$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: 5F0ZUuFjbULIjiDbTr/osBGdoy2p+ya4FUo6gkTadio= Subject key identifier: 17:A3:4E:09:0C:35:E1:64:86:B4:5D:CA:CC:AD:E4:7E:CE:C1:76:86 Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 01C2 Signing time: Sun 01 Mar 2026 04:33:57 +0000 Manifest this update: Sun 01 Mar 2026 04:33:57 +0000 Manifest next update: Sun 08 Mar 2026 04:33:57 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: ki6WLPgg0ZBKeMtotfB2/SgLXOTEzWG/E7fauF6sPLI=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: 5gAJJRBRn1JiRkSO3BYVHdZp264ZDCsxiRqebhsoeCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Mar 1 04:33:57 2026 GMT Not After : Mar 8 04:33:57 2026 GMT Subject: CN=69a3c1b5-66c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:09:9c:41:ca:d5:35:60:9b:a1:06:d4:e6: 1a:c0:87:c6:77:59:10:02:77:57:34:ab:1b:94:8d: a5:1c:5d:27:99:9b:23:58:d6:2c:a7:f7:19:f7:30: a3:c6:a3:92:7e:e5:14:5a:83:66:a9:6e:90:e6:42: af:e5:c9:66:e1:20:5a:2a:72:64:6d:3c:0b:2d:2c: d4:b1:7e:58:e0:e4:aa:60:39:c8:85:65:44:f7:6d: bd:0b:ae:74:b4:f2:73:67:7d:33:d8:be:99:4d:13: 05:b0:26:79:1d:51:b1:9a:f0:46:fc:ab:8c:d6:41: dc:28:18:58:0b:b2:e7:d2:eb:76:cc:6c:6e:72:56: f1:ee:a6:db:d0:01:17:d0:74:c0:72:5d:ec:ed:87: dd:57:66:d5:73:5b:4e:76:9a:4c:03:3f:c6:bd:50: a7:c5:a9:e7:01:6e:03:1c:4f:4a:7e:05:c9:a6:01: 7e:bc:8a:b5:37:47:53:13:f7:f2:9f:e3:4a:05:a0: 44:19:8e:4c:02:fa:69:c4:cf:61:5c:ab:bb:2c:1f: 11:a5:ff:30:42:ad:85:cf:ff:0f:fb:81:cc:59:33: 4e:5a:e3:70:2f:cf:b7:db:19:f9:31:52:34:f8:19: 0c:8c:b9:2e:a7:e6:da:c2:ff:47:ae:2b:df:bc:c8: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:4E:09:0C:35:E1:64:86:B4:5D:CA:CC:AD:E4:7E:CE:C1:76:86 X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:80:7e:d8:27:1f:74:38:cf:03:2e:7f:44:15:d2:08:42:16: 0e:0e:7e:ef:2c:a5:c3:48:60:2b:42:94:37:72:be:76:d7:44: bc:45:a9:e0:48:ac:06:ba:0c:52:3c:cd:a0:fd:1c:5e:54:0f: 9b:97:7a:f1:6a:9d:ce:64:bd:42:be:6d:6b:55:f3:ba:88:8d: c1:31:28:63:1c:de:6a:9d:47:fb:e1:81:a4:6f:79:dc:0c:bc: fe:64:0c:37:80:db:ba:83:52:dd:0e:de:94:aa:02:ca:d0:a9: c0:fb:fd:bf:8a:2b:f1:65:5c:85:30:e4:25:e8:f5:e9:13:d2: a5:53:09:c7:e8:ff:2f:b2:7b:49:a6:6a:df:8a:db:54:e7:1d: ef:d4:02:5b:71:1d:de:3f:1f:b7:4a:65:25:3a:6d:d0:c9:f4: 36:b8:38:79:61:4d:85:49:7c:43:da:9f:93:ac:75:e9:c1:ed: 55:8c:21:e0:80:32:67:92:57:d5:20:32:31:28:fb:09:c3:90: 4b:ab:d7:53:dc:34:e9:8f:f1:db:da:80:84:c0:0a:50:3e:6f: 3f:f9:72:07:d6:eb:9e:f2:21:eb:dd:85:b1:4c:40:ed:f9:0b: aa:91:fc:cb:ab:1d:18:26:0d:ce:77:c6:96:e5:ba:02:aa:e5: 15:19:00:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy NDA0OTQ0ODAwHhcNMjYwMzAxMDQzMzU3WhcNMjYwMzA4MDQzMzU3WjAYMRYwFAYD VQQDDA02OWEzYzFiNS02NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYcJnEHK1TVgm6EG1OYawIfGd1kQAndXNKsblI2lHF0nmZsjWNYsp/cZ9zCj xqOSfuUUWoNmqW6Q5kKv5clm4SBaKnJkbTwLLSzUsX5Y4OSqYDnIhWVE9229C650 tPJzZ30z2L6ZTRMFsCZ5HVGxmvBG/KuM1kHcKBhYC7Ln0ut2zGxuclbx7qbb0AEX 0HTAcl3s7YfdV2bVc1tOdppMAz/GvVCnxannAW4DHE9KfgXJpgF+vIq1N0dTE/fy n+NKBaBEGY5MAvppxM9hXKu7LB8Rpf8wQq2Fz/8P+4HMWTNOWuNwL8+32xn5MVI0 +BkMjLkup+bawv9HrivfvMiI+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBejTgkM NeFkhrRdysyt5H7OwXaGMB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3 NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFw RnRnZUQtMmZqMU1rQkpSSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuYB+2CcfdDjPAy5/RBXSCEIWDg5+7yylw0hgK0KUN3K+dtdEvEWp4EisBroM UjzNoP0cXlQPm5d68WqdzmS9Qr5ta1XzuoiNwTEoYxzeap1H++GBpG953Ay8/mQM N4DbuoNS3Q7elKoCytCpwPv9v4or8WVchTDkJej16RPSpVMJx+j/L7J7SaZq34rb VOcd79QCW3Ed3j8ft0plJTpt0Mn0Nrg4eWFNhUl8Q9qfk6x16cHtVYwh4IAyZ5JX 1SAyMSj7CcOQS6vXU9w06Y/x29qAhMAKUD5vP/lyB9brnvIh692FsUxA7fkLqpH8 y6sdGCYNznfGluW6AqrlFRkAMQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:55:33 2026 by rpki-client