$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: c3F5xDrM/D+zDab9096SaZaYg0mqQ00CNFhSv1kXT98= Subject key identifier: EE:44:73:9B:DC:44:EC:F7:13:96:9D:62:3B:38:3F:17:F4:A8:B0:A8 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DCA Signing time: Sat 14 Jun 2025 17:48:56 +0000 Manifest this update: Sat 14 Jun 2025 17:48:56 +0000 Manifest next update: Sat 21 Jun 2025 17:48:56 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: CHaIfuWnu40IC9Xr+LmRBsB/MBan/8xoU8dTeaZuHzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3542 (0xdd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Jun 14 17:48:56 2025 GMT Not After : Jun 21 17:48:56 2025 GMT Subject: CN=684db608-3945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:7d:20:29:7d:b8:f4:f4:1f:f8:45:6e:83: 7a:5d:e5:1b:81:38:57:5a:08:fe:2b:a3:38:e8:5e: b7:c3:68:5e:4a:5c:35:29:87:c7:51:61:4e:89:1a: 2e:ae:b2:18:0a:89:70:9c:b9:cd:a9:8f:d6:27:41: 49:c6:95:4e:d2:d1:84:80:ad:44:cb:71:92:3b:ae: c6:51:29:33:ff:cc:cd:21:56:fb:b6:83:76:3f:81: 07:df:5c:66:37:92:fa:80:2b:86:46:96:3c:fa:db: dc:2d:7f:30:78:d3:51:64:37:07:ce:dc:3b:1f:ff: e6:c5:14:51:44:00:78:a6:ee:c9:ec:ab:4f:d9:39: 90:a1:35:aa:5f:b8:19:16:de:e5:48:47:d9:0b:15: 0c:90:d6:0f:48:5e:a4:fd:c1:fc:14:00:b7:9d:09: 6d:a5:1a:9d:58:5b:90:3c:ef:eb:35:1f:25:97:bf: 1d:a8:83:6d:41:8c:bc:13:7a:b6:1a:a5:2f:64:65: d5:6a:22:3f:09:6c:44:de:11:84:23:86:4f:5c:33: 59:a8:34:3b:42:56:62:8e:4e:11:d2:6a:74:ff:eb: d7:5b:96:34:68:ec:90:13:87:6c:79:df:d7:3b:87: d0:cd:5f:03:84:92:d9:60:d1:99:62:1a:13:ce:ee: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:44:73:9B:DC:44:EC:F7:13:96:9D:62:3B:38:3F:17:F4:A8:B0:A8 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:69:72:52:04:b8:44:70:17:13:b0:18:96:9c:84:82:e8:b7: a1:df:08:dd:2b:41:63:9f:6d:f9:9f:8f:44:2d:c2:10:92:f8: 5e:1f:4c:d2:be:42:0e:7b:91:ae:8d:a0:b3:cc:d3:bf:9d:ae: 0f:c0:af:e8:cb:f4:c9:c9:fe:81:5a:3d:85:e1:28:4b:ce:e6: ab:8d:4e:8b:6c:fd:54:34:0e:e1:5e:6b:02:2d:dc:6b:81:28: 1b:c4:b6:48:02:80:ec:b6:83:3e:f6:de:eb:37:ec:e5:0c:28: f0:22:2e:ae:7e:f2:53:bd:1d:f2:fc:23:05:28:10:e2:63:93: c2:26:9f:61:68:2c:38:01:e4:ee:84:07:33:b7:7d:bc:34:5a: c2:3a:b7:e1:0b:00:97:a7:1b:48:d2:15:4e:aa:c3:f9:84:2c: 2c:92:3d:e8:93:3b:78:10:e5:dc:87:81:34:7a:d3:03:d8:7c: 9a:2e:6d:6c:c5:7b:7a:88:dc:0e:25:de:f9:0b:14:f5:16:2b: 3e:e5:55:15:02:00:2f:4a:e3:fb:e8:44:09:c8:be:2c:e3:ca: cd:61:d3:84:a6:90:90:f1:d2:09:5e:51:aa:73:6d:5a:99:e0: 8a:f7:8d:e6:38:b3:50:16:3f:f6:a2:2f:38:d1:3d:83:11:25: cc:4b:f2:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwNjE0MTc0ODU2WhcNMjUwNjIxMTc0ODU2WjAYMRYwFAYD VQQDEw02ODRkYjYwOC0zOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFF9ICl9uPT0H/hFboN6XeUbgThXWgj+K6M46F63w2heSlw1KYfHUWFOiRou rrIYColwnLnNqY/WJ0FJxpVO0tGEgK1Ey3GSO67GUSkz/8zNIVb7toN2P4EH31xm N5L6gCuGRpY8+tvcLX8weNNRZDcHztw7H//mxRRRRAB4pu7J7KtP2TmQoTWqX7gZ Ft7lSEfZCxUMkNYPSF6k/cH8FAC3nQltpRqdWFuQPO/rNR8ll78dqINtQYy8E3q2 GqUvZGXVaiI/CWxE3hGEI4ZPXDNZqDQ7QlZijk4R0mp0/+vXW5Y0aOyQE4dsed/X O4fQzV8DhJLZYNGZYhoTzu7muQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5Ec5vc ROz3E5adYjs4Pxf0qLCoMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqaXJSBLhEcBcTsBiWnISC6Leh3wjdK0Fjn235n49ELcIQkvheH0zS vkIOe5GujaCzzNO/na4PwK/oy/TJyf6BWj2F4ShLzuarjU6LbP1UNA7hXmsCLdxr gSgbxLZIAoDstoM+9t7rN+zlDCjwIi6ufvJTvR3y/CMFKBDiY5PCJp9haCw4AeTu hAczt328NFrCOrfhCwCXpxtI0hVOqsP5hCwskj3okzt4EOXch4E0etMD2HyaLm1s xXt6iNwOJd75CxT1Fis+5VUVAgAvSuP76EQJyL4s48rNYdOEppCQ8dIJXlGqc21a meCK943mOLNQFj/2oi840T2DESXMS/IW -----END CERTIFICATE-----Generated at Sun Jun 15 20:49:12 2025 by rpki-client