$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: /CxxYMG0wfKRQHX63BOQrE8+4r5ssoEMwLwF3dDFE1M= Subject key identifier: CA:40:29:A9:15:3B:36:11:3F:EE:6C:FE:CD:D8:8D:FA:75:84:35:36 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 1696 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 1683 Signing time: Sat 14 Jun 2025 15:33:11 +0000 Manifest this update: Sat 14 Jun 2025 15:33:11 +0000 Manifest next update: Sat 21 Jun 2025 15:33:11 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: rbm7JOEfg3s5jvo/kTwbbbiBt+Ekzf/CenvyjDJAkmI=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5782 (0x1696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Jun 14 15:33:11 2025 GMT Not After : Jun 21 15:33:11 2025 GMT Subject: CN=684d9637-e4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:1f:3a:25:94:a3:8e:fc:13:92:f9:81:d3: 78:c4:60:0e:c8:7a:c6:07:49:fe:8b:96:4b:ba:62: c4:10:9a:1d:6d:b3:96:e9:06:07:23:e0:a1:89:13: a6:25:21:55:c8:fb:d9:12:d7:e4:da:47:35:8f:e7: d8:ed:4c:4a:23:4f:2f:b1:ed:9c:c0:d2:da:40:e7: 01:3e:06:71:bd:89:01:ea:4e:5a:b1:8c:15:1a:87: b7:b3:20:a9:7f:a3:6d:ef:4c:03:59:b1:8e:3f:c6: 65:21:bb:c7:f2:4c:7d:c2:0f:1b:0b:5a:fa:8e:89: 4f:f4:1c:74:d2:1e:ee:61:9f:23:d6:0d:b6:61:5e: 06:4c:5d:2b:fb:25:49:4d:1f:1a:84:74:5d:30:5f: 73:7e:35:e6:a7:73:79:0a:f4:bb:c3:5d:0b:0f:1d: df:6b:bd:52:1f:3e:30:e2:2b:c0:8a:93:3a:6f:e8: 60:0d:bf:f1:d5:00:83:c8:07:e6:a5:26:fc:85:e0: c7:61:91:29:f7:ef:23:13:61:98:af:f4:3d:9f:bc: 25:8c:4d:fa:6d:f0:37:5e:83:6e:17:b5:3a:c4:33: e0:9e:26:42:58:d7:c5:6c:25:e8:cf:6c:1b:66:a9: dd:a8:3c:46:ec:fc:d7:0b:e6:b8:a0:d7:5c:5a:e5: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:40:29:A9:15:3B:36:11:3F:EE:6C:FE:CD:D8:8D:FA:75:84:35:36 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:98:8f:0e:99:30:46:8a:4c:d5:ab:8b:1d:f8:97:28:80:c3: 21:23:6a:69:88:9b:a5:6c:ff:ca:74:71:59:de:d4:3d:f7:b1: 4c:57:37:de:06:17:36:54:c9:28:c5:88:c9:78:32:9d:8d:69: 66:fa:39:e1:31:bd:02:29:7c:bc:b8:39:01:ae:bf:1c:b2:20: 7b:6c:15:7c:09:1a:70:d4:16:bd:6d:c4:ea:a1:e8:3c:5b:c8: 2c:fd:de:6c:13:cd:85:b9:f8:3f:d5:6f:0b:c5:95:8e:4a:44: 1c:2b:b9:4f:88:9f:64:97:0a:3c:1a:05:15:ff:9b:b6:76:4a: cd:19:fe:6e:73:9e:19:d5:30:ed:c0:e9:3d:7e:d3:bf:46:a1: 69:6f:50:d1:2d:53:46:57:c9:be:d4:a2:44:ec:a0:4e:6e:89: 95:cc:38:e4:d8:ad:48:21:c6:ff:b9:a6:f3:33:ff:ba:fb:9c: 9f:2b:37:6b:43:dd:a9:ab:39:bc:4d:1b:11:28:88:e7:07:31: 79:40:3a:17:a4:4a:3d:50:2e:51:6a:27:3f:81:1e:86:4c:2e: 46:ad:a9:0a:39:f4:50:72:41:61:3f:fe:82:d7:e0:18:93:ed: c0:af:f9:c9:e1:f5:70:56:cb:5a:90:b4:58:ed:64:64:53:8a: cc:11:52:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwNjE0MTUzMzExWhcNMjUwNjIxMTUzMzExWjAYMRYwFAYD VQQDEw02ODRkOTYzNy1lNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvAfOiWUo478E5L5gdN4xGAOyHrGB0n+i5ZLumLEEJodbbOW6QYHI+ChiROm JSFVyPvZEtfk2kc1j+fY7UxKI08vse2cwNLaQOcBPgZxvYkB6k5asYwVGoe3syCp f6Nt70wDWbGOP8ZlIbvH8kx9wg8bC1r6jolP9Bx00h7uYZ8j1g22YV4GTF0r+yVJ TR8ahHRdMF9zfjXmp3N5CvS7w10LDx3fa71SHz4w4ivAipM6b+hgDb/x1QCDyAfm pSb8heDHYZEp9+8jE2GYr/Q9n7wljE36bfA3XoNuF7U6xDPgniZCWNfFbCXoz2wb ZqndqDxG7PzXC+a4oNdcWuUGGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpAKakV OzYRP+5s/s3Yjfp1hDU2MB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0mI8OmTBGikzVq4sd+JcogMMhI2ppiJulbP/KdHFZ3tQ997FMVzfe Bhc2VMkoxYjJeDKdjWlm+jnhMb0CKXy8uDkBrr8csiB7bBV8CRpw1Ba9bcTqoeg8 W8gs/d5sE82Fufg/1W8LxZWOSkQcK7lPiJ9klwo8GgUV/5u2dkrNGf5uc54Z1TDt wOk9ftO/RqFpb1DRLVNGV8m+1KJE7KBObomVzDjk2K1IIcb/uabzM/+6+5yfKzdr Q92pqzm8TRsRKIjnBzF5QDoXpEo9UC5Raic/gR6GTC5GrakKOfRQckFhP/6C1+AY k+3Ar/nJ4fVwVstakLRY7WRkU4rMEVL4 -----END CERTIFICATE-----Generated at Mon Jun 16 11:54:58 2025 by rpki-client