$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: EarQUAJXnZRlfiFf9seXXPLp89WA836hUEzWQLHyHzs= Subject key identifier: D4:1C:31:BD:9F:38:A2:7C:6A:47:F3:3E:1C:13:62:7A:32:46:71:AF Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DC1 Signing time: Fri 30 May 2025 18:05:15 +0000 Manifest this update: Fri 30 May 2025 18:05:14 +0000 Manifest next update: Fri 06 Jun 2025 18:05:14 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: MWA3be66RH5tpqeMiCxEBAQfEXwMZz1GR+Q8BcsLL80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: May 30 18:05:14 2025 GMT Not After : Jun 6 18:05:14 2025 GMT Subject: CN=6839f35b-7adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e4:cb:00:7c:c9:fe:c8:89:56:3c:ac:c6:f5: e5:b4:68:71:b1:54:4a:92:0b:38:5c:96:b2:ec:5c: 86:ce:9c:75:37:9a:42:5b:f6:8d:98:52:34:4a:cc: 65:77:94:94:ff:8f:fc:43:c3:e2:18:bb:41:d3:5f: 4d:2b:50:0d:90:f5:98:bb:c0:e7:1f:cd:26:de:d7: aa:55:6d:9e:2c:f6:3f:3d:15:0f:20:b5:5b:7f:2c: 99:c4:f2:3a:1c:cf:1a:c8:fd:2c:8a:7c:66:ec:d1: fb:44:4e:b3:47:e0:a0:9b:ae:78:bf:d8:7c:b5:28: d7:40:0e:3c:73:ae:1d:3c:c9:e4:67:5d:bb:e3:68: 25:c5:64:d7:69:b5:e1:32:c7:5f:9c:65:7a:9d:49: 52:3c:29:81:c0:fa:62:33:20:71:9b:1d:18:35:9a: d3:82:16:c9:08:46:08:d2:c2:a7:db:23:b6:64:ac: 7a:83:de:34:9f:5d:38:cc:ae:2e:88:ed:6e:3d:48: ea:66:d1:8c:2d:f1:54:56:8c:51:08:69:91:8f:d9: 9d:bf:1b:15:a3:2e:4f:32:ac:7e:71:e3:ad:db:49: bd:72:c5:38:e9:e2:74:a3:63:1f:e4:07:1f:13:7e: 40:3d:2d:dd:fa:8d:d2:a6:cb:3c:85:e2:c5:54:9d: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1C:31:BD:9F:38:A2:7C:6A:47:F3:3E:1C:13:62:7A:32:46:71:AF X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:fc:05:ea:9f:ef:1b:7b:fd:7d:9e:64:9a:09:ae:a3:46: ba:e9:c8:6b:96:c6:33:ec:4f:df:81:b2:55:3d:93:23:d8:42: 4e:37:b3:22:59:2a:d3:2d:fe:e6:77:c0:ee:69:db:c3:9b:d5: 38:43:17:d8:34:ed:2b:98:63:8a:8c:7c:c1:8f:17:85:f5:ef: 3a:b7:4d:c4:e7:76:2f:64:72:d5:73:6a:ea:c0:97:39:ed:16: 1a:9f:79:c0:09:73:0d:77:ee:b7:94:32:f2:65:48:a3:d7:3c: 27:5d:ed:b5:8c:6c:12:d8:26:ab:42:2f:b2:40:87:1f:67:b5: 96:be:8a:32:83:1a:b2:19:0e:c4:15:77:db:00:97:f6:8a:79: 45:d7:ae:22:02:1e:71:c0:ff:a0:27:95:21:a0:58:b9:f3:c4: e2:53:3c:86:0d:11:65:33:0a:0d:51:35:79:e3:03:c1:e7:ef: 5c:28:b8:3f:ac:89:1a:b0:65:02:02:fc:8d:18:46:b3:81:e9: ea:cc:e4:89:40:d1:06:b3:fc:d4:bf:2a:7e:7f:7e:d8:d5:c9: 51:f8:ac:1e:28:17:f6:4a:5c:86:d3:9f:6b:04:5a:d6:92:bf: 1c:ac:02:5b:82:65:b1:35:84:db:87:29:a8:92:62:30:68:cf: bf:85:f3:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwNTMwMTgwNTE0WhcNMjUwNjA2MTgwNTE0WjAYMRYwFAYD VQQDEw02ODM5ZjM1Yi03YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+TLAHzJ/siJVjysxvXltGhxsVRKkgs4XJay7FyGzpx1N5pCW/aNmFI0Ssxl d5SU/4/8Q8PiGLtB019NK1ANkPWYu8DnH80m3teqVW2eLPY/PRUPILVbfyyZxPI6 HM8ayP0sinxm7NH7RE6zR+Cgm654v9h8tSjXQA48c64dPMnkZ12742glxWTXabXh MsdfnGV6nUlSPCmBwPpiMyBxmx0YNZrTghbJCEYI0sKn2yO2ZKx6g940n104zK4u iO1uPUjqZtGMLfFUVoxRCGmRj9mdvxsVoy5PMqx+ceOt20m9csU46eJ0o2Mf5Acf E35APS3d+o3Spss8heLFVJ1gowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQcMb2f OKJ8akfzPhwTYnoyRnGvMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk9PwF6p/vG3v9fZ5kmgmuo0a66chrlsYz7E/fgbJVPZMj2EJON7Mi WSrTLf7md8DuadvDm9U4QxfYNO0rmGOKjHzBjxeF9e86t03E53YvZHLVc2rqwJc5 7RYan3nACXMNd+63lDLyZUij1zwnXe21jGwS2CarQi+yQIcfZ7WWvooygxqyGQ7E FXfbAJf2inlF164iAh5xwP+gJ5UhoFi588TiUzyGDRFlMwoNUTV54wPB5+9cKLg/ rIkasGUCAvyNGEazgenqzOSJQNEGs/zUvyp+f37Y1clR+KweKBf2SlyG059rBFrW kr8crAJbgmWxNYTbhymokmIwaM+/hfMb -----END CERTIFICATE-----Generated at Sat May 31 16:32:21 2025 by rpki-client