$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: UEkQsUxdzIbhaDlCMkD6+0aZlur6bZHw8ZE4dVDodmA= Subject key identifier: 04:99:3F:26:CD:6A:A9:2C:1D:CE:CD:49:5D:4C:6D:61:66:40:64:FA Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 16B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 16A6 Signing time: Fri 22 Aug 2025 15:37:05 +0000 Manifest this update: Fri 22 Aug 2025 15:37:04 +0000 Manifest next update: Fri 29 Aug 2025 15:37:04 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: ffr9gZYOkCii/w70R2nMsGr8BoM1xJWII7QvpwrdLMA=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5817 (0x16b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Aug 22 15:37:04 2025 GMT Not After : Aug 29 15:37:04 2025 GMT Subject: CN=68a88ea0-c4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:82:ed:00:50:75:e9:33:99:db:a8:58:da: 86:a3:59:1b:0a:61:a4:74:49:40:7a:05:c0:8a:eb: 41:8c:15:2f:8f:d8:13:17:77:90:c1:d2:24:ed:7b: c9:cc:1b:2a:6d:c2:2c:53:98:4a:b9:d3:b9:42:14: 00:ae:48:fa:1a:be:35:a9:c2:e9:de:f6:e8:ed:f4: 6c:44:b4:0e:46:56:d2:7d:e6:a3:14:68:84:f0:c5: 09:dc:56:8c:89:b4:be:d0:a1:40:69:3d:68:37:d7: b4:da:c6:f0:bc:89:e3:96:5c:bf:0b:8b:23:e3:d2: 80:8c:a2:41:e3:de:a7:ea:1f:6d:9a:6e:b1:d2:cf: 28:ec:9d:58:17:a2:67:eb:54:74:dd:93:15:de:3e: 4a:b2:cb:b3:0e:0a:44:62:d9:f5:0d:7b:8a:45:42: 85:0a:22:2d:9c:3e:87:0d:6c:88:12:ac:21:41:85: 66:bc:dc:fa:25:fc:0b:a9:92:5f:55:74:9a:e1:1c: 52:d1:08:73:50:80:78:4a:0b:dc:13:68:ec:9c:50: ae:6f:0f:ed:29:1a:58:b2:75:04:46:ed:ba:c0:3c: d8:51:8c:4d:fd:46:ee:59:78:18:7e:e2:14:5d:0d: be:e1:80:88:7c:70:a0:ff:60:6b:bd:06:12:1a:07: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:99:3F:26:CD:6A:A9:2C:1D:CE:CD:49:5D:4C:6D:61:66:40:64:FA X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bb:45:8f:d2:40:cc:4d:e2:f4:53:c9:15:a2:1e:88:a9:69: 36:98:b2:83:be:bc:0b:76:50:2d:21:2e:09:77:a0:10:52:65: ad:90:2b:3a:c3:bc:7e:34:3a:5f:6f:67:fb:7f:10:08:20:ab: d4:90:7c:70:aa:18:72:cd:91:3c:fe:bd:28:ae:be:fc:db:5f: d9:9b:25:74:d5:9e:6e:93:d2:8d:e8:4b:7e:42:91:dc:c9:bf: 5a:02:85:d6:9a:a4:f1:a5:14:fe:5b:7b:62:30:0d:53:25:f0: 40:f7:cf:a2:e5:08:79:28:91:f3:2e:2a:64:58:f5:1b:53:79: 21:43:46:5a:a1:93:3f:3b:35:79:7c:6d:82:b7:bb:69:da:6c: 21:9d:3c:c7:cf:3c:85:c5:3f:36:b5:f5:07:d3:f7:62:c9:ae: 1e:4d:62:e7:53:b1:4e:c5:76:70:2a:e0:36:93:93:89:0c:6f: 0c:ee:4a:30:05:c5:d7:22:58:68:a4:6b:79:db:19:de:ca:db: a9:a6:35:24:ce:5a:80:cc:fa:e1:26:d9:c7:68:28:6b:3b:53: d3:3c:92:2d:a6:b4:e9:6a:46:b9:8d:2f:cb:3c:c2:5a:c1:a9: 2a:95:9f:91:69:c4:e7:ae:51:e6:22:17:d8:ae:59:48:9f:f7: 4c:d3:9a:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwODIyMTUzNzA0WhcNMjUwODI5MTUzNzA0WjAYMRYwFAYD VQQDEw02OGE4OGVhMC1jNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sCC7QBQdekzmduoWNqGo1kbCmGkdElAegXAiutBjBUvj9gTF3eQwdIk7XvJ zBsqbcIsU5hKudO5QhQArkj6Gr41qcLp3vbo7fRsRLQORlbSfeajFGiE8MUJ3FaM ibS+0KFAaT1oN9e02sbwvInjlly/C4sj49KAjKJB496n6h9tmm6x0s8o7J1YF6Jn 61R03ZMV3j5KssuzDgpEYtn1DXuKRUKFCiItnD6HDWyIEqwhQYVmvNz6JfwLqZJf VXSa4RxS0QhzUIB4SgvcE2jsnFCubw/tKRpYsnUERu26wDzYUYxN/UbuWXgYfuIU XQ2+4YCIfHCg/2BrvQYSGge3CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASZPybN aqksHc7NSV1MbWFmQGT6MB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOu0WP0kDMTeL0U8kVoh6IqWk2mLKDvrwLdlAtIS4Jd6AQUmWtkCs6 w7x+NDpfb2f7fxAIIKvUkHxwqhhyzZE8/r0orr7821/ZmyV01Z5uk9KN6Et+QpHc yb9aAoXWmqTxpRT+W3tiMA1TJfBA98+i5Qh5KJHzLipkWPUbU3khQ0ZaoZM/OzV5 fG2Ct7tp2mwhnTzHzzyFxT82tfUH0/diya4eTWLnU7FOxXZwKuA2k5OJDG8M7kow BcXXIlhopGt52xneytuppjUkzlqAzPrhJtnHaChrO1PTPJItprTpaka5jS/LPMJa wakqlZ+RacTnrlHmIhfYrllIn/dM05qs -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:37 2025 by rpki-client