$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: MmzzkbDng4wqY1zDqSjevYfI2hLH9+GWWEQpeJ+qI2I= Subject key identifier: A7:A3:79:02:E7:D9:17:64:A0:F3:1E:4E:B0:22:55:82:F3:4B:89:66 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DEE Signing time: Fri 22 Aug 2025 17:59:37 +0000 Manifest this update: Fri 22 Aug 2025 17:59:37 +0000 Manifest next update: Fri 29 Aug 2025 17:59:37 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: sStwvkxPhojK34V71gcDQSXT2OJE6Zap0aWoQdEj4Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3578 (0xdfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Aug 22 17:59:37 2025 GMT Not After : Aug 29 17:59:37 2025 GMT Subject: CN=68a8b009-52bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:08:e0:25:6d:18:60:af:fb:9a:1d:94:1a: 2b:57:a4:9e:27:36:0a:dd:2b:f9:17:05:9c:e3:4f: 06:64:5c:24:6b:d2:28:99:a1:3b:17:a4:07:f1:19: 3e:ba:0a:d4:1e:b6:df:7c:b0:88:fc:ea:4b:01:7f: f4:f3:01:f1:e4:4a:8d:a4:4f:33:02:e3:9e:17:9f: 26:fa:3a:ef:eb:27:dd:68:4e:7d:5e:ad:d9:a2:8b: 99:0e:1a:f0:76:72:8a:19:b8:60:d1:b1:16:62:94: 44:ec:52:13:8d:79:6d:e4:3c:7b:7e:b5:a5:ef:e4: dd:3f:03:83:e9:1a:32:48:1a:dc:16:07:41:3a:f8: 27:ac:22:e4:28:30:97:33:7a:90:bc:d0:1a:da:9d: 95:9c:3b:ff:32:f6:80:98:d0:af:10:7c:8c:54:fa: cf:fb:d8:40:41:1b:5d:49:00:d7:b2:be:28:39:e6: f3:e3:ae:2f:b8:da:4a:70:35:bf:fc:5b:4b:72:14: 7a:3c:12:64:1f:5a:e2:2d:97:d1:53:da:c2:95:7f: 99:b4:77:46:26:17:59:f1:f7:7d:27:6e:9b:e6:ed: 78:e1:59:e6:98:e4:0a:15:10:c7:1e:a3:c4:64:71: 75:1d:82:9d:d2:ed:d7:1b:14:b2:b7:f3:f3:a2:99: 38:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:79:02:E7:D9:17:64:A0:F3:1E:4E:B0:22:55:82:F3:4B:89:66 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:be:a2:6f:a1:01:76:61:b2:5e:90:c5:6f:9e:04:2d:cc:4a: 85:0c:f2:93:db:fe:03:75:70:65:d4:2c:62:fa:10:88:cd:7a: 62:0b:ae:ab:87:55:5f:ca:79:cf:a9:4b:9f:17:1f:b2:7a:f9: 8e:c6:08:f9:61:4d:33:3a:f8:83:0e:c3:64:8e:28:5c:39:0e: 5f:3a:60:07:cd:62:01:8a:48:a8:ef:6d:25:68:32:19:a4:b0: 3f:ff:fd:99:6f:a1:57:3c:6d:33:4b:08:07:4e:93:b1:5a:f1: 5f:f8:91:d5:ca:da:63:2c:9d:84:26:6c:c5:2b:da:01:99:6c: 3c:ab:10:7c:eb:ae:f9:01:40:66:fd:60:2b:e8:04:cb:43:f6: 68:d1:6e:83:8d:3b:78:ad:7a:bc:78:f6:23:7a:1c:dc:5a:2f: fc:b4:87:63:ba:fe:c4:44:25:4e:25:02:5a:10:ce:a6:32:88: bd:9b:b7:e6:06:b5:a0:3a:94:b7:c0:c8:35:0d:77:16:a9:79: 3e:0d:d1:d6:c5:be:a2:d5:ef:31:95:7f:c6:ae:1b:cb:21:84: 92:15:fe:03:06:07:4e:0a:1f:ee:26:77:77:f1:7f:d5:11:0a: 87:79:d2:58:a9:fa:cc:eb:32:5d:0c:ec:65:ca:74:43:46:f5: 52:a3:9e:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwODIyMTc1OTM3WhcNMjUwODI5MTc1OTM3WjAYMRYwFAYD VQQDEw02OGE4YjAwOS01MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtgI4CVtGGCv+5odlBorV6SeJzYK3Sv5FwWc408GZFwka9IomaE7F6QH8Rk+ ugrUHrbffLCI/OpLAX/08wHx5EqNpE8zAuOeF58m+jrv6yfdaE59Xq3ZoouZDhrw dnKKGbhg0bEWYpRE7FITjXlt5Dx7frWl7+TdPwOD6RoySBrcFgdBOvgnrCLkKDCX M3qQvNAa2p2VnDv/MvaAmNCvEHyMVPrP+9hAQRtdSQDXsr4oOebz464vuNpKcDW/ /FtLchR6PBJkH1riLZfRU9rClX+ZtHdGJhdZ8fd9J26b5u144VnmmOQKFRDHHqPE ZHF1HYKd0u3XGxSyt/Pzopk4/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKejeQLn 2RdkoPMeTrAiVYLzS4lmMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbvqJvoQF2YbJekMVvngQtzEqFDPKT2/4DdXBl1Cxi+hCIzXpiC66r h1VfynnPqUufFx+yevmOxgj5YU0zOviDDsNkjihcOQ5fOmAHzWIBikio720laDIZ pLA///2Zb6FXPG0zSwgHTpOxWvFf+JHVytpjLJ2EJmzFK9oBmWw8qxB86675AUBm /WAr6ATLQ/Zo0W6DjTt4rXq8ePYjehzcWi/8tIdjuv7ERCVOJQJaEM6mMoi9m7fm BrWgOpS3wMg1DXcWqXk+DdHWxb6i1e8xlX/GrhvLIYSSFf4DBgdOCh/uJnd38X/V EQqHedJYqfrM6zJdDOxlynRDRvVSo555 -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:29 2025 by rpki-client