
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json)
Hash identifier: bWIBaV3bDEEL4Xirw37H8Q+u4aEkmf4I2UQCtEWWzmc=
Subject key identifier: A9:4C:CE:19:8A:1C:0A:7F:23:83:11:C8:ED:49:7A:0E:EF:B0:4E:2F
Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
Certificate serial: 0ECC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
Manifest number: 0EC0
Signing time: Sun 20 Sep 2026 17:40:20 +0000
Manifest this update: Sun 20 Sep 2026 17:40:19 +0000
Manifest next update: Sun 27 Sep 2026 17:40:19 +0000
Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: GEAt5kd+SjP3l5Lq14wI8tOGHso/tDIDVuUnkNMyNqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl
rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3788 (0xecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133
Validity
Not Before: Sep 20 17:40:19 2026 GMT
Not After : Sep 27 17:40:19 2026 GMT
Subject: CN=6ab01a83-f375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3d:03:5f:35:31:88:2d:93:a5:67:9c:8c:b0:
73:c1:29:f2:56:2c:54:60:f8:9b:09:35:40:06:70:
5b:9d:a9:d0:81:2d:52:ba:ea:90:5d:a0:ce:75:fd:
ab:40:2b:f8:74:23:cd:32:b7:65:97:6f:75:e8:76:
79:a7:34:e5:8a:e8:c8:43:bd:87:65:98:e2:d5:cd:
f5:1e:dc:9e:5b:80:8c:31:97:e2:bb:4e:b4:25:75:
e0:13:19:bc:bd:b6:f9:52:47:a3:df:96:20:5f:89:
27:46:c2:45:9b:88:63:c9:90:84:01:90:40:f8:e6:
82:89:5c:ce:63:fe:46:02:14:0c:c7:db:43:cf:12:
ed:d6:8a:a3:14:c0:7c:8f:59:5d:a8:fb:5e:43:b2:
c3:1c:aa:85:4f:b7:d2:3f:0a:03:3f:86:ff:ce:71:
0e:16:83:b2:61:64:20:7e:86:ea:f2:96:b1:63:93:
13:65:c4:92:c4:06:a9:54:96:5f:69:76:92:b0:07:
c4:6f:37:00:94:2f:ed:43:c0:49:9b:df:4d:5a:8a:
b0:cf:1e:29:0b:fd:cb:b7:b8:07:95:4d:7d:e2:ac:
ad:03:ef:5b:25:16:1d:a6:00:82:66:8f:c9:d5:56:
ac:ca:6c:5c:6c:ba:a9:07:f9:96:91:3f:db:ef:7b:
05:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:CE:19:8A:1C:0A:7F:23:83:11:C8:ED:49:7A:0E:EF:B0:4E:2F
X509v3 Authority Key Identifier:
keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:48:42:a0:ff:50:2c:7d:dc:65:52:e7:5f:f3:9e:cf:0c:
40:47:7c:f7:f1:0b:2e:59:ce:a2:d2:13:cb:3c:7c:30:c0:5b:
e9:64:bd:53:64:f2:a5:98:f5:5e:e0:1f:6a:c6:40:eb:68:e2:
b0:0f:70:43:d6:99:ff:84:4e:bf:17:d3:14:08:0f:80:f5:90:
26:b1:55:bb:a5:32:46:dd:4f:80:8c:00:06:a3:99:f2:6a:4a:
c9:d0:a1:e3:7b:f8:5b:24:2e:ea:c0:69:9d:e1:1e:da:39:3e:
e3:0f:7e:10:c3:ea:af:73:8d:f5:2a:f7:7b:3d:1e:ec:92:d7:
46:37:6c:91:5d:45:9f:6c:56:a1:d4:7b:b5:28:df:d2:e3:d6:
4e:ae:c1:83:c8:6b:2f:3a:0d:57:9f:6a:b7:6e:57:95:15:ac:
4f:63:df:96:82:58:41:71:63:6d:83:2e:53:6e:d1:dc:3a:cd:
75:83:c4:33:5a:2c:f4:1f:34:6a:4d:94:3d:72:6b:27:20:80:
03:8e:c4:34:f1:ec:1c:4a:27:2b:b0:77:2a:09:67:24:a3:34:
cc:45:07:f1:41:b6:c2:e0:07:ef:a5:52:3d:74:a6:6d:9c:be:
df:3f:62:9e:e5:6a:2f:45:cf:b5:6c:f1:24:55:14:5c:f5:d1:
ad:9c:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:48:57 2026 by rpki-client