
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: Czb74HDm5uUtdA4zpVy0noS4YZJ6ZDZVmkqd3bZemJQ=
Subject key identifier: E7:8C:37:46:08:8B:F1:C5:80:78:CC:93:B4:C8:BC:C2:9E:CE:F6:A7
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 173B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 1725
Signing time: Thu 16 Apr 2026 15:31:43 +0000
Manifest this update: Thu 16 Apr 2026 15:31:42 +0000
Manifest next update: Thu 23 Apr 2026 15:31:42 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: Keg4ARgNDaXMjnvn9qkrUdfdniVl9FMcSN7z/9bR+0o=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: tVNdNXfs/JUEf9PTu4jhJoFAKzZsZXMOgAYfuqbbB74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5947 (0x173b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Apr 16 15:31:42 2026 GMT
Not After : Apr 23 15:31:42 2026 GMT
Subject: CN=69e100df-2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:bc:9f:b5:00:07:c3:9e:08:0c:8f:9e:52:
0c:e7:40:2f:1a:39:6b:03:53:e6:b8:ee:7e:cf:c8:
92:05:f8:75:e4:ba:10:47:25:03:be:ba:1f:5c:e5:
3f:e1:2c:1c:de:83:b4:85:2c:cc:98:03:5f:22:a8:
ff:64:0f:d5:2a:48:40:a1:64:fd:a4:fb:d3:54:85:
33:be:40:07:5a:94:b3:ec:f2:06:65:1d:93:57:73:
bf:82:09:2d:e4:6f:38:7b:61:0f:79:b3:a6:c2:cb:
55:ed:88:47:50:8a:b7:1d:78:e9:d7:c4:19:5c:82:
ce:ec:82:83:5b:9a:26:c5:f5:90:74:8e:2a:c0:6a:
e7:7b:70:15:0b:7b:46:d6:03:75:42:e9:67:28:0f:
7f:77:27:54:d7:e8:06:53:6b:8f:53:7a:54:f0:ac:
f1:c1:0b:58:56:89:0a:91:26:bb:72:b7:d4:58:0a:
c6:33:20:e4:72:96:ab:66:84:63:e7:ac:7b:ab:4c:
de:29:1f:92:96:72:fa:2c:40:1b:99:51:50:0c:d5:
2b:df:c0:68:70:32:62:7b:99:0d:d6:d8:f8:63:41:
8e:47:4c:36:77:83:95:f0:74:a4:ba:40:64:64:cc:
13:83:eb:49:5b:0c:bd:b2:59:2d:f2:d0:4b:26:cd:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8C:37:46:08:8B:F1:C5:80:78:CC:93:B4:C8:BC:C2:9E:CE:F6:A7
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e5:17:c8:61:2d:96:53:59:c0:a0:25:df:03:46:da:ec:68:
69:3f:52:bb:e3:e7:2e:2f:cb:6f:08:8f:50:2b:7c:45:60:c3:
5e:df:07:31:04:a1:85:3b:9c:50:ec:7b:96:50:14:4c:4e:c6:
d5:c4:11:ba:1f:46:db:42:82:8d:2a:c3:88:72:07:4c:a1:af:
5b:99:d3:52:be:32:0c:b5:bd:f3:30:3b:8c:fd:1c:7d:e2:9e:
2b:f7:f9:0d:1e:46:bb:36:7a:3d:81:8d:5d:e8:9a:24:1e:da:
d1:52:4b:2c:89:6f:06:82:8c:ce:a1:20:f6:f1:65:1f:3f:74:
a9:8b:56:ec:9f:1f:ac:d6:b9:ef:6e:1e:f7:e3:98:15:79:e4:
b7:cc:6a:c3:68:23:ab:7d:ac:50:33:52:5c:ba:4f:44:73:43:
6c:82:b4:55:07:2e:db:99:74:31:bb:81:15:95:cc:60:de:7b:
19:8d:5f:89:5c:fd:00:ab:9a:04:29:47:25:0a:30:9e:50:06:
6d:b0:0f:c7:d3:e0:7f:95:75:1b:92:0f:51:e3:ae:ca:12:15:
1d:fd:9d:f3:d3:f2:64:2b:84:ca:98:53:f9:8f:dd:a5:1b:1d:
62:f0:1f:a0:57:d8:7a:64:ad:f4:00:d3:f8:5d:78:aa:ad:9f:
52:28:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:09 2026 by rpki-client