$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft File: psue-0_owcTgwvGwDoTH8aL0nG8.mft (raw, json) Hash identifier: Vyacwr73sXpIMKIdBVqLmEooiHFVt9Ekxcj3vlvve6w= Subject key identifier: 5E:54:25:EE:98:D6:21:E9:06:D2:2F:AB:97:AC:9E:6D:6E:34:4B:7C Authority key identifier: A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F Certificate issuer: /CN=A91AEE28/serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Certificate serial: 13AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft Manifest number: 13A6 Signing time: Mon 12 May 2025 16:53:32 +0000 Manifest this update: Mon 12 May 2025 16:53:32 +0000 Manifest next update: Mon 19 May 2025 16:53:32 +0000 Files and hashes: 1: psue-0_owcTgwvGwDoTH8aL0nG8.crl (hash: tSElHXd3G5alCjUwflM+lW8dQjEnryBqS6e3unp8NZM=) 2: 7BD0C11E8C3311EAB2E95132C4F9AE02.roa (hash: SD43F6ndbx8cQg58d8qyQwvKSbxddffft/0WNF7cCQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5039 (0x13af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE28, serialNumber=A6CB9EFB4FE8C1C4E0C2F1B00E84C7F1A2F49C6F Validity Not Before: May 12 16:53:32 2025 GMT Not After : May 19 16:53:32 2025 GMT Subject: CN=6822278c-54ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5b:4d:29:b5:b7:cc:95:79:88:b9:5c:79:97: b3:3a:9e:25:38:a5:6e:15:d0:67:0d:cd:48:90:2f: 0b:e2:63:f7:99:bd:6e:22:b1:c5:54:ea:9d:45:a6: 83:9e:96:5c:3e:64:7b:7d:4f:01:55:0a:c3:ef:06: e2:1e:aa:a7:54:ba:73:23:11:2f:12:e4:b6:0e:c7: 26:77:75:ae:11:8b:50:6f:a9:dd:2f:22:3c:70:fa: 05:ac:27:81:76:9e:51:01:98:18:03:55:67:c0:64: bc:14:ec:77:37:71:e2:80:9d:65:c3:37:a2:b2:13: 04:8b:17:69:36:6e:05:96:2b:50:03:a5:aa:54:b7: a6:32:65:71:ae:79:12:e3:08:b8:46:d6:fc:48:1e: 4c:ee:f0:f8:0e:42:d7:3b:6d:58:7e:df:e4:ba:6c: 48:19:25:d0:10:83:98:44:a5:e1:df:4b:c0:ee:51: 1e:14:df:4a:47:a9:89:61:04:c0:a1:d6:74:38:31: 2b:09:17:47:06:10:b1:5a:a6:bc:e9:26:a9:24:ba: 4d:c5:15:b7:8f:53:d3:fc:aa:c8:bb:6f:8e:a3:13: d7:51:46:4e:0c:2b:35:e6:db:a9:8c:64:12:f7:74: 90:b8:1d:c8:a5:74:9d:54:5a:2c:e9:b2:ac:d7:f5: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:54:25:EE:98:D6:21:E9:06:D2:2F:AB:97:AC:9E:6D:6E:34:4B:7C X509v3 Authority Key Identifier: keyid:A6:CB:9E:FB:4F:E8:C1:C4:E0:C2:F1:B0:0E:84:C7:F1:A2:F4:9C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/psue-0_owcTgwvGwDoTH8aL0nG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE28/F1B1FBB090C111E8A493397FC4F9AE02/psue-0_owcTgwvGwDoTH8aL0nG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:49:62:6c:8f:e1:df:8b:7a:80:46:45:ef:2e:a9:b6:8e:84: a7:f0:ef:13:a1:64:98:34:3e:19:18:5a:bc:cd:62:0c:c8:cb: 8d:bc:84:38:87:33:f1:89:b3:c3:e1:f5:07:95:7b:21:63:37: 0e:0f:1d:ed:42:54:24:2a:bf:3e:31:0b:25:94:e4:b2:21:a1: 45:ee:b1:e4:25:f1:cd:18:d1:dc:d2:64:2b:1c:5a:97:fb:24: 13:56:c9:36:cc:1b:3e:f9:5c:51:7e:ac:cd:92:6c:da:57:94: 14:21:88:65:df:3f:8b:2c:dc:70:6f:22:44:1c:28:a7:18:c2: 57:1c:4a:23:b1:f5:2f:29:67:15:af:47:0e:58:80:7a:bb:20: c4:67:77:14:9e:80:e2:1c:57:f5:92:35:7f:0d:ef:ed:07:ae: e7:e3:bf:bf:48:68:b6:5a:ba:79:68:92:92:7a:fa:36:26:0b: 8f:04:6b:6e:83:ee:8b:53:bf:ff:1c:68:f8:aa:7d:b4:b6:9e: ad:8a:2a:b9:26:a3:c3:98:f3:ae:6f:81:dd:7f:f5:74:c2:5c: 07:aa:6c:ca:c9:71:db:98:97:73:cc:5a:f2:cc:bf:34:d4:cf: e4:05:85:58:e2:9b:97:17:c6:5c:40:10:a2:73:99:df:d9:8e: 46:c6:ab:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjgxMTAvBgNVBAUTKEE2Q0I5RUZCNEZFOEMxQzRFMEMyRjFCMDBFODRDN0Yx QTJGNDlDNkYwHhcNMjUwNTEyMTY1MzMyWhcNMjUwNTE5MTY1MzMyWjAYMRYwFAYD VQQDEw02ODIyMjc4Yy01NGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8FtNKbW3zJV5iLlceZezOp4lOKVuFdBnDc1IkC8L4mP3mb1uIrHFVOqdRaaD npZcPmR7fU8BVQrD7wbiHqqnVLpzIxEvEuS2Dscmd3WuEYtQb6ndLyI8cPoFrCeB dp5RAZgYA1VnwGS8FOx3N3HigJ1lwzeishMEixdpNm4FlitQA6WqVLemMmVxrnkS 4wi4Rtb8SB5M7vD4DkLXO21Yft/kumxIGSXQEIOYRKXh30vA7lEeFN9KR6mJYQTA odZ0ODErCRdHBhCxWqa86SapJLpNxRW3j1PT/KrIu2+OoxPXUUZODCs15tupjGQS 93SQuB3IpXSdVFos6bKs1/XD1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5UJe6Y 1iHpBtIvq5esnm1uNEt8MB8GA1UdIwQYMBaAFKbLnvtP6MHE4MLxsA6Ex/Gi9Jxv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyOC9GMUIxRkJCMDkw QzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3djVGd3dkd3RG9USDhhTDBu RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BzdWUtMF9vd2NUZ3d2R3dEb1RIOGFMMG5HOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUUyOC9GMUIxRkJCMDkwQzExMUU4QTQ5MzM5N0ZDNEY5QUUwMi9wc3VlLTBfb3dj VGd3dkd3RG9USDhhTDBuRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4SWJsj+Hfi3qARkXvLqm2joSn8O8ToWSYND4ZGFq8zWIMyMuNvIQ4 hzPxibPD4fUHlXshYzcODx3tQlQkKr8+MQsllOSyIaFF7rHkJfHNGNHc0mQrHFqX +yQTVsk2zBs++VxRfqzNkmzaV5QUIYhl3z+LLNxwbyJEHCinGMJXHEojsfUvKWcV r0cOWIB6uyDEZ3cUnoDiHFf1kjV/De/tB67n47+/SGi2Wrp5aJKSevo2JguPBGtu g+6LU7//HGj4qn20tp6tiiq5JqPDmPOub4Hdf/V0wlwHqmzKyXHbmJdzzFryzL80 1M/kBYVY4puXF8ZcQBCic5nf2Y5Gxqso -----END CERTIFICATE-----Generated at Tue May 13 19:53:26 2025 by rpki-client