
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json)
Hash identifier: fQQPPEVRvfi4tqG8RacgbNAut87igVphzhTONCmTlN8=
Subject key identifier: E6:CF:22:4A:44:59:35:0C:DC:BE:40:4E:6E:28:00:31:AE:F1:1B:B7
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 1724
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
Manifest number: 170E
Signing time: Mon 02 Mar 2026 15:38:43 +0000
Manifest this update: Mon 02 Mar 2026 15:38:42 +0000
Manifest next update: Mon 09 Mar 2026 15:38:42 +0000
Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: C/FXTZuqygF09wKkOxOyi0Z4XHRnxbf4Oa5XkYvNrR4=)
2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: tVNdNXfs/JUEf9PTu4jhJoFAKzZsZXMOgAYfuqbbB74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5924 (0x1724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Mar 2 15:38:42 2026 GMT
Not After : Mar 9 15:38:42 2026 GMT
Subject: CN=69a5af02-1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:17:c6:02:44:38:bb:db:9f:1e:86:55:f9:
38:6a:eb:e2:53:33:65:03:fa:b4:c4:ef:86:2f:31:
9a:61:61:1b:af:ce:32:53:57:38:1c:f8:21:28:a2:
68:32:7c:25:f5:f8:71:a2:cb:e9:67:a3:ef:fc:25:
9e:20:e7:17:aa:33:74:99:85:8a:a9:01:7e:36:a7:
0b:e6:1b:7b:7f:16:3f:e1:25:af:77:49:96:45:09:
e6:a5:72:01:b8:f0:1d:d9:45:a0:bb:3e:cd:a9:8f:
24:ad:a6:3b:ec:4e:86:63:3c:fb:ba:52:91:fe:2f:
ff:80:f4:da:2b:4c:76:00:60:ac:46:35:66:26:6b:
46:32:e8:b1:0f:fc:5c:ec:2f:22:f8:ff:38:68:cb:
ac:6f:fb:98:3b:16:b2:d7:bb:f3:19:3b:12:a5:4f:
58:0d:7e:40:a3:6e:ec:1a:99:7c:d7:a5:fe:7f:8e:
61:35:7a:17:a0:00:3a:1d:8d:b6:f1:8d:9e:32:f5:
0b:f3:e7:9a:ea:06:46:dc:14:ca:7c:42:26:8b:87:
1c:60:60:e9:c7:be:14:88:7d:0f:df:d5:b6:5a:d4:
e1:0a:5a:76:eb:c0:24:93:89:d3:4c:fb:a9:eb:f0:
3e:92:05:06:05:3f:08:82:36:8b:6b:d5:6c:db:df:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CF:22:4A:44:59:35:0C:DC:BE:40:4E:6E:28:00:31:AE:F1:1B:B7
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:48:e5:e9:77:91:b4:f0:e9:7b:c2:01:b9:29:83:bd:41:01:
93:2c:b4:f4:10:86:de:f3:72:7c:85:5c:ad:da:6d:fb:f0:df:
f2:5b:48:93:9d:55:d0:02:f6:ce:40:51:7a:f2:76:06:ae:07:
52:74:86:bb:48:79:7d:c3:97:3e:9e:a9:86:3a:72:58:1d:b8:
d9:be:db:a7:1d:3b:d7:cc:a2:95:34:0d:d0:64:c4:59:fd:c0:
52:f6:19:2c:57:65:54:46:6d:52:f1:f4:f5:ac:51:f4:2d:0e:
5c:32:f7:5a:45:ef:78:0e:56:61:24:9a:e8:bc:cb:9f:0f:88:
78:d4:7f:21:76:11:ac:15:49:77:42:7b:7d:74:bc:78:35:a2:
ce:8f:3a:8b:00:6a:76:38:22:98:04:e0:bf:f5:97:70:bc:2c:
f5:fa:7e:d7:74:29:04:5f:f0:82:9f:23:44:37:ef:1a:d9:99:
c4:7d:1f:8e:a4:81:ee:db:96:71:2e:29:73:d6:0f:2b:db:ce:
ca:11:91:7b:86:5a:ff:b6:4b:a4:7d:07:f0:07:05:8f:12:31:
b3:18:0a:e6:d2:b8:75:26:5b:9a:15:26:1a:5b:2d:d7:45:7c:
e4:e3:b4:90:46:0e:29:1b:a0:17:7d:c8:36:3d:bf:f7:63:ee:
3a:cf:db:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:25 2026 by rpki-client