$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: Xh7jTBoLLhdm5r4XQCXk6TdgzKefcrLzxvyNV3CiQIY= Subject key identifier: 5A:AB:FC:14:C3:7D:8B:B3:DC:4B:FE:21:F9:A9:6C:C1:2A:40:18:86 Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 0124 Signing time: Fri 25 Apr 2025 03:47:30 +0000 Manifest this update: Fri 25 Apr 2025 03:47:29 +0000 Manifest next update: Fri 02 May 2025 03:47:29 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: 0rfB/nGzHtwgFK92rL2t14ORqXOru5sQf9T4Wg51eLs=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: x/vokZty/crmgsj+VSX4fHVFgMXYejR0zhKZWQ63QXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Apr 25 03:47:29 2025 GMT Not After : May 2 03:47:29 2025 GMT Subject: CN=680b05d1-2984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:ee:2e:ac:7b:a9:05:35:63:b9:ed:70:26: b0:6d:7b:9f:06:0a:24:d5:86:ea:bd:ca:dc:94:e1: 83:2c:cd:99:1d:0c:60:7e:95:84:f4:c6:4b:6e:d7: ec:8c:56:f5:ad:c4:6a:69:8d:05:20:d7:fa:74:45: 6d:72:0a:a5:28:56:92:bd:04:3e:94:1f:39:08:4a: 62:de:1b:2e:35:17:48:34:c6:4f:03:b7:2c:54:ec: 8f:3f:de:41:51:14:a1:77:6c:32:bc:52:81:c7:2d: 53:44:20:15:00:35:f0:11:47:83:2c:54:09:fc:bd: 74:ce:00:37:dc:85:ef:d0:fe:48:31:55:00:7e:18: 9e:dc:80:9a:0a:ae:d0:07:1a:80:b4:85:88:ce:f6: 9e:24:f4:b7:7d:95:67:78:f5:60:27:f7:e8:a9:df: d7:13:a3:5e:56:0e:47:e8:8b:95:e4:cb:c7:ea:ef: fb:26:6d:6e:49:a2:7e:4f:6d:6f:fc:a2:de:25:a8: de:c0:c7:2a:a4:01:fd:44:1f:bc:52:44:10:0a:d6: 2c:53:2d:47:6c:6c:31:30:da:8d:d0:07:13:8c:b1: 9b:e9:55:3b:35:7d:75:96:f3:7c:a0:f7:c8:13:75: c2:8c:fd:e7:6b:71:f9:46:e5:0a:2e:68:67:be:09: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AB:FC:14:C3:7D:8B:B3:DC:4B:FE:21:F9:A9:6C:C1:2A:40:18:86 X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:26:d3:f2:7e:ae:e9:a9:17:6d:99:8a:89:c0:29:d0:20:9b: a4:b7:e5:3c:2f:e6:7e:f9:32:6f:a5:c7:1a:e1:f3:b1:69:26: e1:36:be:dc:e3:b6:d5:33:35:e9:49:f6:f0:34:15:cc:3d:5a: 15:94:8b:3b:5c:f4:49:d9:3c:8a:96:50:ff:64:16:1c:3e:0d: 6b:46:1b:12:2e:02:b6:30:fe:0c:07:0a:f6:ef:01:51:43:1c: 4b:3a:44:bd:ea:d6:af:e2:41:4f:d2:cf:70:58:84:c9:9c:69: 20:0a:02:b9:aa:68:90:b5:fa:e2:a8:ac:10:b3:3b:1b:05:d1: f2:36:ae:de:81:9e:d4:c0:18:2f:b5:1a:0b:54:57:cb:7d:de: 42:e0:f9:00:08:c8:27:e8:90:2d:26:89:28:6f:c2:65:c9:b0: 29:42:9d:06:bf:b1:07:ef:f4:33:06:e0:15:ef:de:5a:1f:e1: cc:7d:1b:92:fc:0f:3f:94:dd:35:2e:9a:e8:c9:fe:0f:7e:ae: 8c:e0:6e:3b:6c:88:95:cb:ed:5a:36:c8:b9:e8:b3:2b:bd:d5: 7d:4f:ed:6e:a5:6d:0f:7c:84:ea:f8:db:c5:de:ce:47:3e:f9: 16:c4:0a:4f:ef:71:c2:a8:5e:c6:ac:99:5b:71:c4:9e:41:d6: 3c:27:a3:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy NDA0OTQ0ODAwHhcNMjUwNDI1MDM0NzI5WhcNMjUwNTAyMDM0NzI5WjAYMRYwFAYD VQQDEw02ODBiMDVkMS0yOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jvuLqx7qQU1Y7ntcCawbXufBgok1YbqvcrclOGDLM2ZHQxgfpWE9MZLbtfs jFb1rcRqaY0FINf6dEVtcgqlKFaSvQQ+lB85CEpi3hsuNRdINMZPA7csVOyPP95B URShd2wyvFKBxy1TRCAVADXwEUeDLFQJ/L10zgA33IXv0P5IMVUAfhie3ICaCq7Q BxqAtIWIzvaeJPS3fZVnePVgJ/foqd/XE6NeVg5H6IuV5MvH6u/7Jm1uSaJ+T21v /KLeJajewMcqpAH9RB+8UkQQCtYsUy1HbGwxMNqN0AcTjLGb6VU7NX11lvN8oPfI E3XCjP3na3H5RuUKLmhnvgkRFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqr/BTD fYuz3Ev+IfmpbMEqQBiGMB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3 NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFw RnRnZUQtMmZqMU1rQkpSSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlJtPyfq7pqRdtmYqJwCnQIJukt+U8L+Z++TJvpcca4fOxaSbhNr7c 47bVMzXpSfbwNBXMPVoVlIs7XPRJ2TyKllD/ZBYcPg1rRhsSLgK2MP4MBwr27wFR QxxLOkS96tav4kFP0s9wWITJnGkgCgK5qmiQtfriqKwQszsbBdHyNq7egZ7UwBgv tRoLVFfLfd5C4PkACMgn6JAtJokob8JlybApQp0Gv7EH7/QzBuAV795aH+HMfRuS /A8/lN01Lproyf4Pfq6M4G47bIiVy+1aNsi56LMrvdV9T+1upW0PfITq+NvF3s5H PvkWxApP73HCqF7GrJlbccSeQdY8J6Nv -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:28 2025 by rpki-client