$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json) Hash identifier: gFz3C9NWOESYo8z3gkxlrZRJQJYGB9lqKL9EBgBtzgA= Subject key identifier: 07:63:EA:14:14:95:C5:61:01:50:44:77:17:59:EC:D3:4C:DB:C6:F3 Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft Manifest number: 0160 Signing time: Sat 23 Aug 2025 04:09:16 +0000 Manifest this update: Sat 23 Aug 2025 04:09:15 +0000 Manifest next update: Sat 30 Aug 2025 04:09:15 +0000 Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: owBWXw6xdorxFR6qZbpd+BWoePm5xvI3ThuNUEVNxNU=) 2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: x/vokZty/crmgsj+VSX4fHVFgMXYejR0zhKZWQ63QXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480 Validity Not Before: Aug 23 04:09:15 2025 GMT Not After : Aug 30 04:09:15 2025 GMT Subject: CN=68a93eeb-50be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:e9:e6:97:b9:7a:c8:48:fa:59:48:38:07: 65:27:de:0b:10:94:80:c1:77:7c:c9:7a:de:d6:fe: fd:1f:07:14:31:7d:61:6b:1a:92:14:b9:cd:b6:72: 1a:4d:94:5d:e5:a1:4e:7f:de:17:88:b2:3a:57:9d: 07:80:51:be:c6:88:0c:22:0c:c0:f9:c6:12:63:4c: f4:a1:a3:3f:c9:60:cf:1b:ae:38:9a:72:29:26:52: 4b:37:ef:59:05:9f:00:8a:95:25:c4:5a:f8:3e:fc: cc:5b:6b:62:4f:6d:e7:39:e9:ae:c4:17:1f:2f:c6: 63:0d:bd:58:be:e8:d1:68:79:5e:84:75:30:7a:15: 50:1d:55:6d:fd:c3:fa:ab:e4:86:e6:f9:5a:d0:d2: 9e:4f:8c:97:d6:47:ca:65:a9:44:09:76:0d:0d:73: eb:fe:e8:23:75:77:a8:24:6b:dd:0d:63:bf:4e:e5: a1:fd:65:5d:39:98:ff:3c:81:88:26:6d:d2:56:c1: af:6b:2f:dc:35:b2:c6:a9:62:c2:93:3c:9a:66:78: 3d:43:cc:39:0b:5f:cb:10:3c:63:f0:78:45:64:53: 2a:17:df:81:10:04:9c:70:23:5d:ac:cd:a9:a9:08: 19:bc:e7:21:7b:4c:31:62:75:aa:4c:70:10:65:fb: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:EA:14:14:95:C5:61:01:50:44:77:17:59:EC:D3:4C:DB:C6:F3 X509v3 Authority Key Identifier: keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:46:e2:37:83:ae:8a:e2:77:ff:32:3b:f4:e2:49:68:ef:c4: a7:ae:10:a4:96:77:b7:2e:de:b7:69:28:66:fc:2e:d6:2d:3f: a8:de:dc:7a:c7:33:34:7c:c0:d4:46:b6:91:13:3e:77:59:c5: dc:ca:90:e0:79:96:51:f0:32:30:91:a6:e7:35:24:1d:e8:95: ca:d7:72:2e:46:4b:a4:1b:2f:74:32:fe:c9:b5:39:0d:e0:43: 70:f9:8e:69:b4:e7:df:31:13:42:bb:6e:f6:13:8e:6a:b2:76: 28:f3:70:29:b8:de:b4:14:4a:96:71:45:fa:ee:a8:a6:cf:88: 67:67:68:f9:74:32:14:e9:1f:07:fb:af:03:92:12:00:ed:a3: 19:7d:df:b4:84:9d:b0:66:f7:65:c7:e0:84:e4:3a:3c:47:00: 52:14:d0:6e:da:c9:b5:d5:bb:b6:5c:02:c3:7c:cf:bd:8d:f9: 07:1b:c2:b3:c9:c3:86:f6:d9:41:51:63:00:b1:34:01:98:a5: 5d:96:97:56:85:9d:89:a2:6b:9d:d3:d9:98:1c:05:cd:e7:4c: 8a:ca:68:b8:85:09:eb:f2:5a:d4:3c:9e:06:1a:43:65:21:45: 55:31:21:b2:9f:ae:a9:42:f9:11:6c:df:b3:9d:e7:13:44:fe: 6c:f4:b4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI3NDQxMTAvBgNVBAUTKEJEMjFCRTk4MzA3NTQyOTE2RDgxRTBGRUQ5RjhGNTMy NDA0OTQ0ODAwHhcNMjUwODIzMDQwOTE1WhcNMjUwODMwMDQwOTE1WjAYMRYwFAYD VQQDEw02OGE5M2VlYi01MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJzp5pe5eshI+llIOAdlJ94LEJSAwXd8yXre1v79HwcUMX1haxqSFLnNtnIa TZRd5aFOf94XiLI6V50HgFG+xogMIgzA+cYSY0z0oaM/yWDPG644mnIpJlJLN+9Z BZ8AipUlxFr4PvzMW2tiT23nOemuxBcfL8ZjDb1YvujRaHlehHUwehVQHVVt/cP6 q+SG5vla0NKeT4yX1kfKZalECXYNDXPr/ugjdXeoJGvdDWO/TuWh/WVdOZj/PIGI Jm3SVsGvay/cNbLGqWLCkzyaZng9Q8w5C1/LEDxj8HhFZFMqF9+BEASccCNdrM2p qQgZvOche0wxYnWqTHAQZftH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdj6hQU lcVhAVBEdxdZ7NNM28bzMB8GA1UdIwQYMBaAFL0hvpgwdUKRbYHg/tn49TJASUSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjc0NC84RThCOUM5RTY3 NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFwRnRnZUQtMmZqMU1rQkpS SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTRy1tREIxUXBGdGdlRC0yZmoxTWtCSlJJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Mjc0NC84RThCOUM5RTY3NDQxMUVFOEE5MkY4M0ZDNEY5QUUwMi92U0ctbURCMVFw RnRnZUQtMmZqMU1rQkpSSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDERuI3g66K4nf/Mjv04klo78SnrhCklne3Lt63aShm/C7WLT+o3tx6 xzM0fMDURraREz53WcXcypDgeZZR8DIwkabnNSQd6JXK13IuRkukGy90Mv7JtTkN 4ENw+Y5ptOffMRNCu272E45qsnYo83ApuN60FEqWcUX67qimz4hnZ2j5dDIU6R8H +68DkhIA7aMZfd+0hJ2wZvdlx+CE5Do8RwBSFNBu2sm11bu2XALDfM+9jfkHG8Kz ycOG9tlBUWMAsTQBmKVdlpdWhZ2Jomud09mYHAXN50yKymi4hQnr8lrUPJ4GGkNl IUVVMSGyn66pQvkRbN+znecTRP5s9LS5 -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:21 2025 by rpki-client