$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: MRZpYSoBDJLJbwyvKUKOXofXUC4sfTezSc/6/yyCXqU= Subject key identifier: AD:EE:B8:7D:04:CD:13:B5:DD:09:CA:9D:A1:9D:A4:D5:1A:CB:07:03 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DD3 Signing time: Mon 30 Jun 2025 18:06:53 +0000 Manifest this update: Mon 30 Jun 2025 18:06:52 +0000 Manifest next update: Mon 07 Jul 2025 18:06:52 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: AvIkPn0W/UzQ0FS33PTYG5EGHj2RkuP2KSuJDQ7LpWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Jun 30 18:06:52 2025 GMT Not After : Jul 7 18:06:52 2025 GMT Subject: CN=6862d23d-4bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:d2:78:35:b2:7a:e9:02:f9:2e:8c:5f:14: 72:f4:2d:18:39:ac:0d:cd:69:f8:22:4b:a1:2d:43: 2c:b2:19:58:c3:9a:bf:8f:ae:b9:b6:69:37:04:6f: 3e:e2:22:2f:43:0b:9a:7c:e9:ad:14:f7:e7:6d:97: d8:e7:24:d0:8a:03:1d:5a:f9:0e:5b:f2:72:97:bf: 72:19:b5:71:70:ac:52:99:85:24:99:e4:18:09:04: 09:36:c2:27:e7:54:9a:18:6c:d4:22:2e:9d:09:3d: 3b:45:56:54:b0:d7:48:8c:30:a7:11:27:73:55:6d: d8:4e:b0:50:f3:2b:8a:71:8f:b2:47:75:bb:0f:f6: 65:a0:f3:73:f9:d3:db:0c:73:c7:45:fd:ce:ba:bd: f7:2a:3f:9a:bd:4d:7e:23:12:ea:84:e0:ba:ae:e6: af:a4:ba:4c:f7:a0:41:ef:80:ff:91:7c:03:d2:8f: 14:61:b3:e1:73:ce:5f:b1:00:3f:e8:98:f9:65:a1: df:c9:f7:df:cd:f9:82:b4:0a:15:2b:4d:94:7a:cf: a8:70:5f:28:d5:70:6f:8a:97:de:f2:33:0d:b3:4d: 81:e8:e2:58:71:e4:10:43:99:92:b0:4b:2d:0e:73: 11:b2:1c:01:db:b0:29:1f:81:e1:73:88:b1:f6:ee: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EE:B8:7D:04:CD:13:B5:DD:09:CA:9D:A1:9D:A4:D5:1A:CB:07:03 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f6:f1:c1:f0:8c:52:91:35:84:bc:9e:4a:dc:25:2b:49:3c: 11:a4:63:a6:b2:8c:b6:07:f5:d9:26:1e:bf:0b:c6:ed:ff:00: 2d:69:21:44:42:c1:a2:43:35:31:f9:37:a1:ef:92:7a:c3:a4: 9f:42:9a:b5:c8:85:e4:a8:51:ee:23:8e:ee:8f:c4:54:d7:92: 81:17:bc:fa:82:09:e1:d4:87:c8:fb:c3:ee:79:00:c9:78:fc: dd:a3:e8:b2:e4:06:22:67:b3:b2:00:9b:cc:96:7f:75:94:48: 35:90:46:6d:d2:cf:c2:1d:37:19:bd:3a:84:4d:88:ce:e9:71: b7:34:51:cd:42:ee:7d:15:91:45:22:66:b2:11:94:c3:bf:ba: 4d:c8:6f:bc:df:ee:d9:d3:bf:a4:74:fe:ce:fa:dc:86:64:a8: 1e:ff:d5:a4:a8:ff:65:2b:a5:dc:80:84:90:62:9b:34:6e:35: 1c:06:63:72:8f:22:8d:b7:80:0f:96:63:ea:58:53:0d:cc:56: 51:44:3f:cb:7c:d0:7c:b9:eb:b5:80:63:2d:73:0a:40:18:22: 0c:ba:2e:95:b5:7c:d3:82:57:6a:b7:1c:fd:12:56:1a:77:9b: c9:53:d3:7c:92:fe:27:11:95:bb:75:a3:f3:75:9a:78:97:68: 66:78:56:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwNjMwMTgwNjUyWhcNMjUwNzA3MTgwNjUyWjAYMRYwFAYD VQQDEw02ODYyZDIzZC00YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlTSeDWyeukC+S6MXxRy9C0YOawNzWn4IkuhLUMsshlYw5q/j665tmk3BG8+ 4iIvQwuafOmtFPfnbZfY5yTQigMdWvkOW/Jyl79yGbVxcKxSmYUkmeQYCQQJNsIn 51SaGGzUIi6dCT07RVZUsNdIjDCnESdzVW3YTrBQ8yuKcY+yR3W7D/ZloPNz+dPb DHPHRf3Our33Kj+avU1+IxLqhOC6ruavpLpM96BB74D/kXwD0o8UYbPhc85fsQA/ 6Jj5ZaHfyfffzfmCtAoVK02Ues+ocF8o1XBvipfe8jMNs02B6OJYceQQQ5mSsEst DnMRshwB27ApH4Hhc4ix9u5gkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3uuH0E zRO13QnKnaGdpNUaywcDMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl9vHB8IxSkTWEvJ5K3CUrSTwRpGOmsoy2B/XZJh6/C8bt/wAtaSFE QsGiQzUx+Teh75J6w6SfQpq1yIXkqFHuI47uj8RU15KBF7z6ggnh1IfI+8PueQDJ ePzdo+iy5AYiZ7OyAJvMln91lEg1kEZt0s/CHTcZvTqETYjO6XG3NFHNQu59FZFF ImayEZTDv7pNyG+83+7Z07+kdP7O+tyGZKge/9WkqP9lK6XcgISQYps0bjUcBmNy jyKNt4APlmPqWFMNzFZRRD/LfNB8ueu1gGMtcwpAGCIMui6VtXzTgldqtxz9ElYa d5vJU9N8kv4nEZW7daPzdZp4l2hmeFYC -----END CERTIFICATE-----Generated at Tue Jul 1 23:54:39 2025 by rpki-client