$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: vh6eqdCtiAhngv9V6CtiLAk+vIRxSfFdXzv7ErxXbqA= Subject key identifier: CC:E5:03:E9:E4:85:97:3F:28:2C:CE:09:4E:DB:C1:5E:49:EF:E8:C1 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 1683 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 1670 Signing time: Thu 08 May 2025 15:36:59 +0000 Manifest this update: Thu 08 May 2025 15:36:59 +0000 Manifest next update: Thu 15 May 2025 15:36:59 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: 3rFOo+Dlsh1O0NUR2bOfDmQSVJpSTgHePcbgvWq1qjk=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5763 (0x1683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: May 8 15:36:59 2025 GMT Not After : May 15 15:36:59 2025 GMT Subject: CN=681ccf9b-060b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:2b:4a:72:1f:77:92:1f:fa:2f:fb:03:57: e4:51:8d:ea:1e:d3:e6:9a:a4:59:f6:cb:af:6f:88: a0:1b:e7:fc:69:be:d1:ff:10:f0:83:fe:00:48:ac: d3:d1:52:83:08:71:bc:30:5c:c1:22:28:fd:49:73: 5a:1a:c1:b4:e9:93:d3:15:4d:9b:79:13:28:b4:be: c0:6c:60:2b:68:bf:7c:71:8d:3e:5c:8e:9b:67:5e: ae:83:c0:08:df:7f:65:95:b9:7d:2a:88:12:76:81: 12:a1:d0:f5:b7:2e:56:86:de:03:cb:de:52:ba:c9: 73:29:ef:16:1d:05:74:b9:0b:bf:8a:75:9b:df:93: 55:25:b0:05:14:a4:77:d2:12:12:5c:62:97:d4:a6: 09:52:d0:40:4b:8b:0b:4b:43:1d:f3:32:25:79:98: 90:af:1a:7d:52:f9:cd:6d:1a:53:3b:a6:ef:23:65: 68:d9:50:87:2d:8f:9d:66:05:45:f4:bd:17:ff:30: 9a:35:44:65:d6:1c:fe:54:3a:15:d1:73:41:e9:51: 6e:6a:86:23:fe:e3:63:86:56:cd:33:28:52:59:33: d9:c9:b8:9f:1b:81:92:25:3d:56:d2:b6:8f:69:69: 16:a0:17:69:51:57:5b:99:31:18:83:01:28:5d:7b: 1b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E5:03:E9:E4:85:97:3F:28:2C:CE:09:4E:DB:C1:5E:49:EF:E8:C1 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d5:f9:e6:ea:77:3f:b4:b4:99:d0:0f:67:81:b9:1f:8f:d3: 82:9e:c1:0f:87:b4:72:78:f8:92:bc:2d:4c:26:d0:4b:49:69: 17:4f:86:85:2e:ab:9a:e8:48:f3:b3:71:3d:b3:d8:92:80:53: 33:c4:f5:c6:86:88:61:1b:25:ea:88:d0:52:44:8c:0e:a4:59: ff:06:18:d0:c4:9b:de:18:65:b5:84:59:e8:e2:5f:18:f4:ef: f3:d1:06:62:03:ad:18:7b:53:74:73:f1:b6:9a:a8:ab:c7:d8: 23:4d:01:31:94:c6:8f:24:37:ed:a6:7d:20:7e:0d:07:f6:b1: 39:d6:62:2b:d4:28:7b:40:19:49:4d:85:40:dd:82:d2:e6:55: 94:fd:72:a8:11:93:8f:39:49:76:25:0a:c9:0f:b9:09:bb:77: 68:b9:30:ba:9c:ee:86:f4:49:6b:f5:69:21:d1:62:2d:5b:a9: 78:c2:48:b3:b0:a5:f2:fb:73:3a:c0:bc:49:d8:fe:04:d9:2b: 4a:d7:a3:c9:c7:74:b8:71:04:ca:4e:d1:8e:2f:09:4b:c2:8b: 34:37:cf:fa:3f:68:ea:03:aa:47:ff:b6:5e:fb:14:57:4a:f8: 34:89:1e:31:eb:6b:dd:1d:dd:9b:3d:a4:e8:0e:66:65:fc:fe: 42:5c:8c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNTA4MTUzNjU5WhcNMjUwNTE1MTUzNjU5WjAYMRYwFAYD VQQDEw02ODFjY2Y5Yi0wNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjQrSnIfd5If+i/7A1fkUY3qHtPmmqRZ9suvb4igG+f8ab7R/xDwg/4ASKzT 0VKDCHG8MFzBIij9SXNaGsG06ZPTFU2beRMotL7AbGAraL98cY0+XI6bZ16ug8AI 339llbl9KogSdoESodD1ty5Wht4Dy95SuslzKe8WHQV0uQu/inWb35NVJbAFFKR3 0hISXGKX1KYJUtBAS4sLS0Md8zIleZiQrxp9UvnNbRpTO6bvI2Vo2VCHLY+dZgVF 9L0X/zCaNURl1hz+VDoV0XNB6VFuaoYj/uNjhlbNMyhSWTPZybifG4GSJT1W0raP aWkWoBdpUVdbmTEYgwEoXXsb2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzlA+nk hZc/KCzOCU7bwV5J7+jBMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1fnm6nc/tLSZ0A9ngbkfj9OCnsEPh7RyePiSvC1MJtBLSWkXT4aF Lqua6Ejzs3E9s9iSgFMzxPXGhohhGyXqiNBSRIwOpFn/BhjQxJveGGW1hFno4l8Y 9O/z0QZiA60Ye1N0c/G2mqirx9gjTQExlMaPJDftpn0gfg0H9rE51mIr1Ch7QBlJ TYVA3YLS5lWU/XKoEZOPOUl2JQrJD7kJu3douTC6nO6G9Elr9Wkh0WItW6l4wkiz sKXy+3M6wLxJ2P4E2StK16PJx3S4cQTKTtGOLwlLwos0N8/6P2jqA6pH/7Ze+xRX Svg0iR4x62vdHd2bPaToDmZl/P5CXIxo -----END CERTIFICATE-----Generated at Thu May 8 19:00:59 2025 by rpki-client