$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: PAKmKnZ/thZ6t3Zhp2yyJi+cMq0X9pe3B3T0+h9tvYQ= Subject key identifier: F5:36:72:B4:67:D0:7B:46:A2:F9:BB:E7:8C:C1:F5:03:AC:20:E0:07 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DEF Signing time: Sun 24 Aug 2025 17:50:23 +0000 Manifest this update: Sun 24 Aug 2025 17:50:23 +0000 Manifest next update: Sun 31 Aug 2025 17:50:23 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: bk2EgqrTBfiCxTu2RjKFb/Up6x1N2T5r6OJG0IbdA/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3579 (0xdfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Aug 24 17:50:23 2025 GMT Not After : Aug 31 17:50:23 2025 GMT Subject: CN=68ab50df-0ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:40:87:d1:27:b9:e9:db:74:a2:64:74:38: 14:0b:33:32:f7:58:22:7a:53:85:ae:81:1e:e7:e4: 0f:62:84:e4:fd:6a:56:56:bb:c3:24:59:5b:ea:41: 93:28:c0:32:ec:e5:74:5b:8c:f2:cb:0e:08:74:22: 29:f8:73:3c:13:47:94:47:03:29:d0:7f:8d:51:04: b7:f2:9c:a6:9d:67:a6:dc:e0:fa:ae:80:99:54:58: 9e:0a:27:f7:7d:81:62:33:d2:69:f2:5c:95:fe:d3: 67:55:95:1c:b0:ba:5e:3d:7d:ae:30:6a:00:03:9e: 32:55:eb:d4:e5:94:97:10:5e:aa:16:70:c7:f2:2b: 99:41:b6:16:70:b2:b7:56:7f:a2:a1:3f:25:d8:56: 8a:40:5d:25:7d:ad:80:c6:cc:39:46:76:b7:4f:01: 4c:f8:5e:5b:cb:55:a7:fa:0d:52:8f:65:61:c9:88: 29:fd:37:09:10:30:b3:07:d4:f1:6b:dd:86:f2:fb: 8c:59:c7:cb:bd:65:bb:31:ef:e0:6d:01:50:9d:8e: e1:e0:e1:53:a8:22:59:c4:0f:41:09:e9:fd:73:9b: fa:54:09:a3:9d:22:0f:97:f2:9f:ba:05:c2:d3:07: e1:da:a6:e3:cd:b4:5a:b8:d7:a1:c5:7a:e6:8a:3a: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:36:72:B4:67:D0:7B:46:A2:F9:BB:E7:8C:C1:F5:03:AC:20:E0:07 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:11:95:27:90:9b:65:4a:74:c4:f0:c2:30:f4:a2:a3:e0: 53:13:ad:72:32:57:ab:70:01:da:65:c1:63:e3:c0:ed:e7:10: ac:fb:a2:d1:9b:91:b2:a6:8c:a5:f8:18:2b:c8:54:83:39:46: 37:ee:cd:02:57:0f:a4:f3:2b:db:c4:4f:7a:2e:90:84:b3:46: 9b:bb:6c:e7:51:33:e3:8b:c1:d5:99:66:09:fe:92:38:c6:90: 01:67:51:35:06:5f:11:82:54:38:35:aa:a3:46:d7:22:de:68: ff:c7:69:11:58:7b:69:c7:4b:21:73:d3:5b:77:77:a4:11:f0: fc:f9:0a:5b:87:58:52:db:6a:62:2e:07:1d:13:78:14:b6:d1: 8d:92:fe:de:4d:5f:84:47:d7:fd:f2:ad:e2:5b:e9:54:b9:5c: af:ae:61:4a:b5:87:ab:9d:a3:29:24:82:6e:a0:24:59:6d:22: cf:14:a1:88:e1:ec:80:16:b5:82:4b:38:f7:42:53:4a:af:c3: a8:a7:90:74:c4:3c:91:0f:94:f7:2a:98:11:e9:2e:92:65:93: c4:da:ef:70:86:63:56:30:90:96:03:73:64:47:54:8b:0d:ba: 9c:da:7a:1f:e4:41:03:6a:9d:4e:39:38:0c:33:b8:fb:15:2c: 8a:4a:7a:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwODI0MTc1MDIzWhcNMjUwODMxMTc1MDIzWjAYMRYwFAYD VQQDEw02OGFiNTBkZi0wY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2itAh9EnuenbdKJkdDgUCzMy91gielOFroEe5+QPYoTk/WpWVrvDJFlb6kGT KMAy7OV0W4zyyw4IdCIp+HM8E0eURwMp0H+NUQS38pymnWem3OD6roCZVFieCif3 fYFiM9Jp8lyV/tNnVZUcsLpePX2uMGoAA54yVevU5ZSXEF6qFnDH8iuZQbYWcLK3 Vn+ioT8l2FaKQF0lfa2Axsw5Rna3TwFM+F5by1Wn+g1Sj2VhyYgp/TcJEDCzB9Tx a92G8vuMWcfLvWW7Me/gbQFQnY7h4OFTqCJZxA9BCen9c5v6VAmjnSIPl/KfugXC 0wfh2qbjzbRauNehxXrmijrIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU2crRn 0HtGovm754zB9QOsIOAHMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuRGVJ5CbZUp0xPDCMPSio+BTE61yMlercAHaZcFj48Dt5xCs+6LR m5Gypoyl+BgryFSDOUY37s0CVw+k8yvbxE96LpCEs0abu2znUTPji8HVmWYJ/pI4 xpABZ1E1Bl8RglQ4NaqjRtci3mj/x2kRWHtpx0shc9Nbd3ekEfD8+Qpbh1hS22pi LgcdE3gUttGNkv7eTV+ER9f98q3iW+lUuVyvrmFKtYernaMpJIJuoCRZbSLPFKGI 4eyAFrWCSzj3QlNKr8Oop5B0xDyRD5T3KpgR6S6SZZPE2u9whmNWMJCWA3NkR1SL Dbqc2nof5EEDap1OOTgMM7j7FSyKSnqT -----END CERTIFICATE-----Generated at Sun Aug 24 21:33:11 2025 by rpki-client