$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: t9dbtzYMggH1Vn+nFDcyxZ7c/jgouXxdU55c96UOBBI= Subject key identifier: B5:B0:6D:4D:A8:1E:35:29:E3:D1:99:12:60:53:41:1D:7B:AB:FD:1A Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0E20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0E14 Signing time: Tue 04 Nov 2025 17:55:35 +0000 Manifest this update: Tue 04 Nov 2025 17:55:34 +0000 Manifest next update: Tue 11 Nov 2025 17:55:34 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: XAOLbIjP4cFyjTXekfH92nFsyGYSTjM3z09ia4Dw3ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3616 (0xe20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Nov 4 17:55:34 2025 GMT Not After : Nov 11 17:55:34 2025 GMT Subject: CN=690a3e17-329f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:af:1b:9e:71:a8:24:f3:6a:fa:09:2b:ed: b8:b4:11:19:0a:e5:8c:e6:ec:e9:f8:9f:eb:7b:9f: 28:39:7e:e6:08:65:e8:f3:36:b8:ed:57:d8:d1:6f: 90:1a:14:7e:55:b4:50:68:8d:fa:45:62:fa:52:9c: 1e:fd:d3:d6:5d:6a:d6:57:ba:86:ae:b5:32:e8:14: cf:8c:55:27:87:b3:77:a2:0f:1c:d5:4e:e6:88:6b: e1:fd:fd:cc:b4:1f:4c:6d:f6:d1:4f:c8:36:e3:c8: 43:b4:e2:cf:6a:e0:65:6b:90:e3:7b:9c:47:bf:76: 11:0e:d7:7a:f7:8f:48:18:40:64:37:8a:58:f0:50: 9c:b0:f0:9f:89:e8:14:f6:f7:5b:f6:69:2f:0e:d5: 4f:e3:48:d1:d4:b3:d7:61:9e:ff:d0:f5:55:7c:2b: 50:f8:f8:dd:7d:45:c7:62:c8:4b:5b:92:c4:ff:20: 0f:fe:5e:dc:06:4c:28:36:69:7f:5f:0c:a3:b8:a1: 26:d7:6c:60:fe:06:c1:04:b8:62:63:b5:f7:0c:e7: 36:73:e0:8e:be:4d:53:a4:1b:17:43:74:b3:e6:b9: 95:5b:85:04:24:e3:3e:8f:90:75:79:88:81:ef:5a: 66:db:15:93:15:ff:59:a8:f1:78:a6:3c:83:a8:5f: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:6D:4D:A8:1E:35:29:E3:D1:99:12:60:53:41:1D:7B:AB:FD:1A X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:67:9a:a7:ff:4c:7f:57:7a:50:d8:ff:31:e2:4c:51:54:9a: 04:63:e9:7f:a9:09:df:e8:b8:e2:50:a6:53:54:31:d1:d2:e3: 3c:fc:b2:78:fa:8e:79:ef:a1:f8:03:e5:3c:a7:13:fa:e4:bb: 64:36:ed:5d:bd:6a:f6:4f:b6:ad:ea:73:db:16:76:25:40:76: c1:4a:3e:d5:a7:ac:2a:40:02:80:ca:6b:47:e0:c0:45:73:2a: 4c:d8:31:93:42:8c:19:d5:c5:0a:e5:c6:67:7a:25:28:71:28: a1:24:3b:4c:14:8d:4f:10:53:92:f9:d7:c4:f3:ed:e8:e0:ac: ba:c3:27:4e:7f:07:0e:fa:65:e8:ab:6c:60:a9:bb:17:4b:a3: af:55:b8:d9:67:7a:7c:ae:5e:2f:88:0c:48:18:63:7f:c7:4e: d4:89:5b:6b:80:89:5a:fc:fb:f7:d6:36:97:e0:cb:49:a9:3f: 97:f0:f0:13:33:3d:e9:a7:4d:85:d4:45:e0:6b:23:f2:55:48: c3:40:de:56:90:f0:71:a3:63:a4:27:b0:06:c6:99:76:1b:9d: 05:9d:8c:e6:0c:7b:c5:be:49:a0:13:70:ac:36:54:2c:c7:54: f1:b7:2b:be:72:ab:a6:99:7c:89:fd:dc:cf:d7:85:60:5d:a2: 9b:f5:41:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUxMTA0MTc1NTM0WhcNMjUxMTExMTc1NTM0WjAYMRYwFAYD VQQDEw02OTBhM2UxNy0zMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh6vG55xqCTzavoJK+24tBEZCuWM5uzp+J/re58oOX7mCGXo8za47VfY0W+Q GhR+VbRQaI36RWL6Upwe/dPWXWrWV7qGrrUy6BTPjFUnh7N3og8c1U7miGvh/f3M tB9MbfbRT8g248hDtOLPauBla5Dje5xHv3YRDtd6949IGEBkN4pY8FCcsPCfiegU 9vdb9mkvDtVP40jR1LPXYZ7/0PVVfCtQ+PjdfUXHYshLW5LE/yAP/l7cBkwoNml/ XwyjuKEm12xg/gbBBLhiY7X3DOc2c+COvk1TpBsXQ3Sz5rmVW4UEJOM+j5B1eYiB 71pm2xWTFf9ZqPF4pjyDqF8Y/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWwbU2o HjUp49GZEmBTQR17q/0aMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZ5qn/0x/V3pQ2P8x4kxRVJoEY+l/qQnf6LjiUKZTVDHR0uM8/LJ4 +o5576H4A+U8pxP65LtkNu1dvWr2T7at6nPbFnYlQHbBSj7Vp6wqQAKAymtH4MBF cypM2DGTQowZ1cUK5cZneiUocSihJDtMFI1PEFOS+dfE8+3o4Ky6wydOfwcO+mXo q2xgqbsXS6OvVbjZZ3p8rl4viAxIGGN/x07UiVtrgIla/Pv31jaX4MtJqT+X8PAT Mz3pp02F1EXgayPyVUjDQN5WkPBxo2OkJ7AGxpl2G50FnYzmDHvFvkmgE3CsNlQs x1Txtyu+cqummXyJ/dzP14VgXaKb9UFr -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:45 2025 by rpki-client