$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: EsFePASC/0NdH5q1JWye1rDs8PksAdtv9JVEbtYVGnk= Subject key identifier: 8A:9E:B6:DD:28:AD:1E:6C:D4:FF:C1:ED:72:E7:61:35:18:6E:8A:58 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0CFE Signing time: Sat 18 May 2024 18:45:39 +0000 Manifest this update: Sat 18 May 2024 18:45:39 +0000 Manifest next update: Sat 25 May 2024 18:45:39 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: IgCNORaGNMztACuqnoSEdWiNE2pSeCJiVv3xaGhBw5A=) 2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: nQHZt5It8SSChaUZjXVPwYBj8P2XFpk/UxoBS65SjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: May 18 18:45:39 2024 GMT Not After : May 25 18:45:39 2024 GMT Subject: CN=6648f753-d15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:ba:23:5e:ee:90:d5:3f:51:15:ad:3b:b3: cb:23:9b:ce:0e:c6:37:f8:7b:f9:a7:0c:72:ad:ae: c0:e4:60:e9:26:72:50:6c:bf:19:3f:7b:58:ff:0e: 9d:eb:94:a0:34:4a:e8:81:33:3a:44:71:fd:7f:d3: 35:13:41:88:c5:71:c6:d0:72:a8:05:f3:bf:ba:fb: 20:89:9a:9b:6c:8c:a3:d2:9c:cd:20:b4:f3:0d:f9: 26:3d:34:a1:1a:bc:fb:26:46:04:f8:04:aa:42:2d: 3f:7b:3b:41:6a:44:60:12:ab:a8:67:2b:b6:57:ec: 3d:51:f8:75:0c:1d:23:12:be:d7:56:f1:06:64:ac: b8:e2:95:fc:31:d7:90:02:28:12:d4:36:55:43:1c: c5:2d:a4:1b:a6:ec:ab:44:6b:52:aa:5e:3c:4e:6c: 27:f8:15:90:39:f0:f4:0f:6a:37:a5:2b:a9:91:c3: 02:ca:30:66:88:48:b0:98:f9:47:33:b1:68:ad:53: 93:54:62:86:6e:47:de:5e:a9:4e:66:24:50:15:8f: 67:fd:56:00:0c:92:78:25:bd:0d:ce:5e:30:ec:98: 19:cb:1d:d3:b3:2d:9a:a7:32:a5:e6:52:89:45:e1: 11:22:95:20:8c:07:a1:96:19:7c:73:ac:ff:a3:66: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9E:B6:DD:28:AD:1E:6C:D4:FF:C1:ED:72:E7:61:35:18:6E:8A:58 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d4:8a:9a:7f:ec:57:5f:8f:93:ce:1e:c2:90:18:ab:9a:ae: 73:b4:ce:60:81:29:8c:2b:28:e6:a3:2a:ed:e8:b3:e1:8e:e4: d2:6b:43:61:83:f1:2f:17:22:dd:f2:b7:8e:bd:5b:70:2f:e7: 7f:2e:12:bf:bb:40:16:b4:49:22:06:0d:ac:29:28:32:21:af: 10:fa:85:bc:5b:1f:b6:5e:d1:81:25:95:35:a9:41:26:f7:35: f7:4e:6f:94:2d:21:a2:5d:49:06:b9:2b:9a:2b:5d:24:dd:10: 62:95:55:13:db:a1:af:bd:15:43:64:c7:11:a4:43:81:2c:49: db:92:bf:82:02:36:1b:74:70:2a:d4:f8:98:19:fd:d7:84:07: 65:43:0a:94:7d:c6:49:07:81:fe:4d:ad:51:db:10:d3:20:87: f1:f5:68:de:42:bb:54:4d:42:b5:1a:45:6c:1b:65:96:ef:93: ae:74:64:a5:d3:76:ab:21:4f:67:69:0b:40:d5:26:60:bc:d6: 66:43:02:41:5e:80:fe:39:33:3e:4e:e4:69:95:50:4c:df:36: 98:3f:e8:7a:e8:33:5c:4c:0a:40:41:fe:61:50:ed:c0:af:35: cb:46:8d:de:93:97:dd:4e:7f:c3:2a:be:a9:f2:c5:16:2f:52: b5:d7:2d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjQwNTE4MTg0NTM5WhcNMjQwNTI1MTg0NTM5WjAYMRYwFAYD VQQDEw02NjQ4Zjc1My1kMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpy6I17ukNU/URWtO7PLI5vODsY3+Hv5pwxyra7A5GDpJnJQbL8ZP3tY/w6d 65SgNErogTM6RHH9f9M1E0GIxXHG0HKoBfO/uvsgiZqbbIyj0pzNILTzDfkmPTSh Grz7JkYE+ASqQi0/eztBakRgEquoZyu2V+w9Ufh1DB0jEr7XVvEGZKy44pX8MdeQ AigS1DZVQxzFLaQbpuyrRGtSql48Tmwn+BWQOfD0D2o3pSupkcMCyjBmiEiwmPlH M7ForVOTVGKGbkfeXqlOZiRQFY9n/VYADJJ4Jb0Nzl4w7JgZyx3Tsy2apzKl5lKJ ReERIpUgjAehlhl8c6z/o2ZBFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqett0o rR5s1P/B7XLnYTUYbopYMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo1Iqaf+xXX4+Tzh7CkBirmq5ztM5ggSmMKyjmoyrt6LPhjuTSa0Nh g/EvFyLd8reOvVtwL+d/LhK/u0AWtEkiBg2sKSgyIa8Q+oW8Wx+2XtGBJZU1qUEm 9zX3Tm+ULSGiXUkGuSuaK10k3RBilVUT26GvvRVDZMcRpEOBLEnbkr+CAjYbdHAq 1PiYGf3XhAdlQwqUfcZJB4H+Ta1R2xDTIIfx9WjeQrtUTUK1GkVsG2WW75OudGSl 03arIU9naQtA1SZgvNZmQwJBXoD+OTM+TuRplVBM3zaYP+h66DNcTApAQf5hUO3A rzXLRo3ek5fdTn/DKr6p8sUWL1K11y0e -----END CERTIFICATE-----Generated at Sat May 18 19:21:05 2024 by rpki-client on console-fra.rpki-client.org