$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: PUMSeoB9Q4748K8MsYi1YdetiMEMzRVfWUU8ps+ifOE= Subject key identifier: D2:6A:AD:8D:4F:96:1F:9A:8E:09:73:D9:18:73:14:5F:98:6E:60:7F Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0E17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0E0B Signing time: Sat 18 Oct 2025 18:30:44 +0000 Manifest this update: Sat 18 Oct 2025 18:30:43 +0000 Manifest next update: Sat 25 Oct 2025 18:30:43 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: Z2sEbAgcONuMDFPyFCEtIkmBomKkHPPOSR7vqk7UVvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Oct 18 18:30:43 2025 GMT Not After : Oct 25 18:30:43 2025 GMT Subject: CN=68f3dcd3-e7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:e9:19:3f:c2:e0:02:39:0a:3c:ea:f1:8b: 8e:a7:34:88:62:1f:18:83:b9:0a:8b:7c:ff:86:a6: d6:36:d8:11:78:f1:d8:43:eb:96:0e:ab:ac:2b:8a: 2a:94:3f:34:b9:aa:ab:aa:52:e0:cc:7d:59:53:2c: f4:7b:3d:85:05:a5:ff:e3:c2:d3:1b:45:ab:0f:09: a3:89:ed:62:cf:cd:a5:73:28:5f:98:1e:be:93:65: 46:88:e7:33:d6:b4:22:8a:0b:a1:df:83:3f:b5:b2: 1c:4c:a1:b4:3e:c5:bf:2b:ae:15:60:df:9c:b4:74: cb:ba:75:2e:4d:42:dd:a5:68:b2:c0:a8:58:4c:4e: 8a:55:fd:5a:30:6e:83:6e:d9:53:97:77:e8:54:ad: 08:c6:75:32:9b:4e:d4:3e:3a:d9:54:79:9c:60:ba: 14:a2:96:8e:c1:61:c3:e8:a4:05:2f:d3:ee:6d:64: 49:4e:08:7c:22:af:0e:d5:7a:ba:42:b1:2f:aa:a4: a6:93:7f:90:e6:d2:7a:48:c4:1f:c5:06:55:ab:a3: 9c:54:f5:59:e8:51:14:05:38:22:f6:a0:3b:1c:cd: 15:71:ca:cd:2f:40:85:34:1a:bc:03:f0:24:71:49: de:09:32:8c:3a:33:dd:88:9c:1a:5a:40:f4:ae:ec: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6A:AD:8D:4F:96:1F:9A:8E:09:73:D9:18:73:14:5F:98:6E:60:7F X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:90:1d:ee:69:64:01:06:aa:b0:5b:2e:f5:1d:0f:35:61:48: a7:9c:fb:80:a7:46:15:e9:89:18:fe:f5:ec:8f:26:b7:93:43: f5:a9:76:49:35:29:16:07:8f:11:82:ae:60:4c:f1:b9:ed:00: 69:6a:68:c7:23:d2:b3:4a:cf:b1:de:46:4a:e8:da:0f:dc:b2: 0a:cb:af:64:09:c0:d6:5b:da:8d:78:88:a5:86:39:55:f8:00: 01:0c:24:68:7d:27:65:2b:b3:e8:1a:85:86:af:6c:c5:b3:ad: 99:b7:a2:e2:bd:87:1b:db:b0:53:22:99:cf:b2:da:3d:90:76: a4:51:ba:47:27:94:0f:27:08:62:c2:9f:33:4f:fd:b5:19:88: cc:55:b3:da:51:f6:71:41:af:be:18:df:12:91:59:b1:64:2b: d1:91:f6:af:fb:ca:63:fb:e6:c0:66:d9:da:ac:fa:b2:1a:c9: 74:ac:9f:5c:1e:12:52:20:7a:e8:15:ab:34:ba:55:f7:d0:70: eb:be:06:f2:1b:35:4a:75:4c:e3:51:dd:c4:50:6e:f9:4c:d1: 46:58:bf:6f:7d:1c:7a:bd:61:2b:6f:a1:6a:55:b8:ad:d0:08: 68:0e:a2:19:75:6c:4f:a8:80:2d:f7:e1:f8:2f:71:0a:c6:7b: 86:4d:f5:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUxMDE4MTgzMDQzWhcNMjUxMDI1MTgzMDQzWjAYMRYwFAYD VQQDEw02OGYzZGNkMy1lN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdLpGT/C4AI5Cjzq8YuOpzSIYh8Yg7kKi3z/hqbWNtgRePHYQ+uWDqusK4oq lD80uaqrqlLgzH1ZUyz0ez2FBaX/48LTG0WrDwmjie1iz82lcyhfmB6+k2VGiOcz 1rQiiguh34M/tbIcTKG0PsW/K64VYN+ctHTLunUuTULdpWiywKhYTE6KVf1aMG6D btlTl3foVK0IxnUym07UPjrZVHmcYLoUopaOwWHD6KQFL9PubWRJTgh8Iq8O1Xq6 QrEvqqSmk3+Q5tJ6SMQfxQZVq6OcVPVZ6FEUBTgi9qA7HM0VccrNL0CFNBq8A/Ak cUneCTKMOjPdiJwaWkD0ruwRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJqrY1P lh+ajglz2RhzFF+YbmB/MB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgkB3uaWQBBqqwWy71HQ81YUinnPuAp0YV6YkY/vXsjya3k0P1qXZJ NSkWB48Rgq5gTPG57QBpamjHI9KzSs+x3kZK6NoP3LIKy69kCcDWW9qNeIilhjlV +AABDCRofSdlK7PoGoWGr2zFs62Zt6LivYcb27BTIpnPsto9kHakUbpHJ5QPJwhi wp8zT/21GYjMVbPaUfZxQa++GN8SkVmxZCvRkfav+8pj++bAZtnarPqyGsl0rJ9c HhJSIHroFas0ulX30HDrvgbyGzVKdUzjUd3EUG75TNFGWL9vfRx6vWErb6FqVbit 0AhoDqIZdWxPqIAt9+H4L3EKxnuGTfVj -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:15 2025 by rpki-client