$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: f71KUhQjvBQ74MkETKBd6lKJwl4N7iFfbOCl9k6tQFA= Subject key identifier: 30:9D:BE:A9:BE:D2:A8:C3:D6:C4:79:93:85:30:84:34:8D:B2:83:EA Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DE5 Signing time: Mon 04 Aug 2025 18:05:37 +0000 Manifest this update: Mon 04 Aug 2025 18:05:37 +0000 Manifest next update: Mon 11 Aug 2025 18:05:37 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: M1yZDE0YaS28IMm/W2pYKPlGFqLmURcXdQu8oBs7O7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Aug 4 18:05:37 2025 GMT Not After : Aug 11 18:05:37 2025 GMT Subject: CN=6890f671-4c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:df:b4:5a:43:42:4c:05:70:57:36:bb:03: 9f:86:b4:a6:d0:92:f7:c8:65:d3:97:9a:df:70:5e: 6d:58:df:e6:96:e0:2a:39:e2:c3:5c:79:44:d4:4c: 51:6f:98:fd:5c:e7:00:41:32:3e:e3:fa:81:1a:ff: 10:0f:06:d8:26:c4:3b:a1:c4:42:9e:cf:77:fd:23: f5:38:01:a0:8f:67:60:1d:da:01:6f:a2:d0:d6:ec: e1:e6:8b:4e:13:62:12:36:90:4f:f6:42:2c:93:dc: 2f:45:30:80:1b:d5:a8:33:73:16:22:1d:93:6c:35: 9b:ec:ca:dc:0b:8f:f5:90:2c:80:aa:a2:5e:a9:d2: 68:2b:a7:fe:60:2a:fc:68:e9:51:04:ec:38:aa:1f: 8f:6b:4e:53:0e:b7:91:a7:2b:98:cd:1c:0a:86:0f: a8:4d:f6:3d:33:48:ab:c7:f7:11:16:f0:57:6f:59: b1:e1:99:9a:38:8c:e2:40:17:2c:5f:0e:5d:c0:8d: 41:30:b4:4a:a7:11:ff:af:58:f6:1f:00:88:16:b6: 5d:c2:95:cd:0b:98:29:9a:da:be:aa:9a:54:86:98: 54:6e:cd:88:53:6d:a3:66:6f:7a:93:3b:22:33:6f: 9c:5c:46:5f:85:8d:de:ce:b9:e5:dd:e7:bb:66:68: 69:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9D:BE:A9:BE:D2:A8:C3:D6:C4:79:93:85:30:84:34:8D:B2:83:EA X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f1:7d:5b:8c:13:69:95:a0:46:30:9a:4f:10:a5:b9:2c:cf: 35:6d:0b:fa:a5:41:c2:db:3d:95:e8:20:61:02:03:eb:83:91: ce:57:48:7c:64:e7:76:70:03:d4:47:9a:6c:6c:d4:d6:d3:4c: 7c:63:37:26:00:50:17:ee:2e:d4:5e:ad:2c:a4:c4:f9:11:18: 11:55:56:dd:bb:98:2a:03:50:cc:b9:a8:17:b4:21:c0:09:4a: ea:4a:ab:c5:12:5e:9f:a2:f1:97:d6:b3:8b:e0:b3:eb:93:ed: 0c:03:fe:c6:ad:bf:04:a7:b5:90:4e:23:57:e8:79:4c:3c:87: 77:f7:e9:6a:59:1a:e1:b6:42:55:d7:5d:64:b2:b4:48:c9:fd: 61:01:b6:c0:28:ed:41:72:be:cc:a2:47:c8:db:c8:04:5f:11: 71:45:90:8f:f5:c7:7c:fa:6d:77:a2:bc:aa:ce:03:8f:2b:95: 99:be:c2:e3:b5:fd:01:4d:38:cc:b3:71:b6:e8:6d:1e:ba:0b: 7b:31:35:b6:b6:82:fc:17:c6:01:a5:f3:c5:1c:ae:ca:5f:ec: ab:51:a2:ba:6b:39:19:c4:95:6a:83:69:82:c2:58:e1:ed:a0: 3d:d8:b0:cb:22:ce:27:1b:3b:15:66:e9:3b:5b:7b:e7:46:7b: 33:10:cd:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwODA0MTgwNTM3WhcNMjUwODExMTgwNTM3WjAYMRYwFAYD VQQDEw02ODkwZjY3MS00YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJ3ftFpDQkwFcFc2uwOfhrSm0JL3yGXTl5rfcF5tWN/mluAqOeLDXHlE1ExR b5j9XOcAQTI+4/qBGv8QDwbYJsQ7ocRCns93/SP1OAGgj2dgHdoBb6LQ1uzh5otO E2ISNpBP9kIsk9wvRTCAG9WoM3MWIh2TbDWb7MrcC4/1kCyAqqJeqdJoK6f+YCr8 aOlRBOw4qh+Pa05TDreRpyuYzRwKhg+oTfY9M0irx/cRFvBXb1mx4ZmaOIziQBcs Xw5dwI1BMLRKpxH/r1j2HwCIFrZdwpXNC5gpmtq+qppUhphUbs2IU22jZm96kzsi M2+cXEZfhY3ezrnl3ee7Zmhp8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCdvqm+ 0qjD1sR5k4UwhDSNsoPqMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK8X1bjBNplaBGMJpPEKW5LM81bQv6pUHC2z2V6CBhAgPrg5HOV0h8 ZOd2cAPUR5psbNTW00x8YzcmAFAX7i7UXq0spMT5ERgRVVbdu5gqA1DMuagXtCHA CUrqSqvFEl6fovGX1rOL4LPrk+0MA/7Grb8Ep7WQTiNX6HlMPId39+lqWRrhtkJV 111ksrRIyf1hAbbAKO1Bcr7MokfI28gEXxFxRZCP9cd8+m13oryqzgOPK5WZvsLj tf0BTTjMs3G26G0eugt7MTW2toL8F8YBpfPFHK7KX+yrUaK6azkZxJVqg2mCwljh 7aA92LDLIs4nGzsVZuk7W3vnRnszEM2p -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:29 2025 by rpki-client