 2 15:42:12 2025 GMT Not After : Jun 9 15:42:12 2025 GMT Subject: CN=683dc654-ff28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:d9:53:77:d2:31:20:9b:c4:99:eb:d0:3b: 01:66:ed:a7:1e:ee:2e:fc:1a:9c:58:c1:df:2b:7f: 86:24:0f:cc:84:fb:c3:b9:06:22:70:d0:9b:0d:28: 89:81:65:97:a7:e8:48:a4:40:2f:e0:c0:f3:ab:e9: f2:be:55:16:95:4e:ad:38:f1:de:3d:d1:a9:ae:40: 01:19:7c:91:77:a6:16:f9:1b:b2:43:f9:6c:76:64: f3:7f:de:c4:03:ac:2a:1c:04:b2:cd:68:de:3a:e4: 74:57:cb:96:ea:0f:a7:9f:92:b8:19:f6:11:f0:fb: d4:5a:45:46:01:49:47:4d:b9:c1:a6:64:ec:0c:0c: 08:94:c2:d1:59:00:b9:d3:62:cd:14:f8:3d:02:08: e1:96:29:49:5d:ab:70:0b:41:55:7d:a8:0a:32:8a: 8d:ce:67:9f:a2:d5:95:61:2e:53:be:3d:f1:ea:33: 5b:e3:1d:5c:79:f2:79:8c:ad:b4:05:9c:f4:3e:0e: d9:75:f9:02:d0:2b:97:30:80:2a:85:64:9c:02:58: 4e:c0:b9:e1:00:bd:92:d3:eb:7f:05:f0:f2:8c:03: a7:ba:a7:0b:52:a5:e6:83:a3:07:d2:ed:46:76:f1: 51:f2:9d:fc:3d:5b:ec:fc:26:78:c9:9c:3d:a5:b4: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D9:2D:A4:4F:C6:9A:C2:88:33:96:7E:55:9E:BF:AC:90:69:F2:50 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:9b:24:5b:2d:63:4e:6a:3d:49:21:5a:af:82:af:4b:49:82: 55:e4:3e:60:c8:08:ce:09:42:69:c6:49:22:20:5f:52:de:cd: 42:25:80:77:99:03:d3:c0:cb:6b:a0:4c:c2:1a:f5:14:3a:55: ce:4a:11:0e:7c:6c:0f:2c:23:37:f4:d0:da:41:c8:13:98:b0: 64:fd:22:0d:7a:e3:7d:9f:a0:2d:7a:cd:37:67:b3:7f:a6:7a: ce:98:29:5b:8a:fc:69:8d:27:04:32:ca:b7:b5:a1:f0:84:72: ec:1e:97:94:5e:05:51:4b:b1:7f:60:a0:14:b3:83:07:48:78: f6:d7:f1:40:d2:61:1b:38:31:1d:6a:30:8a:df:95:21:fe:58: cd:d9:3a:2f:20:13:a9:82:9e:37:f5:23:74:a8:13:51:a8:99: c7:3a:bf:76:1f:e0:54:64:d2:af:76:99:da:52:ee:a3:17:28: fc:a1:c5:49:0f:2a:85:55:5f:7b:26:e3:a8:ab:1f:af:c6:36: 40:d8:3e:29:8f:da:5c:3f:f1:bf:0d:e9:5e:39:a4:60:db:bb: 26:ec:5e:d0:41:72:b9:2c:be:e1:28:fa:87:fd:a0:aa:8d:12: f2:48:d5:70:9a:08:61:db:4c:82:0b:e8:66:bc:83:12:ac:6e: 8e:0a:9e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNjAyMTU0MjEyWhcNMjUwNjA5MTU0MjEyWjAYMRYwFAYD VQQDEw02ODNkYzY1NC1mZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVbZU3fSMSCbxJnr0DsBZu2nHu4u/BqcWMHfK3+GJA/MhPvDuQYicNCbDSiJ gWWXp+hIpEAv4MDzq+nyvlUWlU6tOPHePdGprkABGXyRd6YW+RuyQ/lsdmTzf97E A6wqHASyzWjeOuR0V8uW6g+nn5K4GfYR8PvUWkVGAUlHTbnBpmTsDAwIlMLRWQC5 02LNFPg9AgjhlilJXatwC0FVfagKMoqNzmefotWVYS5Tvj3x6jNb4x1cefJ5jK20 BZz0Pg7ZdfkC0CuXMIAqhWScAlhOwLnhAL2S0+t/BfDyjAOnuqcLUqXmg6MH0u1G dvFR8p38PVvs/CZ4yZw9pbQDGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfZLaRP xprCiDOWflWev6yQafJQMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBmyRbLWNOaj1JIVqvgq9LSYJV5D5gyAjOCUJpxkkiIF9S3s1CJYB3 mQPTwMtroEzCGvUUOlXOShEOfGwPLCM39NDaQcgTmLBk/SINeuN9n6Ates03Z7N/ pnrOmClbivxpjScEMsq3taHwhHLsHpeUXgVRS7F/YKAUs4MHSHj21/FA0mEbODEd ajCK35Uh/ljN2TovIBOpgp439SN0qBNRqJnHOr92H+BUZNKvdpnaUu6jFyj8ocVJ DyqFVV97JuOoqx+vxjZA2D4pj9pcP/G/DeleOaRg27sm7F7QQXK5LL7hKPqH/aCq jRLySNVwmghh20yCC+hmvIMSrG6OCp7r -----END CERTIFICATE-----Generated at Mon Jun 2 19:21:41 2025 by rpki-client