$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: 47OsD7tv2CdF/QdxJDn7pEF9kzrdP++9SUv9zDwgUtQ= Subject key identifier: F7:CD:CB:45:B4:6E:F6:A9:D1:5A:66:1F:16:EE:24:DB:09:50:41:AB Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 0138 Signing time: Thu 05 Jun 2025 03:49:21 +0000 Manifest this update: Thu 05 Jun 2025 03:49:21 +0000 Manifest next update: Thu 12 Jun 2025 03:49:21 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: u4ql8JWfLLnP5ekVGpGaZRZC/Gf5ud4o3PrMSRzUZM4=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: x/vokZty/crmgsj+VSX4fHVFgMXYejR0zhKZWQ63QXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Jun 5 03:49:21 2025 GMT Not After : Jun 12 03:49:21 2025 GMT Subject: CN=684113c1-85d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:32:77:3b:9d:25:ff:90:d8:fc:f1:2d:3d: ac:a5:43:72:44:d1:c8:7d:1e:d9:50:7f:bc:e8:e1: 8f:03:45:e5:15:60:19:20:89:d5:a2:1f:42:4a:a3: a8:4c:23:26:72:75:ed:2e:5d:7a:49:f2:0b:b9:fa: 58:9b:6e:87:b2:11:b9:58:3f:0a:46:03:53:f3:30: ee:6d:e6:21:02:6c:25:a4:f6:ea:2e:c9:a6:6b:20: 6c:e1:30:a4:fb:4d:77:ae:f2:5a:0a:b7:47:5f:c0: 1e:17:db:61:f1:05:70:84:d3:bf:20:12:44:e8:29: 34:0c:b7:5f:fd:1c:22:ce:44:b4:ba:e5:7a:f0:d5: a6:da:f1:8a:08:96:52:a3:9b:59:b3:34:3f:ab:e2: 59:16:09:76:89:b1:44:9a:d8:9b:46:a0:41:7b:5c: a5:dc:e8:b3:ad:df:df:3a:78:3d:a1:62:d4:0b:70: 5d:ee:1e:35:ad:71:b6:42:0a:42:94:c8:1a:21:0b: 70:b8:60:96:e6:e1:fb:cf:67:55:cc:be:32:e3:c7: a5:06:96:52:8d:23:e1:b1:bd:91:f1:7a:cf:8f:c8: a3:87:8d:ac:29:43:83:9a:ef:69:14:51:4a:f4:18: 87:34:a2:b4:12:2c:7e:52:09:90:e2:eb:47:22:b7: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:CB:45:B4:6E:F6:A9:D1:5A:66:1F:16:EE:24:DB:09:50:41:AB X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c3:3e:a7:d7:d5:53:e4:59:02:43:56:7a:22:e6:ba:ef:e9: bf:7e:35:09:4e:f3:f3:b1:98:3b:ba:4f:60:24:7e:ab:32:f4: 64:d3:9c:60:a9:ef:29:4a:8b:f9:35:36:88:67:a1:40:4b:17: c2:ef:86:e2:3e:d7:29:19:e4:64:22:a8:6a:41:ec:35:51:42: ad:dd:ad:c0:c5:7b:8e:68:24:4b:64:3f:e3:9c:35:2f:5a:59: 6c:b5:1c:3d:2a:96:50:97:cd:3e:90:39:e2:0c:be:69:93:9a: 0c:c2:b5:de:b6:2e:75:55:fa:03:15:ac:3f:3f:19:01:c4:dd: c0:de:fc:bf:84:13:c2:db:85:bf:73:d3:66:3a:f3:7b:74:ef: b2:8e:58:1f:b9:7e:16:e1:60:d5:66:a2:0c:56:fc:03:cc:9c: 4f:98:8c:53:51:4c:2a:fe:4b:5c:de:f0:c8:0e:dd:dd:f4:da: 5d:78:12:2c:3d:aa:49:d4:7a:72:14:ba:53:56:9f:74:d8:6c: 90:9a:e9:c3:d7:d0:55:9e:cc:fc:1c:d3:42:9b:c9:d6:fb:68: 72:8f:25:b0:f8:3a:27:4c:0b:e2:d1:f0:c2:ec:dd:bc:86:92: 27:c2:8f:fe:86:c1:07:80:01:cf:4c:dd:97:1b:30:7c:5b:5d: 8d:70:f2:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy NDA0OTQ0ODAwHhcNMjUwNjA1MDM0OTIxWhcNMjUwNjEyMDM0OTIxWjAYMRYwFAYD VQQDEw02ODQxMTNjMS04NWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxsydzudJf+Q2PzxLT2spUNyRNHIfR7ZUH+86OGPA0XlFWAZIInVoh9CSqOo TCMmcnXtLl16SfILufpYm26HshG5WD8KRgNT8zDubeYhAmwlpPbqLsmmayBs4TCk +013rvJaCrdHX8AeF9th8QVwhNO/IBJE6Ck0DLdf/RwizkS0uuV68NWm2vGKCJZS o5tZszQ/q+JZFgl2ibFEmtibRqBBe1yl3Oizrd/fOng9oWLUC3Bd7h41rXG2QgpC lMgaIQtwuGCW5uH7z2dVzL4y48elBpZSjSPhsb2R8XrPj8ijh42sKUODmu9pFFFK 9BiHNKK0Eix+UgmQ4utHIre0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfNy0W0 bvap0VpmHxbuJNsJUEGrMB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3 NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFw RnRnZUQtMmZqMU1rQkpSSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7wz6n19VT5FkCQ1Z6Iua67+m/fjUJTvPzsZg7uk9gJH6rMvRk05xg qe8pSov5NTaIZ6FASxfC74biPtcpGeRkIqhqQew1UUKt3a3AxXuOaCRLZD/jnDUv WllstRw9KpZQl80+kDniDL5pk5oMwrXeti51VfoDFaw/PxkBxN3A3vy/hBPC24W/ c9NmOvN7dO+yjlgfuX4W4WDVZqIMVvwDzJxPmIxTUUwq/ktc3vDIDt3d9NpdeBIs PapJ1HpyFLpTVp902GyQmunD19BVnsz8HNNCm8nW+2hyjyWw+DonTAvi0fDC7N28 hpInwo/+hsEHgAHPTN2XGzB8W12NcPIn -----END CERTIFICATE-----Generated at Sat Jun 7 05:34:16 2025 by rpki-client