$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: pYtOriGXKlJPPFIP+6yr+XZGD3OLA05DlD7eek7ZlTA= Subject key identifier: D6:18:B3:E5:07:45:B9:C1:9D:F6:E3:84:21:8D:71:C4:A7:F4:F3:DC Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 0159 Signing time: Sat 09 Aug 2025 04:28:54 +0000 Manifest this update: Sat 09 Aug 2025 04:28:54 +0000 Manifest next update: Sat 16 Aug 2025 04:28:54 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: AutoTU/lc0qqBM3MFf1Q3Gk36Q8cTvCXEe1e62bygLQ=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: x/vokZty/crmgsj+VSX4fHVFgMXYejR0zhKZWQ63QXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Aug 9 04:28:54 2025 GMT Not After : Aug 16 04:28:54 2025 GMT Subject: CN=6896ce86-0c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d7:f0:c2:c7:ce:45:2c:78:58:24:e5:97:bb: 21:4d:07:41:17:3e:88:f1:5e:11:5b:a7:58:cc:b7: 4d:50:8d:2e:c6:e1:fb:4a:b7:41:e2:91:16:d8:e0: 62:e9:7f:f3:f1:5e:49:54:20:8f:0c:ec:a3:bd:f1: 6a:18:36:28:d4:55:1f:7f:24:1a:56:73:9d:ad:48: 30:e5:00:58:08:fd:1a:f3:5f:fd:08:b6:01:30:35: 7f:3e:02:af:81:c2:47:e3:d6:76:90:ac:bb:c1:5b: 16:95:95:86:83:7d:de:e2:ad:ff:a5:00:ff:91:ab: f8:90:35:56:67:08:e4:e9:4e:9a:23:38:f4:de:9f: b5:a1:99:93:fe:9c:dd:1c:75:07:30:eb:fb:5e:8e: 98:c8:f6:21:f1:e8:42:b1:5f:0b:52:1e:0c:81:1f: 15:cb:a8:38:b0:ac:fc:31:4b:c4:6b:5e:9f:5c:ac: 70:46:4a:64:4c:a8:f9:5c:bd:d3:c8:ab:ab:ed:4d: 11:5d:47:d1:73:d7:47:bd:bf:e3:4f:de:8e:97:06: 54:b3:5c:ed:2d:fc:46:7e:86:7f:21:9c:45:87:fa: e1:3e:ba:43:07:ae:f0:c5:fb:2e:4d:d0:ab:ed:d7: dc:f7:59:76:65:ba:c6:7a:fe:31:59:5f:d6:0e:fc: 47:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:18:B3:E5:07:45:B9:C1:9D:F6:E3:84:21:8D:71:C4:A7:F4:F3:DC X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:d4:f7:ab:eb:14:6d:9d:d3:5c:34:1b:b2:93:bc:70:04:52: 60:6d:b8:24:70:c9:06:79:3f:46:11:80:9a:3e:40:ee:b6:c0: 0c:26:0e:97:54:a4:29:4f:18:60:cd:30:ef:cd:49:77:a7:24: 66:3b:98:f6:ef:cd:59:45:e4:09:d2:de:4d:ee:e0:d5:cb:02: 51:e3:8c:52:a0:45:a2:de:7a:04:89:34:a5:0b:47:69:92:0f: c9:75:40:bc:91:d1:c3:44:7c:36:a8:2f:93:1c:b2:f0:ed:69: dd:e3:b1:94:c6:dc:73:3b:67:cd:c7:67:fb:00:5c:55:62:3c: 37:3b:91:db:17:6a:9d:fb:0c:c1:63:6a:d3:71:aa:c4:46:f7: 52:b9:7c:6c:c0:21:a1:ed:83:5e:5b:df:6c:26:e5:5f:07:14: 81:f4:7c:6a:94:9a:d0:f0:c6:16:dd:bf:52:ed:aa:17:ce:3a: c5:fb:16:da:b7:d0:fc:06:55:0b:4e:c0:0f:aa:43:09:cc:f5: a1:f3:9a:75:10:1b:c5:58:8f:3e:10:6d:e0:97:15:24:0c:aa: db:fb:05:8b:f3:35:6a:c7:6d:9b:dd:33:df:7a:2b:6e:c5:89: d9:9d:7a:47:da:48:7a:49:16:cc:0d:21:d4:43:b1:7a:ab:27: 27:cb:03:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy NDA0OTQ0ODAwHhcNMjUwODA5MDQyODU0WhcNMjUwODE2MDQyODU0WjAYMRYwFAYD VQQDEw02ODk2Y2U4Ni0wYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tfwwsfORSx4WCTll7shTQdBFz6I8V4RW6dYzLdNUI0uxuH7SrdB4pEW2OBi 6X/z8V5JVCCPDOyjvfFqGDYo1FUffyQaVnOdrUgw5QBYCP0a81/9CLYBMDV/PgKv gcJH49Z2kKy7wVsWlZWGg33e4q3/pQD/kav4kDVWZwjk6U6aIzj03p+1oZmT/pzd HHUHMOv7Xo6YyPYh8ehCsV8LUh4MgR8Vy6g4sKz8MUvEa16fXKxwRkpkTKj5XL3T yKur7U0RXUfRc9dHvb/jT96OlwZUs1ztLfxGfoZ/IZxFh/rhPrpDB67wxfsuTdCr 7dfc91l2ZbrGev4xWV/WDvxHOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYYs+UH RbnBnfbjhCGNccSn9PPcMB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3 NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFw RnRnZUQtMmZqMU1rQkpSSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH1Per6xRtndNcNBuyk7xwBFJgbbgkcMkGeT9GEYCaPkDutsAMJg6X VKQpTxhgzTDvzUl3pyRmO5j2781ZReQJ0t5N7uDVywJR44xSoEWi3noEiTSlC0dp kg/JdUC8kdHDRHw2qC+THLLw7Wnd47GUxtxzO2fNx2f7AFxVYjw3O5HbF2qd+wzB Y2rTcarERvdSuXxswCGh7YNeW99sJuVfBxSB9HxqlJrQ8MYW3b9S7aoXzjrF+xba t9D8BlULTsAPqkMJzPWh85p1EBvFWI8+EG3glxUkDKrb+wWL8zVqx22b3TPfeitu xYnZnXpH2kh6SRbMDSHUQ7F6qycnywNW -----END CERTIFICATE-----Generated at Sun Aug 10 16:04:23 2025 by rpki-client