$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: rKb7NS79F/f6vn/ZU0EkjfpSL6YlFkT4PYnl1Idzl3w= Subject key identifier: C9:12:67:FE:FA:A6:31:7B:CF:6F:95:AE:DF:C4:6B:85:30:9F:2F:4E Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0D00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0CF6 Signing time: Thu 02 May 2024 19:07:37 +0000 Manifest this update: Thu 02 May 2024 19:07:37 +0000 Manifest next update: Thu 09 May 2024 19:07:37 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: sCjYJLRWe6OHbElsKu72m/3xxhWhVgDMDPfqBnj+pKQ=) 2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: nQHZt5It8SSChaUZjXVPwYBj8P2XFpk/UxoBS65SjME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 18:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3328 (0xd00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: May 2 19:07:37 2024 GMT Not After : May 9 19:07:37 2024 GMT Subject: CN=6633e479-4c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:be:c3:06:2a:a5:ce:c7:fc:b6:30:a2:ee:ab: 66:08:77:c3:06:45:ff:14:ae:7c:f3:5b:26:ca:a2: ad:e8:ef:db:a2:33:07:6c:78:cc:d7:51:65:6f:98: 13:dc:d5:95:af:12:32:20:ed:47:84:b1:57:01:5e: f0:dd:2c:ff:f9:02:ab:f1:30:78:34:d6:ca:e5:8a: 6b:85:fd:b4:16:0b:4f:fd:9c:73:d3:7b:79:7e:47: db:26:14:b5:68:2e:c9:56:17:35:10:1e:0a:82:20: 04:8b:43:6c:4a:fd:1a:18:00:10:8c:2a:8e:cc:9c: fc:72:0f:f1:16:30:2e:ec:ab:1f:e1:6c:65:eb:d9: 4d:86:d1:8a:a2:7c:53:a7:42:20:8a:fa:9d:85:47: 9e:da:91:1f:a6:c1:37:f9:7e:42:14:f9:60:72:20: 36:38:21:99:2b:4b:19:6f:1c:a9:8c:00:c1:c8:a8: b3:51:e6:0d:da:5f:8f:94:81:4c:86:ac:f9:ac:88: 75:ee:ef:47:8f:13:0b:77:db:cd:27:69:0d:23:fb: ae:6d:a7:c3:a1:ff:98:21:59:dd:27:12:62:e3:65: 0a:b2:23:a4:83:4d:03:12:f4:31:65:e3:81:47:19: ca:27:e6:8c:43:67:0d:da:0e:c3:e3:aa:76:3d:dd: d5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:12:67:FE:FA:A6:31:7B:CF:6F:95:AE:DF:C4:6B:85:30:9F:2F:4E X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7b:6a:a2:9c:8b:e4:23:50:e6:ee:a0:65:fb:3f:31:f7:25: 53:c0:29:bd:da:43:75:92:d7:e0:b0:24:53:da:48:67:e7:25: a1:ed:98:d3:59:24:4e:56:e6:8b:ed:69:99:24:59:7c:10:0e: 39:3d:5d:aa:11:15:d9:3a:4e:b2:2a:6f:f6:a9:ee:6c:0b:ae: 8f:8a:da:a5:43:e6:22:d2:ee:24:cd:16:02:06:0d:52:ef:fa: db:72:e5:3b:58:22:75:29:64:aa:49:b3:7f:ad:56:4a:e2:51: 2f:df:3c:e7:26:b2:08:ba:0c:c6:a0:4f:09:67:38:f5:ce:7a: 1d:aa:b3:9c:26:10:a1:d4:0c:3e:15:2f:05:dd:4a:e4:f3:08: 12:a4:3e:d6:cd:e2:67:27:47:33:93:fb:c1:22:dd:35:e4:ef: 71:a1:30:8b:22:98:0a:77:17:e7:26:89:94:36:ca:3f:0f:f1: a8:e7:63:e4:07:b5:8d:6a:52:0b:8c:61:7e:a2:02:b1:d4:2d: 1d:c6:13:f1:fe:d0:d0:ec:bc:14:61:cc:4e:a9:ce:63:09:03: 0a:74:2e:c1:6c:53:eb:7c:9c:35:15:94:9f:62:82:56:24:16: 7e:05:d1:4c:ef:05:0d:c6:4b:00:24:54:bb:fb:d7:72:3c:9b: 5c:6e:37:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjQwNTAyMTkwNzM3WhcNMjQwNTA5MTkwNzM3WjAYMRYwFAYD VQQDEw02NjMzZTQ3OS00Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzL7DBiqlzsf8tjCi7qtmCHfDBkX/FK5881smyqKt6O/bojMHbHjM11Flb5gT 3NWVrxIyIO1HhLFXAV7w3Sz/+QKr8TB4NNbK5Yprhf20FgtP/Zxz03t5fkfbJhS1 aC7JVhc1EB4KgiAEi0NsSv0aGAAQjCqOzJz8cg/xFjAu7Ksf4Wxl69lNhtGKonxT p0IgivqdhUee2pEfpsE3+X5CFPlgciA2OCGZK0sZbxypjADByKizUeYN2l+PlIFM hqz5rIh17u9HjxMLd9vNJ2kNI/uubafDof+YIVndJxJi42UKsiOkg00DEvQxZeOB RxnKJ+aMQ2cN2g7D46p2Pd3VJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkSZ/76 pjF7z2+Vrt/Ea4Uwny9OMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBre2qinIvkI1Dm7qBl+z8x9yVTwCm92kN1ktfgsCRT2khn5yWh7ZjT WSROVuaL7WmZJFl8EA45PV2qERXZOk6yKm/2qe5sC66PitqlQ+Yi0u4kzRYCBg1S 7/rbcuU7WCJ1KWSqSbN/rVZK4lEv3zznJrIIugzGoE8JZzj1znodqrOcJhCh1Aw+ FS8F3Urk8wgSpD7WzeJnJ0czk/vBIt015O9xoTCLIpgKdxfnJomUNso/D/Go52Pk B7WNalILjGF+ogKx1C0dxhPx/tDQ7LwUYcxOqc5jCQMKdC7BbFPrfJw1FZSfYoJW JBZ+BdFM7wUNxksAJFS7+9dyPJtcbjc1 -----END CERTIFICATE-----Generated at Thu May 2 20:05:01 2024 by rpki-client on console-ams.rpki-client.org