$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft File: SPodPo-G37CPuXQySFIkJqHK0TM.mft (raw, json) Hash identifier: bCaGu4s5utgYQSFOD8nXiytheD6nLb23zIR14tfWi1g= Subject key identifier: BF:CB:D9:68:11:A3:E2:59:E1:F4:44:49:F0:D0:6B:3C:99:70:DF:A8 Authority key identifier: 48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 Certificate issuer: /CN=A91EB095/serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Certificate serial: 0DBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft Manifest number: 0DB0 Signing time: Mon 28 Apr 2025 18:27:31 +0000 Manifest this update: Mon 28 Apr 2025 18:27:30 +0000 Manifest next update: Mon 05 May 2025 18:27:30 +0000 Files and hashes: 1: SPodPo-G37CPuXQySFIkJqHK0TM.crl (hash: 27Q+FhjC8HeZXoU/Zf1Q8iw9JFqc7cOWRIRemMwNE8s=) 2: B75F392ABBAC11E9A8355F6DC4F9AE02.roa (hash: 0jMzQhsvtT+qUl68nOM2Gp60rrkUVWzku2J5FkRAfww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3515 (0xdbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB095, serialNumber=48FA1D3E8F86DFB08FB9743248522426A1CAD133 Validity Not Before: Apr 28 18:27:30 2025 GMT Not After : May 5 18:27:30 2025 GMT Subject: CN=680fc892-ddd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:8c:22:ea:3e:05:31:4d:06:9d:b6:61:87: b8:a3:0f:8d:06:06:77:7c:75:68:11:47:4e:a7:62: 23:8a:7b:03:a8:57:31:83:e7:74:7b:d3:c3:70:86: 41:c5:be:f9:4e:84:0b:75:2b:52:7d:b3:69:d9:5e: 74:59:4c:53:a2:ba:ca:11:11:f1:a2:71:28:e4:fc: 49:87:7c:44:8c:15:77:0d:c8:06:35:2d:9c:b2:53: 22:8d:b1:5d:ef:0e:1f:49:f5:24:f6:1d:31:ec:df: 8e:71:17:c2:69:87:72:e8:88:20:d1:a3:dd:18:30: d6:c7:27:6c:8a:ef:8b:97:e4:3e:21:b7:69:8d:05: 5a:35:64:a5:03:a6:4e:23:71:bc:7c:2d:eb:75:c6: ce:46:f6:ac:ed:93:8e:50:e4:1c:0b:6c:a6:d9:9f: 11:b1:d7:7c:a9:c1:22:b2:b4:f0:e2:bd:5f:ac:a0: 7f:de:2d:cb:87:d6:5f:0d:33:2f:19:8a:ad:45:0d: 94:2a:40:d8:96:90:50:e5:a8:3e:65:8d:c0:9b:50: 93:e7:2a:b5:ef:9c:1b:96:28:49:f5:f3:7d:8c:b9: e7:8d:b4:9e:c1:d4:5a:ca:30:26:66:4b:84:ea:0a: 52:d3:ce:d9:05:3f:63:b7:39:f2:33:70:42:11:f0: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CB:D9:68:11:A3:E2:59:E1:F4:44:49:F0:D0:6B:3C:99:70:DF:A8 X509v3 Authority Key Identifier: keyid:48:FA:1D:3E:8F:86:DF:B0:8F:B9:74:32:48:52:24:26:A1:CA:D1:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPodPo-G37CPuXQySFIkJqHK0TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB095/B1316A92BBAB11E9A1F61B6CC4F9AE02/SPodPo-G37CPuXQySFIkJqHK0TM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:07:b9:cc:41:02:f7:0a:a3:1b:14:b6:b5:0f:0e:c8:d4:e9: 04:22:59:40:5e:e1:c6:a7:0b:9a:2c:43:07:3e:42:ca:28:b2: a1:49:b6:36:23:03:3d:74:9a:3f:9a:f8:d5:44:5b:01:5b:a8: f6:95:8b:53:56:35:4d:d2:54:5d:59:45:5e:35:ab:41:10:06: 60:74:a4:97:6d:e7:b7:9f:60:2a:ad:6b:f4:b2:4b:53:5d:02: 30:f5:c8:37:d2:46:b8:b9:f5:55:b8:5f:85:db:32:f3:78:49: aa:fb:84:20:ad:95:94:c7:41:d5:11:c5:14:36:e5:fc:63:b8: 11:c3:99:d2:75:50:3c:62:f8:89:4f:11:09:9f:3a:7c:ba:49: 0b:a5:05:53:2e:42:5d:ba:d2:d7:cb:5e:60:a1:2f:28:a0:fc: 6e:3a:f1:0c:35:8d:78:6d:66:4f:eb:71:e7:f2:25:1f:fd:74: c5:de:4f:75:4f:40:56:56:e7:66:bd:e6:b1:43:9c:57:e9:d3: d9:32:3f:0e:35:d0:85:85:f0:e0:7f:2d:e8:0e:29:ce:4b:0c: 6f:f4:70:76:07:f0:ec:55:d2:14:28:76:b5:bc:da:2e:f2:8e: 58:89:e8:5c:44:dc:67:0d:36:86:de:5f:c2:84:59:d7:eb:3e: 74:22:99:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwOTUxMTAvBgNVBAUTKDQ4RkExRDNFOEY4NkRGQjA4RkI5NzQzMjQ4NTIyNDI2 QTFDQUQxMzMwHhcNMjUwNDI4MTgyNzMwWhcNMjUwNTA1MTgyNzMwWjAYMRYwFAYD VQQDEw02ODBmYzg5Mi1kZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC6MIuo+BTFNBp22YYe4ow+NBgZ3fHVoEUdOp2IjinsDqFcxg+d0e9PDcIZB xb75ToQLdStSfbNp2V50WUxTorrKERHxonEo5PxJh3xEjBV3DcgGNS2cslMijbFd 7w4fSfUk9h0x7N+OcRfCaYdy6Igg0aPdGDDWxydsiu+Ll+Q+IbdpjQVaNWSlA6ZO I3G8fC3rdcbORvas7ZOOUOQcC2ym2Z8Rsdd8qcEisrTw4r1frKB/3i3Lh9ZfDTMv GYqtRQ2UKkDYlpBQ5ag+ZY3Am1CT5yq175wblihJ9fN9jLnnjbSewdRayjAmZkuE 6gpS087ZBT9jtznyM3BCEfDMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/L2WgR o+JZ4fRESfDQazyZcN+oMB8GA1UdIwQYMBaAFEj6HT6Pht+wj7l0MkhSJCahytEz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjA5NS9CMTMxNkE5MkJC QUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3Q1B1WFF5U0ZJa0pxSEsw VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQb2RQby1HMzdDUHVYUXlTRklrSnFISzBUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjA5NS9CMTMxNkE5MkJCQUIxMUU5QTFGNjFCNkNDNEY5QUUwMi9TUG9kUG8tRzM3 Q1B1WFF5U0ZJa0pxSEswVE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAB7nMQQL3CqMbFLa1Dw7I1OkEIllAXuHGpwuaLEMHPkLKKLKhSbY2 IwM9dJo/mvjVRFsBW6j2lYtTVjVN0lRdWUVeNatBEAZgdKSXbee3n2AqrWv0sktT XQIw9cg30ka4ufVVuF+F2zLzeEmq+4QgrZWUx0HVEcUUNuX8Y7gRw5nSdVA8YviJ TxEJnzp8ukkLpQVTLkJdutLXy15goS8ooPxuOvEMNY14bWZP63Hn8iUf/XTF3k91 T0BWVudmveaxQ5xX6dPZMj8ONdCFhfDgfy3oDinOSwxv9HB2B/DsVdIUKHa1vNou 8o5YiehcRNxnDTaG3l/ChFnX6z50Ipny -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:14 2025 by rpki-client on console.sobornost.net