$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft File: VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft (raw, json) Hash identifier: CwTRythtslIylJsL70F9POyyoTLjrUm1qtwYHvb7WtI= Subject key identifier: C4:D2:4F:12:6B:A0:47:23:16:41:54:71:08:48:8C:C1:02:CA:37:88 Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Certificate serial: 16AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft Manifest number: 169C Signing time: Sat 02 Aug 2025 15:39:06 +0000 Manifest this update: Sat 02 Aug 2025 15:39:06 +0000 Manifest next update: Sat 09 Aug 2025 15:39:06 +0000 Files and hashes: 1: VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl (hash: MWqLQjVCWiM8HNUPKoSyYAcH6nbMJe2yINv7vZqvx1E=) 2: F9B55ECA922111EAB5138581C4F9AE02.roa (hash: t1Oq9/W3+A2l0ATKJkmUH6k2nz0jQQTxzppJnzarsfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5807 (0x16af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8 Validity Not Before: Aug 2 15:39:06 2025 GMT Not After : Aug 9 15:39:06 2025 GMT Subject: CN=688e311a-bfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f3:6e:0f:bf:c3:d9:d5:66:99:af:8e:d2:66: a2:05:39:bd:41:50:ee:ca:1f:dd:bc:ae:f2:5f:78: b1:01:7b:04:5b:29:dd:7b:26:1b:e1:80:8d:c5:36: a9:dc:e6:4b:84:7b:98:f1:5c:66:1b:0b:cf:59:2b: 99:33:72:3f:4b:48:91:bf:d7:fb:32:2e:61:0c:8b: 1a:e1:c3:d1:16:d7:ad:63:f4:9f:d5:f4:51:a5:f1: f9:de:78:ec:0b:0e:4c:19:bd:81:58:ed:ef:d4:8e: e2:5b:23:10:c7:67:7c:9c:f4:ba:75:8c:70:ed:b3: ec:4c:74:bd:5a:f2:8f:ce:d1:c8:79:c7:13:03:b1: 7d:1a:a0:d6:f7:f8:4e:17:ad:6e:05:8a:d8:f3:42: 55:e5:39:51:2e:39:4d:1c:c5:24:1d:5f:12:e8:87: dd:38:21:d0:00:18:d0:c9:22:a5:d1:ec:4e:a5:8b: 6e:dd:ec:3b:c0:5d:c1:c1:c7:31:c0:da:db:e9:7a: 4e:7d:e4:e8:e0:67:14:34:ab:07:66:ec:77:8e:25: 7a:d5:da:99:82:07:cc:be:8c:66:22:63:45:ba:b3: e4:24:29:e8:7c:47:c5:b0:24:9e:ed:1c:87:39:27: 36:44:39:e7:f2:cf:67:8e:d2:a9:75:bf:c4:e2:8c: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D2:4F:12:6B:A0:47:23:16:41:54:71:08:48:8C:C1:02:CA:37:88 X509v3 Authority Key Identifier: keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:af:e4:bb:8f:19:d8:4f:32:11:46:7e:f0:30:8c:5c:d5: 63:10:d4:d2:b8:f4:5d:69:5b:1e:71:73:8a:b7:43:91:af:0c: ac:21:dc:56:17:24:56:62:a5:70:47:7c:01:eb:ba:c3:d5:e3: ea:b7:a8:2f:fb:36:8f:5f:ba:be:a5:ce:07:24:f0:cb:7e:ec: b0:fc:e0:54:00:04:be:1d:af:e0:06:a4:20:76:f0:5f:7f:c2: be:f9:1e:5c:4a:7a:a5:7b:5a:e0:bf:57:a3:fd:6f:39:83:38: a0:19:e0:62:fd:c4:72:01:29:e1:da:6e:9b:eb:e2:e8:35:97: 40:84:8d:97:df:f5:93:5a:26:6a:f8:c3:bb:e8:46:b6:da:d3: 71:1c:cf:7e:67:54:da:7f:c6:81:91:d0:f7:e0:0e:2e:87:95: 4b:66:cd:44:26:48:17:7b:62:d6:13:e7:a2:a1:d3:b6:81:f3: 38:1f:76:90:56:ca:dc:d3:b2:8c:3d:11:31:ac:c2:15:e3:5a: ab:d9:6b:e3:11:27:76:b1:09:be:93:e7:b4:45:7e:02:a2:87: ae:b8:20:49:73:0c:64:c5:d5:b6:36:4c:fd:9e:e2:7e:8a:d7: 49:cc:33:e0:9d:23:59:f4:9a:54:19:49:15:c8:4c:48:e3:af: 76:b0:22:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDU0NDExRDkwNzBFMjBDOUZGQ0ZGQzQxNEZEMDkzMjBC RjM5QUI2RTgwHhcNMjUwODAyMTUzOTA2WhcNMjUwODA5MTUzOTA2WjAYMRYwFAYD VQQDEw02ODhlMzExYS1iZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vNuD7/D2dVmma+O0maiBTm9QVDuyh/dvK7yX3ixAXsEWyndeyYb4YCNxTap 3OZLhHuY8VxmGwvPWSuZM3I/S0iRv9f7Mi5hDIsa4cPRFtetY/Sf1fRRpfH53njs Cw5MGb2BWO3v1I7iWyMQx2d8nPS6dYxw7bPsTHS9WvKPztHIeccTA7F9GqDW9/hO F61uBYrY80JV5TlRLjlNHMUkHV8S6IfdOCHQABjQySKl0exOpYtu3ew7wF3Bwccx wNrb6XpOfeTo4GcUNKsHZux3jiV61dqZggfMvoxmImNFurPkJCnofEfFsCSe7RyH OSc2RDnn8s9njtKpdb/E4owU4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTSTxJr oEcjFkFUcQhIjMECyjeIMB8GA1UdIwQYMBaAFFRBHZBw4gyf/P/EFP0JMgvzmrbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS9GRUM3N0M5QTA3 MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURKXzhfOFFVX1FreUNfT2F0 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZFRWRrSERpREpfOF84UVVfUWt5Q19PYXR1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS9GRUM3N0M5QTA3MzYxMUU4QUI3RENCNEFDNEY5QUUwMi9WRUVka0hEaURK XzhfOFFVX1FreUNfT2F0dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwrq/ku48Z2E8yEUZ+8DCMXNVjENTSuPRdaVsecXOKt0ORrwysIdxW FyRWYqVwR3wB67rD1ePqt6gv+zaPX7q+pc4HJPDLfuyw/OBUAAS+Ha/gBqQgdvBf f8K++R5cSnqle1rgv1ej/W85gzigGeBi/cRyASnh2m6b6+LoNZdAhI2X3/WTWiZq +MO76Ea22tNxHM9+Z1Taf8aBkdD34A4uh5VLZs1EJkgXe2LWE+eiodO2gfM4H3aQ Vsrc07KMPRExrMIV41qr2WvjESd2sQm+k+e0RX4CooeuuCBJcwxkxdW2Nkz9nuJ+ itdJzDPgnSNZ9JpUGUkVyExI4692sCKf -----END CERTIFICATE-----Generated at Mon Aug 4 15:39:59 2025 by rpki-client