$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: pt1Wn+m5E0JjrUAp8ouYIHQQ8vshCVm8XsYWGak3x6s= Subject key identifier: 0D:D8:B0:4D:C8:FB:A8:B9:05:91:B3:C9:A1:7F:2C:5E:1B:FA:9D:CC Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 74 Signing time: Fri 17 May 2024 07:31:13 +0000 Manifest this update: Fri 17 May 2024 07:31:13 +0000 Manifest next update: Fri 24 May 2024 07:31:13 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: 16AXqfzj19ENfMzvrnZl4mQAwsUFt1nOWJakt8cPlso=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: p/1R6L71E7MMliC2/KdL4WY7SjgtWVvDAV3+jSxKkRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: May 17 07:31:13 2024 GMT Not After : May 24 07:31:13 2024 GMT Subject: CN=664707c1-e2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:f6:be:56:0d:f2:9f:2b:1f:ca:59:67:7d: 39:55:cb:59:4d:fa:f4:31:71:d9:43:c6:57:71:23: 46:54:b6:97:63:1e:b2:f4:2c:e9:53:dd:b4:6e:c0: b5:b7:60:35:55:9b:91:57:b9:fc:d4:80:7f:d5:e2: 04:a7:37:42:f6:2a:df:d4:8c:3e:36:b1:89:60:a3: 2d:20:67:1e:25:3a:de:c0:10:4e:fc:f7:a1:98:de: 46:f1:03:fa:51:75:42:48:f6:ca:cc:b2:4f:32:33: 27:7e:2b:86:92:f9:a1:1a:d7:a8:72:0f:cf:a5:4c: a5:68:98:8f:e6:e9:72:77:f0:73:26:c5:24:4d:90: b7:b9:fc:8e:8d:10:19:ce:be:3d:c6:e2:6a:c3:15: 47:66:9e:55:50:04:01:0d:81:0d:30:1f:74:d1:a5: be:2a:8a:80:33:14:ad:2d:d2:e6:b1:68:20:bc:d3: 78:e2:91:e1:ec:d8:cc:9b:fd:56:a7:b5:8c:eb:56: d1:a0:63:41:d3:07:1e:f8:95:5d:bd:21:2a:74:84: 43:bc:89:c9:32:37:2c:3e:71:bb:55:a7:92:6b:93: 56:ee:28:8e:6e:6a:b5:4f:7d:04:1d:24:2f:0f:1a: a6:2c:db:5f:5c:7e:51:8c:9e:71:f3:89:03:85:58: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D8:B0:4D:C8:FB:A8:B9:05:91:B3:C9:A1:7F:2C:5E:1B:FA:9D:CC X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:8b:e8:fc:d0:fc:19:61:b7:ec:da:69:99:96:8f:6a:f6:37: eb:14:ce:12:45:71:33:3a:53:bd:9d:f5:d8:30:8e:dc:bf:c1: e9:7d:bb:61:96:b9:50:d5:df:46:fa:be:f3:92:d5:c6:f4:25: bf:c9:9e:6e:43:ad:1a:7a:b7:0c:b2:87:66:b9:c7:a2:fd:35: f8:5e:e1:e9:19:d7:db:b3:85:f6:a1:57:28:5c:19:32:d0:5a: 04:ec:7e:27:61:25:32:7a:9a:3f:93:ec:cf:33:d4:4a:46:a5: b7:0e:79:85:cd:ae:43:f5:06:55:a7:a9:9a:62:11:b1:a4:e6: 0f:8e:be:36:e4:12:b2:0a:a8:4d:9f:01:ad:e7:5a:97:5d:81: c4:17:33:b7:7d:12:7c:c8:cf:37:9c:e5:04:2b:d4:10:cd:f7: 6c:d1:0c:37:58:ed:3d:a5:d9:a2:3c:39:54:41:3d:5f:c3:a4: 70:3c:e9:d7:82:cb:b1:82:90:53:7d:29:5e:e6:b1:f2:42:fe: 7f:c5:1b:18:a7:f6:61:31:dc:60:e0:69:6e:56:ac:ae:7c:20: 25:83:6f:6a:03:18:70:6d:32:d5:f8:21:62:79:0d:df:c7:f1: 5b:2c:21:8a:51:1d:47:cd:de:df:82:7d:54:ac:f1:83:37:32: 66:7f:d0:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Mjc0NDExMC8GA1UEBRMoQkQyMUJFOTgzMDc1NDI5MTZEODFFMEZFRDlGOEY1MzI0 MDQ5NDQ4MDAeFw0yNDA1MTcwNzMxMTNaFw0yNDA1MjQwNzMxMTNaMBgxFjAUBgNV BAMTDTY2NDcwN2MxLWUyZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsrPa+Vg3ynysfyllnfTlVy1lN+vQxcdlDxldxI0ZUtpdjHrL0LOlT3bRuwLW3 YDVVm5FXufzUgH/V4gSnN0L2Kt/UjD42sYlgoy0gZx4lOt7AEE7896GY3kbxA/pR dUJI9srMsk8yMyd+K4aS+aEa16hyD8+lTKVomI/m6XJ38HMmxSRNkLe5/I6NEBnO vj3G4mrDFUdmnlVQBAENgQ0wH3TRpb4qioAzFK0t0uaxaCC803jikeHs2Myb/Van tYzrVtGgY0HTBx74lV29ISp0hEO8ickyNyw+cbtVp5Jrk1buKI5uarVPfQQdJC8P GqYs219cflGMnnHziQOFWMrZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDdiwTcj7 qLkFkbPJoX8sXhv6ncwwHwYDVR0jBBgwFoAUvSG+mDB1QpFtgeD+2fj1MkBJRIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyNzQ0LzhFOEI5QzlFNjc0 NDExRUU4QTkyRjgzRkM0RjlBRTAyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlNHLW1EQjFRcEZ0Z2VELTJmajFNa0JKUklBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy NzQ0LzhFOEI5QzlFNjc0NDExRUU4QTkyRjgzRkM0RjlBRTAyL3ZTRy1tREIxUXBG dGdlRC0yZmoxTWtCSlJJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSL6PzQ/Blht+zaaZmWj2r2N+sUzhJFcTM6U72d9dgwjty/wel9u2GW uVDV30b6vvOS1cb0Jb/Jnm5DrRp6twyyh2a5x6L9Nfhe4ekZ19uzhfahVyhcGTLQ WgTsfidhJTJ6mj+T7M8z1EpGpbcOeYXNrkP1BlWnqZpiEbGk5g+OvjbkErIKqE2f Aa3nWpddgcQXM7d9EnzIzzec5QQr1BDN92zRDDdY7T2l2aI8OVRBPV/DpHA86deC y7GCkFN9KV7msfJC/n/FGxin9mEx3GDgaW5WrK58ICWDb2oDGHBtMtX4IWJ5Dd/H 8VssIYpRHUfN3t+CfVSs8YM3MmZ/0OA= -----END CERTIFICATE-----Generated at Fri May 17 08:13:50 2024 by rpki-client on console-fra.rpki-client.org