$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: JG38X5MnEZ3AOuIdOuo5XMVP3zCvAAQxGOaPaG4VEvM= Subject key identifier: B1:49:D4:F9:2B:AF:44:B1:46:8E:F9:30:8A:C4:85:28:17:77:10:43 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 169F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 168C Signing time: Wed 02 Jul 2025 15:41:12 +0000 Manifest this update: Wed 02 Jul 2025 15:41:12 +0000 Manifest next update: Wed 09 Jul 2025 15:41:12 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: Xe0u8OA66WJAR363RZqt+Of+D+tZ4hWPxsE0HUANZz0=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5791 (0x169f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Jul 2 15:41:12 2025 GMT Not After : Jul 9 15:41:12 2025 GMT Subject: CN=68655318-0c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:5f:52:cc:68:3e:64:3b:95:5b:d7:f2:8b: 59:c6:76:f9:6a:b7:dd:53:5d:ee:f6:ee:97:7c:24: d3:15:b5:df:72:3d:96:20:06:84:90:d1:a3:7c:e1: 3c:d3:a7:31:b9:6d:ff:38:90:a6:08:62:08:b9:93: b2:42:cc:ea:66:a7:e6:8f:1e:40:cf:9d:dc:2c:f8: 8a:42:46:b2:b2:21:26:36:58:c6:ac:22:50:e7:84: 60:f5:c4:cc:47:89:97:9c:52:e1:94:c8:84:63:46: 51:1e:a8:a9:78:a4:30:f3:9d:96:d0:b6:4a:96:31: 26:af:c3:30:14:2e:50:03:ae:9d:09:75:46:45:d8: 45:1b:60:0a:00:6a:fa:49:15:36:5e:f3:57:5f:34: 73:e5:ce:81:6f:44:cc:4d:66:2c:ca:fb:76:a1:13: dc:f3:37:f7:27:4e:b6:b2:bf:d2:83:45:24:f7:60: fd:0e:a0:ba:a0:b3:39:b6:be:49:c4:da:66:b6:77: d0:b7:f9:cf:3f:96:d7:02:50:ee:66:f5:70:16:20: 80:ff:d9:9d:69:e2:db:12:25:e8:97:c9:34:2c:d1: e5:8d:f3:47:e3:73:58:2e:22:e3:c1:ca:b4:87:b5: 66:14:23:5b:d5:e4:8a:a0:bd:16:3f:3c:e4:ad:b7: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:49:D4:F9:2B:AF:44:B1:46:8E:F9:30:8A:C4:85:28:17:77:10:43 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2b:a8:dc:84:1c:37:82:18:3a:1f:9b:3b:ed:57:b5:9e:0a: 88:57:31:c1:4f:cb:61:7e:61:26:27:49:ab:fc:cd:80:4d:b5: 99:ce:82:a8:6f:36:a8:96:32:49:09:02:18:aa:ba:38:b0:95: f5:26:17:10:c6:a4:84:5e:4b:00:ec:dc:93:23:63:f0:51:f7: d3:4d:76:9f:59:81:28:bf:c9:b1:01:91:74:69:61:c0:1d:71: 13:a4:ef:5a:f5:12:79:0c:f1:c7:d2:2f:fe:43:00:4a:ff:dd: 1c:35:37:c2:a5:f9:f3:ba:37:c9:6f:5c:b2:c3:18:1a:14:a7: 6c:60:c9:56:26:54:6e:06:54:de:a1:5b:66:8c:49:47:64:e8: d4:df:60:3e:bd:7c:c1:5d:4b:b4:16:a6:81:3c:7d:fa:91:ac: 16:47:b4:d7:32:94:74:92:19:94:d3:20:e8:73:f3:4d:10:50: 32:b2:78:39:15:80:ee:fa:9f:32:9c:c9:e0:6b:7b:2d:50:03: 3e:f2:08:4e:8d:6d:a3:dc:8f:40:a5:86:40:fd:53:be:b8:de: ea:63:8a:39:01:62:d7:92:f0:c8:00:fb:da:1a:67:54:57:b7: 9b:36:0e:3b:b1:84:8b:9f:b9:52:14:73:1f:d5:5f:3f:74:f7: fa:16:d1:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNzAyMTU0MTEyWhcNMjUwNzA5MTU0MTEyWjAYMRYwFAYD VQQDEw02ODY1NTMxOC0wYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqFfUsxoPmQ7lVvX8otZxnb5arfdU13u9u6XfCTTFbXfcj2WIAaEkNGjfOE8 06cxuW3/OJCmCGIIuZOyQszqZqfmjx5Az53cLPiKQkaysiEmNljGrCJQ54Rg9cTM R4mXnFLhlMiEY0ZRHqipeKQw852W0LZKljEmr8MwFC5QA66dCXVGRdhFG2AKAGr6 SRU2XvNXXzRz5c6Bb0TMTWYsyvt2oRPc8zf3J062sr/Sg0Uk92D9DqC6oLM5tr5J xNpmtnfQt/nPP5bXAlDuZvVwFiCA/9mdaeLbEiXol8k0LNHljfNH43NYLiLjwcq0 h7VmFCNb1eSKoL0WPzzkrbcg5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFJ1Pkr r0SxRo75MIrEhSgXdxBDMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMK6jchBw3ghg6H5s77Ve1ngqIVzHBT8thfmEmJ0mr/M2ATbWZzoKo bzaoljJJCQIYqro4sJX1JhcQxqSEXksA7NyTI2PwUffTTXafWYEov8mxAZF0aWHA HXETpO9a9RJ5DPHH0i/+QwBK/90cNTfCpfnzujfJb1yywxgaFKdsYMlWJlRuBlTe oVtmjElHZOjU32A+vXzBXUu0FqaBPH36kawWR7TXMpR0khmU0yDoc/NNEFAysng5 FYDu+p8ynMnga3stUAM+8ghOjW2j3I9ApYZA/VO+uN7qY4o5AWLXkvDIAPvaGmdU V7ebNg47sYSLn7lSFHMf1V8/dPf6FtEk -----END CERTIFICATE-----Generated at Thu Jul 3 22:49:36 2025 by rpki-client