$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: 1RXjJTgBM/CmmpiniQjE/nT8Y+4S74n1T4/tqaJWnMs= Subject key identifier: 3F:79:B6:48:87:C7:45:19:1E:02:04:98:76:5C:F2:1C:6D:34:B6:13 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DAC Signing time: Thu 24 Apr 2025 17:53:43 +0000 Manifest this update: Thu 24 Apr 2025 17:53:42 +0000 Manifest next update: Thu 01 May 2025 17:53:42 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: sa6S6VoOXmR3YLTzPXfBDVn8aTUeNGDMR29Ayni8v3c=) 2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: nQHZt5It8SSChaUZjXVPwYBj8P2XFpk/UxoBS65SjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3510 (0xdb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Apr 24 17:53:42 2025 GMT Not After : May 1 17:53:42 2025 GMT Subject: CN=680a7aa6-c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:d0:09:30:ea:39:61:6d:0c:bc:47:e2:67: a9:54:7e:c9:17:8d:c5:68:26:51:87:09:bd:bf:43: 1b:d4:86:dd:eb:b2:27:87:c2:32:4c:19:37:c3:63: 64:6e:05:c4:89:cd:bf:9b:0b:63:c0:50:d8:25:10: 28:5a:1a:88:94:6e:23:78:5c:8b:3e:04:67:49:57: 98:6b:de:78:8f:e9:4c:17:f0:27:27:eb:5b:7d:a0: e1:ec:8d:0c:29:d4:af:c1:44:d5:64:78:80:e0:04: 04:6b:49:dc:0a:da:88:fc:cb:38:d8:36:72:9c:bd: 7a:f7:df:dc:b4:8d:ca:34:1a:28:ee:80:58:39:d8: 9a:86:4b:5b:52:4c:29:5f:fc:e7:e3:c7:02:5e:15: f3:4c:37:4c:04:1d:dd:d8:6b:67:8a:25:71:6f:b1: ef:a6:0d:f4:ab:6a:c1:67:8b:45:6d:7c:88:9f:27: 49:92:ab:55:1f:7f:2d:5f:16:42:9e:6f:ef:cc:0b: e5:56:19:61:cd:2b:9f:ef:be:7f:bb:bf:f7:47:0e: f0:14:76:65:99:d5:b3:ba:7b:8a:4d:9a:82:67:92: ed:d8:20:c3:2c:19:aa:44:77:4f:b4:d2:ce:f8:f8: c3:62:f2:0e:e7:7f:ad:6a:0b:3d:51:40:59:87:4c: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:B6:48:87:C7:45:19:1E:02:04:98:76:5C:F2:1C:6D:34:B6:13 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:47:59:1b:6f:df:82:c8:72:73:e4:14:f3:ae:f8:49:80: d0:d4:d7:06:e7:5d:bf:ed:00:ed:3a:07:79:ed:f8:38:45:1e: da:f6:56:ca:b4:fb:b7:2e:c9:40:5f:8d:43:83:1a:9f:47:b0: df:fe:de:77:6f:1c:90:82:0e:c0:9b:e0:37:2d:63:35:c8:b4: ae:70:9b:1a:3e:fc:36:85:65:b2:ea:c4:76:37:0e:f8:34:8f: c1:97:7f:d3:f3:52:55:0b:79:66:44:68:f3:0a:cd:c8:dc:27: 1c:a5:ce:6c:98:82:53:3e:de:02:a5:67:e5:72:a8:12:a1:d9: 0a:93:b6:43:72:a3:61:4f:d4:a3:2f:6a:61:19:db:49:30:3e: 17:80:ab:c6:5e:7f:2c:1a:9c:b7:c9:f8:3e:ce:ed:44:32:4a: d4:31:95:65:fa:fd:18:3c:9b:d8:ea:60:91:73:56:3b:97:e6: 33:53:cf:9e:68:15:f9:bb:67:c6:a2:cc:45:77:61:62:17:5b: 69:c6:8d:5d:96:f5:a1:bf:78:a1:4a:62:ed:e5:30:5c:ed:bf: c7:7d:e7:cb:18:77:40:45:46:cd:49:70:16:ac:4a:19:17:22: 80:ef:b0:49:3b:83:c0:e0:0e:1e:ba:cc:53:91:33:90:4e:0b: af:05:f3:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwNDI0MTc1MzQyWhcNMjUwNTAxMTc1MzQyWjAYMRYwFAYD VQQDEw02ODBhN2FhNi1jMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKvQCTDqOWFtDLxH4mepVH7JF43FaCZRhwm9v0Mb1Ibd67Inh8IyTBk3w2Nk bgXEic2/mwtjwFDYJRAoWhqIlG4jeFyLPgRnSVeYa954j+lMF/AnJ+tbfaDh7I0M KdSvwUTVZHiA4AQEa0ncCtqI/Ms42DZynL1699/ctI3KNBoo7oBYOdiahktbUkwp X/zn48cCXhXzTDdMBB3d2GtniiVxb7Hvpg30q2rBZ4tFbXyInydJkqtVH38tXxZC nm/vzAvlVhlhzSuf775/u7/3Rw7wFHZlmdWzunuKTZqCZ5Lt2CDDLBmqRHdPtNLO +PjDYvIO53+tags9UUBZh0wShwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD95tkiH x0UZHgIEmHZc8hxtNLYTMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMa0dZG2/fgshyc+QU8674SYDQ1NcG512/7QDtOgd57fg4RR7a9lbK tPu3LslAX41DgxqfR7Df/t53bxyQgg7Am+A3LWM1yLSucJsaPvw2hWWy6sR2Nw74 NI/Bl3/T81JVC3lmRGjzCs3I3Cccpc5smIJTPt4CpWflcqgSodkKk7ZDcqNhT9Sj L2phGdtJMD4XgKvGXn8sGpy3yfg+zu1EMkrUMZVl+v0YPJvY6mCRc1Y7l+YzU8+e aBX5u2fGosxFd2FiF1tpxo1dlvWhv3ihSmLt5TBc7b/HfefLGHdARUbNSXAWrEoZ FyKA77BJO4PA4A4eusxTkTOQTguvBfN8 -----END CERTIFICATE-----Generated at Sat Apr 26 04:56:36 2025 by rpki-client