$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: EkvwU0k6IPs7cH3yPz7AovpwcyN8sqK3vChRMqhpTn8= Subject key identifier: 2C:52:00:1B:E0:B9:46:F7:F0:27:49:1F:B1:01:F2:3F:44:F1:88:66 Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 7C Signing time: Sat 01 Jun 2024 08:43:21 +0000 Manifest this update: Sat 01 Jun 2024 08:43:21 +0000 Manifest next update: Sat 08 Jun 2024 08:43:21 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: /ybqfJlhrlCVqvAo5UCUQ7V8GdAMVSRqn+GKULPXziE=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: p/1R6L71E7MMliC2/KdL4WY7SjgtWVvDAV3+jSxKkRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Jun 1 08:43:21 2024 GMT Not After : Jun 8 08:43:21 2024 GMT Subject: CN=665adf29-d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:d7:35:5a:41:e6:53:60:5c:89:bf:4a:3a: 02:0a:ff:9a:a3:45:86:0d:43:1c:16:50:61:8e:38: 72:52:32:42:7a:ec:2c:54:d4:64:7b:df:6f:d5:91: 36:cd:d6:a0:14:d4:05:f8:e2:be:66:de:30:e3:3a: 1f:70:6f:62:d5:2f:25:e4:be:cd:74:cc:45:69:9f: ec:a0:41:8c:ab:0a:98:68:f7:71:cd:2b:2e:98:0e: d8:80:32:bb:06:1e:d1:88:d5:3f:65:e7:d3:3c:5e: c1:92:a8:87:70:f3:cf:0e:9b:66:fb:35:4d:61:92: 37:64:2c:9e:d9:c1:d4:14:6f:30:86:e4:74:b1:d8: 49:31:43:18:ec:61:3a:7e:cb:a2:59:07:ba:f7:cd: d7:7a:a4:29:70:b6:b8:c8:df:11:6f:ec:57:4d:ac: f8:4c:17:d4:02:e8:e4:3a:3c:06:7e:ab:c0:d9:0d: f6:36:db:7d:1e:6a:ea:43:be:f1:75:77:f7:7a:30: 4a:1d:c4:4c:c5:fa:4f:11:96:fb:b2:90:f4:cb:06: f2:45:dd:a4:69:77:21:41:c9:07:71:7d:18:cd:28: bb:6e:0f:a2:6d:a6:01:87:7f:16:76:2e:7c:bb:ae: 67:64:ea:97:96:3c:da:8d:e0:aa:8d:6c:2d:78:53: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:52:00:1B:E0:B9:46:F7:F0:27:49:1F:B1:01:F2:3F:44:F1:88:66 X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a2:64:40:4c:6c:e6:5e:a0:14:37:b1:13:d1:40:28:a9:86: 23:a3:4a:87:28:87:76:05:2b:4b:ad:8f:9f:4c:ab:72:59:97: 18:3a:24:8c:49:05:56:de:8a:e4:dc:33:a2:05:e3:fc:de:fc: e1:ba:a1:e0:b4:44:8c:2e:2e:97:dd:41:f8:24:9c:4d:7d:39: 94:46:75:a2:5b:46:a4:66:69:64:74:88:94:0b:76:e9:3a:52: d0:16:90:39:0e:6c:db:10:c0:9b:63:b1:91:e0:46:61:f7:9f: 6d:0e:c3:17:39:c3:86:a0:2c:d4:e6:61:eb:e2:80:50:17:03: a8:1d:ba:22:70:4d:2a:00:2d:3c:1f:57:8f:68:e8:d3:c9:e4: f6:c5:a5:ca:c6:9a:c8:35:92:48:ef:a6:17:9f:2c:f1:81:78: d3:54:d2:85:1e:76:10:38:a1:c7:46:67:47:f9:f2:ad:d1:77: ef:2e:3e:31:96:ee:60:47:80:1c:cd:50:81:0f:61:0c:20:94: c3:9c:a4:3a:7a:2e:3f:5f:d7:8d:55:8c:80:e7:c9:ab:88:2e: a1:a6:32:93:ce:3a:0c:cc:8e:7c:80:28:a8:45:16:e1:68:8d: ba:8a:15:2e:b5:82:6b:9e:5f:09:0f:82:59:66:09:25:c8:f0: 50:cf:61:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Mjc0NDExMC8GA1UEBRMoQkQyMUJFOTgzMDc1NDI5MTZEODFFMEZFRDlGOEY1MzI0 MDQ5NDQ4MDAeFw0yNDA2MDEwODQzMjFaFw0yNDA2MDgwODQzMjFaMBgxFjAUBgNV BAMTDTY2NWFkZjI5LWQ3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgstc1WkHmU2Bcib9KOgIK/5qjRYYNQxwWUGGOOHJSMkJ67CxU1GR732/VkTbN 1qAU1AX44r5m3jDjOh9wb2LVLyXkvs10zEVpn+ygQYyrCpho93HNKy6YDtiAMrsG HtGI1T9l59M8XsGSqIdw888Om2b7NU1hkjdkLJ7ZwdQUbzCG5HSx2EkxQxjsYTp+ y6JZB7r3zdd6pClwtrjI3xFv7FdNrPhMF9QC6OQ6PAZ+q8DZDfY2230eaupDvvF1 d/d6MEodxEzF+k8RlvuykPTLBvJF3aRpdyFByQdxfRjNKLtuD6JtpgGHfxZ2Lny7 rmdk6peWPNqN4KqNbC14U8mvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULFIAG+C5 RvfwJ0kfsQHyP0TxiGYwHwYDVR0jBBgwFoAUvSG+mDB1QpFtgeD+2fj1MkBJRIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyNzQ0LzhFOEI5QzlFNjc0 NDExRUU4QTkyRjgzRkM0RjlBRTAyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlNHLW1EQjFRcEZ0Z2VELTJmajFNa0JKUklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy NzQ0LzhFOEI5QzlFNjc0NDExRUU4QTkyRjgzRkM0RjlBRTAyL3ZTRy1tREIxUXBG dGdlRC0yZmoxTWtCSlJJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6iZEBMbOZeoBQ3sRPRQCiphiOjSocoh3YFK0utj59Mq3JZlxg6JIxJ BVbeiuTcM6IF4/ze/OG6oeC0RIwuLpfdQfgknE19OZRGdaJbRqRmaWR0iJQLduk6 UtAWkDkObNsQwJtjsZHgRmH3n20Owxc5w4agLNTmYevigFAXA6gduiJwTSoALTwf V49o6NPJ5PbFpcrGmsg1kkjvphefLPGBeNNU0oUedhA4ocdGZ0f58q3Rd+8uPjGW 7mBHgBzNUIEPYQwglMOcpDp6Lj9f141VjIDnyauILqGmMpPOOgzMjnyAKKhFFuFo jbqKFS61gmueXwkPgllmCSXI8FDPYYM= -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:16 2024 by rpki-client on console-ams.rpki-client.org