$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: oOnLTi1b4ZhPqNdfXRiKrq2lVHnGtggXHvYSlTq72AY= Subject key identifier: B0:15:26:EA:BF:A3:29:D3:D4:E9:AF:12:14:21:56:37:5F:28:A2:4E Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 16DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 16C6 Signing time: Mon 20 Oct 2025 15:42:53 +0000 Manifest this update: Mon 20 Oct 2025 15:42:52 +0000 Manifest next update: Mon 27 Oct 2025 15:42:52 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: keGm24atXB4bNl9pICRr1jRPBTm6XTphaE5mKxJjbbU=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: m9UGAfVu3orq8z+5jB4PFKlaJ9lxwAP7J6rRfrsg14M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5850 (0x16da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Oct 20 15:42:52 2025 GMT Not After : Oct 27 15:42:52 2025 GMT Subject: CN=68f6587c-7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:66:33:9e:18:ed:f5:0f:48:ed:3a:08:77: d9:0d:09:f4:2a:00:12:21:99:e5:0b:2b:cc:04:38: a3:98:b9:10:d7:61:b1:0c:76:32:08:e4:45:c2:d3: 83:92:b3:d0:06:d1:e1:5c:e4:8e:b8:8d:f2:d2:86: 94:be:54:03:4c:bb:27:b4:1f:bb:88:bd:62:c7:d2: 22:1d:97:29:b3:51:d6:1f:0c:15:93:d0:2c:56:36: 07:a6:23:4b:c0:e8:d9:68:07:b0:f9:5c:76:9c:44: 0e:19:c6:4a:b2:81:aa:76:79:76:c0:1c:07:ae:e1: 3b:d5:d1:ae:f9:ca:3e:9b:a1:f0:37:b2:51:99:1b: 0f:66:e6:5e:62:39:64:f4:0d:c0:96:5d:3d:44:d4: 22:a4:85:91:58:30:33:c4:50:12:99:54:cd:64:c2: a8:cb:15:f0:6f:51:c2:ae:7b:4a:47:ca:01:72:d9: 95:f4:91:c2:41:04:c3:83:a2:df:8c:69:e4:90:55: 98:c8:71:3a:74:a0:bd:2f:d3:8b:c7:e6:44:80:54: db:26:bc:c4:e7:b9:f1:8d:ff:ce:01:63:a8:b4:86: 2f:cf:0e:7b:fd:38:a5:4e:ff:93:7c:43:fa:34:26: e7:3e:8a:47:9a:38:ad:38:7a:d2:00:2f:16:97:67: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:26:EA:BF:A3:29:D3:D4:E9:AF:12:14:21:56:37:5F:28:A2:4E X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:da:3f:14:71:c2:dc:01:ac:8d:5a:30:33:1a:cb:39:75:9f: 5f:04:0c:5a:de:5c:1e:1f:0e:00:db:7c:13:2f:8c:09:39:d3: ff:1e:a5:d9:08:81:8b:a6:8c:e3:c6:46:a8:71:b2:20:ff:8c: 64:49:78:79:b6:19:31:73:a6:2f:76:c3:41:34:72:5d:71:81: 22:6d:42:66:0a:1a:68:b6:ed:97:15:60:5f:3f:2f:62:9a:22: 04:27:92:d3:e2:ec:56:58:22:33:db:d0:d7:80:cc:3d:ae:f4: cb:30:63:fc:01:bf:a6:5e:d6:85:26:46:95:a2:fd:a0:aa:f6: 35:c0:9b:a6:00:2c:1d:fd:57:95:f3:24:44:b7:42:39:58:66: bf:a5:4d:a2:00:7e:06:6e:c9:b3:6c:8a:46:f1:d8:2f:22:77: 76:91:84:11:c9:06:9f:f8:e3:9e:43:31:44:c5:b4:a8:45:3d: da:cf:a7:95:ec:ae:32:6d:f6:ad:f0:2e:c2:81:56:e2:54:82: f6:ef:7a:f1:f3:a6:04:34:b9:f7:ba:09:d2:3c:39:35:f1:db: 53:6f:32:94:f2:69:70:6c:37:fa:97:6d:23:f5:59:f8:98:af: 95:e1:fd:ad:29:52:89:80:47:0e:3d:c3:bf:45:48:7e:b5:10: 38:34:b8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUxMDIwMTU0MjUyWhcNMjUxMDI3MTU0MjUyWjAYMRYwFAYD VQQDEw02OGY2NTg3Yy03MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnVmM54Y7fUPSO06CHfZDQn0KgASIZnlCyvMBDijmLkQ12GxDHYyCORFwtOD krPQBtHhXOSOuI3y0oaUvlQDTLsntB+7iL1ix9IiHZcps1HWHwwVk9AsVjYHpiNL wOjZaAew+Vx2nEQOGcZKsoGqdnl2wBwHruE71dGu+co+m6HwN7JRmRsPZuZeYjlk 9A3All09RNQipIWRWDAzxFASmVTNZMKoyxXwb1HCrntKR8oBctmV9JHCQQTDg6Lf jGnkkFWYyHE6dKC9L9OLx+ZEgFTbJrzE57nxjf/OAWOotIYvzw57/TilTv+TfEP6 NCbnPopHmjitOHrSAC8Wl2dlsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAVJuq/ oynT1OmvEhQhVjdfKKJOMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj2j8UccLcAayNWjAzGss5dZ9fBAxa3lweHw4A23wTL4wJOdP/HqXZ CIGLpozjxkaocbIg/4xkSXh5thkxc6YvdsNBNHJdcYEibUJmChpotu2XFWBfPy9i miIEJ5LT4uxWWCIz29DXgMw9rvTLMGP8Ab+mXtaFJkaVov2gqvY1wJumACwd/VeV 8yREt0I5WGa/pU2iAH4GbsmzbIpG8dgvInd2kYQRyQaf+OOeQzFExbSoRT3az6eV 7K4ybfat8C7CgVbiVIL273rx86YENLn3ugnSPDk18dtTbzKU8mlwbDf6l20j9Vn4 mK+V4f2tKVKJgEcOPcO/RUh+tRA4NLjo -----END CERTIFICATE-----Generated at Tue Oct 21 05:52:45 2025 by rpki-client